Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6296a297-fb27-39e8-8fbb-94486440b8a9.roa
File:                     6296a297-fb27-39e8-8fbb-94486440b8a9.roa (raw, json)
Hash identifier:          qTleF6625kq4l9Df/st3Yzef8EuIYk64jfVvLCoEOgA=
Subject key identifier:   73:43:B9:08:14:1C:58:B3:3D:71:0D:29:FC:7A:8C:FB:0C:98:70:2D
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D7E353F5D54083306B2BAF5C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6296a297-fb27-39e8-8fbb-94486440b8a9.roa
Signing time:             Mon 13 Apr 2026 13:00:30 +0000
ROA not before:           Mon 13 Apr 2026 13:00:30 +0000
ROA not after:            Sun 12 Jul 2026 13:00:30 +0000
asID:                     26666
IP address blocks:        74.1.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7e:35:3f:5d:54:08:33:06:b2:ba:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 13 13:00:30 2026 GMT
            Not After : Jul 12 13:00:30 2026 GMT
        Subject: CN=67015b7d-4f90-4d53-aadf-b59d552c468c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:76:0d:f8:ea:2c:8c:8a:40:60:09:36:f8:84:
                    ef:3a:2e:74:6e:9b:5b:4b:3a:9e:35:fe:1a:ed:b7:
                    27:21:d6:85:4e:e3:0a:96:dc:1e:1c:b8:8f:a7:a9:
                    36:b0:7a:03:8d:63:3d:a1:53:4e:90:81:ef:60:0e:
                    01:47:5f:c6:5a:b2:fd:b9:4d:1c:64:39:6a:65:04:
                    9d:88:fa:0e:6a:26:04:74:a4:2b:50:10:c3:60:9f:
                    a7:40:3b:1f:96:dd:e4:2a:da:67:a5:d8:c1:c9:3f:
                    ea:75:9f:bc:2c:59:a9:09:e1:b2:9a:ea:cc:a7:09:
                    f3:5f:4b:fc:22:2b:3d:85:dc:f2:94:89:db:47:77:
                    93:17:b4:48:af:6c:b8:80:54:9f:df:3c:ed:a1:b9:
                    10:10:7a:ec:2e:51:8c:72:6e:2d:70:7e:18:0a:9f:
                    f9:48:73:fa:1e:18:de:11:1b:3e:bd:ac:cd:ce:19:
                    06:49:ac:a0:d9:1f:d5:96:ac:cd:f6:47:54:c1:a3:
                    c4:51:1e:6b:ab:62:57:0f:48:0d:c7:08:34:dc:79:
                    19:62:43:38:2d:c7:a2:4b:cc:39:dd:f0:30:1f:2a:
                    d3:b7:16:ae:52:95:58:fd:6f:50:0a:e6:4f:5a:1c:
                    e7:9b:4b:bd:30:14:64:61:9a:34:64:d9:64:13:d4:
                    96:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:43:B9:08:14:1C:58:B3:3D:71:0D:29:FC:7A:8C:FB:0C:98:70:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6296a297-fb27-39e8-8fbb-94486440b8a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:73:ba:05:51:09:a8:f4:76:53:2f:96:02:dc:87:21:43:e6:
         32:9e:4a:b2:2f:8d:6c:4d:85:57:0d:08:f5:20:3f:e5:20:0e:
         a7:69:f0:2f:dd:65:63:c0:f5:c9:a1:cc:ad:e8:8f:1e:4f:67:
         83:1d:6c:08:ac:ef:01:3c:c3:05:76:26:49:9c:59:b5:f4:0d:
         3c:db:4b:45:64:85:42:39:66:e7:61:0a:70:de:69:46:f1:34:
         9e:80:bc:00:f7:d5:3c:b4:5f:96:24:23:5a:7d:5d:ba:87:4c:
         92:8a:00:06:f9:15:8a:63:74:ac:11:e8:ac:65:73:52:34:d7:
         4b:5d:0a:8f:72:7a:f4:22:5c:3c:07:dc:d1:2b:a6:8e:6c:49:
         55:59:28:42:86:d2:0f:ce:da:23:98:6c:d4:86:99:15:49:c3:
         24:83:d0:f8:48:86:ac:0d:c3:5c:27:30:97:17:f5:c9:36:21:
         50:9c:a0:62:e7:89:37:e9:03:cd:fb:97:51:d4:48:5b:bf:28:
         fa:78:04:61:32:95:dd:d2:47:45:b3:d5:23:a1:00:b2:af:bd:
         c5:5a:01:64:e8:4e:26:e1:29:eb:39:79:61:39:52:af:73:ce:
         ee:c4:0e:d6:0b:0a:1f:53:67:44:6e:c8:34:3e:f6:24:ba:b4:
         28:19:0b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:45:31 2026 by rpki-client