Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0e240caf-077c-362f-86ad-408673d0f77b.roa
File:                     0e240caf-077c-362f-86ad-408673d0f77b.roa (raw, json)
Hash identifier:          MGx75nufMg0msam6bRIdVGfgglVfVsjv6ceT0savdZA=
Subject key identifier:   F0:65:EC:4E:5A:64:20:AC:3D:D6:A7:A5:17:3C:70:2E:FA:20:A1:39
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F23C24B0CE4650487DF922AC0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0e240caf-077c-362f-86ad-408673d0f77b.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     212669
IP address blocks:        74.1.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:4b:0c:e4:65:04:87:df:92:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=3b0f20f8-2e0b-4962-91dc-d16b70f062ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1f:c6:2e:1b:10:80:fe:e6:d6:80:49:52:0d:
                    1f:c4:2b:83:97:8e:52:4d:a7:fc:05:37:2e:42:87:
                    dd:d8:f0:25:9a:00:b7:39:39:c8:97:84:7b:65:bc:
                    70:64:b4:57:07:bb:d8:5a:7f:8d:07:7b:dc:36:72:
                    d0:15:42:e5:c3:eb:d1:52:1b:93:c5:93:1b:e3:f7:
                    f2:21:17:80:86:b9:3f:13:c9:28:a0:8d:e0:63:e4:
                    91:ad:d3:79:9b:91:89:01:e6:bd:d6:22:b7:f2:c4:
                    6b:1d:2a:78:64:a9:46:96:d7:86:45:9c:d4:c1:9a:
                    41:58:6a:53:52:20:38:fb:e3:4c:ec:35:0e:7c:1f:
                    09:a6:82:e2:24:11:7d:09:ec:83:c0:b4:a1:c3:98:
                    0e:3a:15:b0:a5:bc:75:7b:5b:ae:85:5d:12:c3:e8:
                    93:ae:35:f9:ab:26:8b:41:2f:f5:7b:9a:b1:33:d5:
                    34:ff:12:9a:cf:a6:c6:0d:18:bc:97:a3:da:4c:a3:
                    cb:1c:b6:85:d1:b5:04:97:8a:81:f8:07:f1:0a:45:
                    99:6c:72:32:bc:61:c6:01:6a:7a:40:0f:a2:66:e9:
                    52:bd:83:73:d1:35:19:d5:f7:21:38:c5:29:b1:64:
                    89:36:24:b9:b2:42:ae:91:da:cb:4b:79:84:d2:0f:
                    af:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:65:EC:4E:5A:64:20:AC:3D:D6:A7:A5:17:3C:70:2E:FA:20:A1:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0e240caf-077c-362f-86ad-408673d0f77b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:19:ba:91:20:6e:02:db:21:68:95:b1:cc:37:8e:ab:5e:1d:
         5d:61:33:33:a8:88:3a:10:e1:0f:6d:cd:60:54:40:47:03:1c:
         a3:b3:0e:f9:fe:81:c2:80:54:7c:de:88:07:98:5c:9c:fb:69:
         e6:d4:4d:fc:b2:43:ff:d7:db:14:dc:04:c9:cd:8e:39:4d:94:
         42:c8:39:0d:77:05:48:a9:8a:a6:c2:22:59:d7:a9:14:44:86:
         f3:a3:53:3f:34:20:6a:73:0e:02:52:82:a0:81:91:c1:56:7e:
         40:7e:08:9d:8a:34:e5:98:b1:55:8c:72:a3:36:1c:9b:fd:7c:
         d6:be:38:05:81:09:b9:e6:f4:d3:e3:dc:5d:48:7b:a9:be:ff:
         c1:b4:ec:c5:df:4b:41:f6:c6:97:be:ab:5a:4c:be:e8:04:af:
         48:7a:ea:c3:0c:70:a6:28:4b:8e:ba:57:b6:6c:0e:3d:96:93:
         30:c3:74:81:34:9d:fd:fa:3e:41:5b:da:4b:dd:7b:ed:bd:dd:
         78:6e:2c:31:e9:df:77:d3:fd:04:c3:cf:cb:1f:2a:33:43:81:
         48:e0:8e:76:be:08:52:16:a3:ad:5f:14:6a:c2:c3:45:47:45:
         0f:cf:3d:21:74:b2:8c:72:44:c6:06:d1:17:90:3c:36:8d:f7:
         c8:5f:e3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:24:21 2026 by rpki-client