Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5d372d93-e2d9-3bbb-bd53-4847b4c85928.roa
File:                     5d372d93-e2d9-3bbb-bd53-4847b4c85928.roa (raw, json)
Hash identifier:          zMfX8qH2sUEgtxC1ZliJljM2lnnf7c9t9xcUvSVSgPk=
Subject key identifier:   3C:AC:F4:3C:CD:30:E4:61:0E:2C:9A:D3:9B:78:A3:45:E5:E8:4A:4C
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D04E0973E22229FDE716D4640
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5d372d93-e2d9-3bbb-bd53-4847b4c85928.roa
Signing time:             Sun 01 Mar 2026 01:57:20 +0000
ROA not before:           Sun 01 Mar 2026 01:57:20 +0000
ROA not after:            Sat 30 May 2026 00:57:20 +0000
asID:                     13737
IP address blocks:        74.1.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:04:e0:97:3e:22:22:9f:de:71:6d:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar  1 01:57:20 2026 GMT
            Not After : May 30 00:57:20 2026 GMT
        Subject: CN=5877dd46-d93a-4f45-af35-b9bae9b658f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:68:a0:d0:6f:21:65:9a:d7:f3:a7:7b:d0:88:
                    70:8c:73:87:1f:66:34:3a:85:71:1a:dc:ae:23:80:
                    38:1e:93:67:87:68:2c:69:da:b4:2d:21:f0:13:05:
                    d1:0c:42:18:e5:85:6f:a9:80:4d:26:cb:c9:ed:ac:
                    e9:74:8f:65:e1:ba:ca:7a:3e:13:53:eb:d8:64:68:
                    af:05:0f:b5:2a:b0:12:6c:30:34:ae:07:be:0a:50:
                    18:93:9e:b0:f0:6f:5a:e5:a1:59:ef:b3:fb:a5:41:
                    9c:f1:3c:d6:16:e6:f0:8f:7e:42:15:a1:f3:59:9b:
                    85:e5:ab:81:e8:2e:4b:9e:3c:8c:c8:cc:9c:8e:a8:
                    15:24:b2:fd:f7:60:a6:4e:0c:f8:21:13:0e:65:98:
                    b4:d6:50:9e:6b:14:fc:30:ea:db:da:6a:5d:eb:39:
                    db:84:7f:a9:f5:58:69:71:f9:56:5c:e6:03:7e:b2:
                    28:0e:22:e0:f3:97:a5:14:fc:d8:38:fe:48:72:7b:
                    87:0a:af:0c:61:06:08:ef:18:a8:bb:4d:09:18:c8:
                    8d:88:d9:60:75:25:f4:5b:6a:3b:84:2a:94:30:dd:
                    d0:34:57:16:a0:33:3f:b4:29:0e:00:46:b6:74:ac:
                    ba:db:a7:17:db:48:a8:d6:fe:ba:07:7f:b4:d8:ee:
                    0a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:AC:F4:3C:CD:30:E4:61:0E:2C:9A:D3:9B:78:A3:45:E5:E8:4A:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5d372d93-e2d9-3bbb-bd53-4847b4c85928.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:4b:ed:59:f1:5b:ec:be:83:e6:74:d9:17:de:48:5f:98:16:
         99:42:96:73:49:de:d8:66:0c:92:ce:8a:02:78:35:96:99:53:
         3d:3d:8e:06:a3:67:15:c8:c0:8f:54:9c:0e:f7:e2:fe:7f:cd:
         ca:76:7c:4d:ee:76:1b:f9:48:5d:c2:71:56:64:87:6e:51:d8:
         23:ef:a0:b7:f5:92:3f:39:0b:39:56:4d:c9:c8:47:b1:ff:2f:
         a9:35:41:2f:98:50:74:14:a5:d1:12:03:82:f3:0f:67:e2:e3:
         f6:14:03:3b:6f:2e:2c:a0:cd:2b:1f:52:38:89:5a:21:74:d5:
         ce:15:26:fb:c7:24:f9:6b:3b:2e:d5:eb:f6:84:f0:db:52:3f:
         d7:2d:59:0f:9f:0f:6d:8d:3c:86:ff:19:d2:14:0b:25:1b:37:
         df:45:36:79:27:94:dd:31:7c:ec:55:63:99:0b:ac:2c:fa:08:
         76:bf:6f:bd:65:ca:10:05:2a:3e:72:0c:59:5e:9e:f3:19:9f:
         f2:7e:bd:15:f7:17:52:eb:aa:c9:58:32:ce:bb:4f:c1:d2:c3:
         5e:f2:e8:d1:95:c1:af:15:46:24:0a:87:a8:a5:6f:1d:f1:0c:
         75:33:b5:5b:35:1e:30:f6:67:c4:ac:90:f6:e6:dc:20:a5:b8:
         1f:c4:45:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0E4Jc+IiKf3nFtRkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDMwMTAxNTcyMFoXDTI2MDUzMDAwNTcyMFowLzEtMCsGA1UEAxMk
NTg3N2RkNDYtZDkzYS00ZjQ1LWFmMzUtYjliYWU5YjY1OGY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2ig0G8hZZrX86d70IhwjHOHH2Y0OoVxGtyu
I4A4HpNnh2gsadq0LSHwEwXRDEIY5YVvqYBNJsvJ7azpdI9l4brKej4TU+vYZGiv
BQ+1KrASbDA0rge+ClAYk56w8G9a5aFZ77P7pUGc8TzWFubwj35CFaHzWZuF5auB
6C5LnjyMyMycjqgVJLL992CmTgz4IRMOZZi01lCeaxT8MOrb2mpd6znbhH+p9Vhp
cflWXOYDfrIoDiLg85elFPzYOP5IcnuHCq8MYQYI7xiou00JGMiNiNlgdSX0W2o7
hCqUMN3QNFcWoDM/tCkOAEa2dKy626cX20io1v66B3+02O4KiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDys9DzNMORhDiya05t4o0Xl6EpMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNWQzNzJkOTMtZTJkOS0z
YmJiLWJkNTMtNDg0N2I0Yzg1OTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgHYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADxL7VnxW+y+g+Z02RfeSF+YFplClnNJ3thmDJLOigJ4NZaZUz09jgaj
ZxXIwI9UnA734v5/zcp2fE3udhv5SF3CcVZkh25R2CPvoLf1kj85CzlWTcnIR7H/
L6k1QS+YUHQUpdESA4LzD2fi4/YUAztvLiygzSsfUjiJWiF01c4VJvvHJPlrOy7V
6/aE8NtSP9ctWQ+fD22NPIb/GdIUCyUbN99FNnknlN0xfOxVY5kLrCz6CHa/b71l
yhAFKj5yDFlenvMZn/J+vRX3F1LrqslYMs67T8HSw17y6NGVwa8VRiQKh6ilbx3x
DHUztVs1HjD2Z8SskPbm3CCluB/ERUg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:05 2026 by rpki-client