Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/273cf0f8-3bbe-3806-b0da-ab04fec56318.roa
File:                     273cf0f8-3bbe-3806-b0da-ab04fec56318.roa (raw, json)
Hash identifier:          5Jcv5mB8oNpwBbc4UnUN4Uxbp3rrm0rOP93jrYk/pK0=
Subject key identifier:   D1:6B:FE:BA:FE:A4:ED:FC:B4:47:A4:0F:F7:C4:D5:4B:45:9D:0A:1E
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EA8EC314B884E139ADCBED700
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/273cf0f8-3bbe-3806-b0da-ab04fec56318.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     32043
IP address blocks:        74.211.232.0/24 maxlen: 24
                          205.179.252.0/24 maxlen: 24
                          216.133.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:31:4b:88:4e:13:9a:dc:be:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=17e57a58-5982-4ffc-be6a-5cb043700bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:37:f1:64:78:63:31:78:a3:15:2f:5e:37:9d:
                    bc:6a:c0:0d:2b:42:dd:f8:e2:5d:bd:63:6f:70:3f:
                    6a:66:62:d8:40:31:a7:47:df:1e:da:c8:8b:d2:b6:
                    22:9b:ca:37:7a:0b:60:38:9c:db:70:bb:87:71:13:
                    78:35:e2:6e:ae:4e:b7:2c:f0:43:24:c3:7f:38:77:
                    82:6a:1c:11:ae:6a:29:07:94:6f:30:c6:0e:e7:b1:
                    14:8a:9b:47:4c:61:7d:c5:9d:98:46:58:94:91:4d:
                    c9:8f:bf:3b:4a:82:61:2d:b5:91:fe:4e:98:90:df:
                    ac:e0:7e:a1:91:d0:13:2e:1b:d0:6b:d8:b6:73:d7:
                    24:2f:48:ca:48:7b:47:a7:0b:a8:c3:eb:41:de:f3:
                    7e:49:f4:5a:11:6b:67:35:a0:aa:6e:c4:bc:33:ee:
                    b8:3c:f9:5e:fc:ff:88:2e:c1:96:54:20:15:6b:82:
                    53:25:3a:f4:b8:0c:08:da:99:b2:62:8e:b6:a0:93:
                    fc:37:7b:00:24:71:e6:78:8c:30:c5:cb:1d:86:7e:
                    c4:c5:cf:3f:45:71:aa:d2:ae:6f:d6:ac:99:48:d4:
                    d7:73:71:8e:f7:9a:c1:c2:77:8e:e3:14:97:77:60:
                    11:2b:22:79:4c:2e:b7:d1:ef:ca:78:a2:5d:3c:a3:
                    e9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6B:FE:BA:FE:A4:ED:FC:B4:47:A4:0F:F7:C4:D5:4B:45:9D:0A:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/273cf0f8-3bbe-3806-b0da-ab04fec56318.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.211.232.0/24
                  205.179.252.0/24
                  216.133.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:31:5d:99:87:7e:e0:6d:d4:a7:04:bb:c7:fe:de:82:6d:8e:
         a0:61:e8:a8:c8:dd:2c:cc:56:6f:4e:17:c9:13:08:93:92:31:
         69:a9:c8:b0:c2:e1:f6:d6:cc:84:27:16:2d:63:0c:90:66:8c:
         13:f2:94:51:dd:16:44:cc:66:ff:94:37:79:64:42:a6:84:bc:
         3f:88:20:71:3a:08:14:89:f8:11:36:e9:9b:52:61:dc:cd:24:
         1b:1f:cf:80:69:18:d9:48:15:48:c2:fb:9f:22:2e:68:55:0f:
         ed:6f:a2:dc:32:52:78:e0:db:09:45:b7:80:85:d5:88:88:95:
         a3:f7:29:20:35:36:32:ae:0c:37:10:77:97:7d:cf:76:db:70:
         f1:78:8f:71:bf:69:f9:0e:c1:a2:89:56:4a:ba:48:b8:4a:c4:
         a0:2f:44:d4:63:05:8e:4a:38:37:0d:ff:ca:1e:68:28:e5:62:
         49:d2:0d:22:d4:7d:cc:10:16:77:f6:ff:6f:53:ae:40:0e:ed:
         7d:17:40:ee:11:54:10:f2:e3:22:cf:15:e2:92:1d:b4:f6:93:
         3e:e9:56:94:ab:07:e6:9d:62:e2:cb:b4:32:e6:88:eb:37:a9:
         51:bf:fd:74:eb:dc:36:18:88:a8:ed:69:b5:81:b0:6e:81:73:
         99:9b:f2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 19:44:43 2026 by rpki-client