Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2346233d-f9d5-32b9-baf6-b0afd08c021c.roa
File:                     2346233d-f9d5-32b9-baf6-b0afd08c021c.roa (raw, json)
Hash identifier:          qU+Rma16r9cPMCfnnqcG2bySqdqdK70A/uqRC5xPbbY=
Subject key identifier:   E2:14:7F:5F:FC:79:7C:BA:A9:FB:A4:64:23:CE:7B:CC:FB:CC:F3:08
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B9703CDB02ABBC23E786F0E40
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2346233d-f9d5-32b9-baf6-b0afd08c021c.roa
Signing time:             Tue 21 Oct 2025 00:42:25 +0000
ROA not before:           Tue 21 Oct 2025 00:42:25 +0000
ROA not after:            Mon 19 Jan 2026 01:42:25 +0000
asID:                     174
IP address blocks:        74.1.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:03:cd:b0:2a:bb:c2:3e:78:6f:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 21 00:42:25 2025 GMT
            Not After : Jan 19 01:42:25 2026 GMT
        Subject: CN=7c55485a-f3a6-4a35-822b-daa46bf48c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:37:09:29:17:53:07:86:03:2e:b2:b9:7b:ca:
                    bf:e6:1c:75:2e:87:c1:46:f5:a8:69:2c:68:4f:f9:
                    39:f2:67:47:ca:43:7c:12:b2:af:54:5f:ef:7b:69:
                    85:12:47:e8:b1:a7:d1:90:43:55:b3:10:86:f5:c8:
                    dc:f0:e2:a0:18:c1:a2:45:fc:b5:13:4b:88:7e:22:
                    b9:8d:5a:c9:b1:ea:a5:90:1c:8b:d1:52:71:e3:da:
                    0e:a1:4e:aa:54:fd:97:06:05:ef:98:c0:65:13:71:
                    79:4d:5e:b9:15:69:7a:e4:50:e5:8f:db:82:ca:6f:
                    78:0a:b5:de:5e:a1:00:f2:d8:55:22:15:70:4d:f1:
                    56:fc:47:fc:7c:76:e4:e9:cc:1f:c7:e1:2d:41:bc:
                    3e:11:84:17:cf:ca:ff:36:0d:0d:8f:cb:06:33:27:
                    9d:00:c5:d5:35:cb:29:83:3f:b7:80:80:eb:95:e5:
                    26:8e:e4:9d:74:f8:37:62:f5:6f:ab:01:56:56:d1:
                    15:57:93:b3:1f:c6:ff:50:83:8c:d3:2b:8a:8b:72:
                    8e:0e:2e:d1:18:ca:e5:3d:2a:12:ca:33:bf:56:02:
                    bf:e8:90:50:5c:ee:8a:63:b6:c0:73:75:5c:9d:02:
                    46:ba:2d:b4:9a:71:40:d5:07:9f:31:0b:04:68:bf:
                    58:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:14:7F:5F:FC:79:7C:BA:A9:FB:A4:64:23:CE:7B:CC:FB:CC:F3:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2346233d-f9d5-32b9-baf6-b0afd08c021c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:11:5c:9e:46:db:d2:f8:40:cf:6e:4e:7a:43:36:04:10:40:
         ee:d4:76:57:23:0d:47:fe:4b:63:bb:80:fc:f4:45:5b:d4:c9:
         f9:76:e2:aa:56:6f:d8:16:8f:de:0e:33:96:1e:e7:dd:6c:67:
         49:60:5b:f8:ad:f6:ed:f5:91:4f:b3:ab:b7:c3:ca:38:01:dc:
         45:a3:f4:4f:4d:01:4e:03:ff:94:a2:33:17:ad:5b:c9:19:45:
         b7:c7:19:18:05:0b:98:be:cf:03:9e:b6:0c:8e:d4:fe:61:f6:
         74:57:81:1b:0f:c2:5e:4c:a2:b9:2c:59:9f:24:0a:39:ea:f6:
         02:54:e6:7a:1b:fb:95:42:17:9f:54:80:01:f3:9e:51:83:52:
         e2:4a:0e:83:fb:cf:0f:44:da:96:4d:2c:68:cf:45:d0:f1:3f:
         67:00:67:2d:9e:8d:99:12:e5:71:c5:57:62:8e:91:8e:e3:4d:
         93:76:7e:ac:c5:d3:27:5c:8c:e3:f8:9d:50:98:1c:bb:12:6c:
         21:21:43:f6:16:ff:b2:e4:0a:e1:e7:df:8d:c5:2c:22:8a:d9:
         22:e5:12:7e:0c:e9:23:15:e7:f3:b6:fb:a4:d2:7c:04:22:b8:
         e2:be:c8:23:7c:0b:d4:3a:9d:62:84:5c:9b:ec:0f:20:a0:4c:
         ec:50:84:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:47:13 2025 by rpki-client