Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8364021f-47cb-375d-9a8e-36d1e21d1e8d.roa
File:                     8364021f-47cb-375d-9a8e-36d1e21d1e8d.roa (raw, json)
Hash identifier:          wpvnDNy1QfSwgBSG6u0FXkqnuz4jqbeTfpKFT86Nw9E=
Subject key identifier:   7A:EE:51:BE:05:16:93:4C:5F:CE:55:49:02:46:F6:B2:F1:A7:59:83
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CF9EDBD84C5421A93BBB52B80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8364021f-47cb-375d-9a8e-36d1e21d1e8d.roa
Signing time:             Wed 25 Feb 2026 03:49:56 +0000
ROA not before:           Wed 25 Feb 2026 03:49:56 +0000
ROA not after:            Tue 26 May 2026 02:49:56 +0000
asID:                     13737
IP address blocks:        74.1.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f9:ed:bd:84:c5:42:1a:93:bb:b5:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb 25 03:49:56 2026 GMT
            Not After : May 26 02:49:56 2026 GMT
        Subject: CN=fc1ec9d5-4c9f-40c4-9290-5a32756bc85e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:75:b6:40:2a:67:50:35:a4:3a:ae:cf:51:bb:
                    1b:87:f8:41:d5:27:0d:5b:65:c5:2d:cd:01:6e:2b:
                    4e:62:63:ea:c9:41:2c:44:1c:1f:b4:ce:04:ed:94:
                    a9:9a:82:4e:ab:90:2f:a2:6a:e5:61:b1:26:95:c8:
                    92:00:0c:66:40:40:dd:e0:29:06:d0:82:ae:3f:ff:
                    ab:0d:05:37:24:eb:f1:c7:95:f1:4d:28:3e:18:04:
                    e3:f7:6c:b2:d6:cb:72:b5:70:03:41:31:a2:45:e3:
                    2b:b8:d7:d3:2e:c6:bc:f7:9c:1f:9a:16:70:32:02:
                    90:92:12:39:5b:c6:3d:77:09:cf:99:57:7b:b5:07:
                    e2:d0:f7:f1:6d:e4:76:d8:76:3d:03:a8:05:0b:76:
                    5a:19:e3:b7:24:99:d8:a1:23:ff:7a:8a:07:15:89:
                    c8:90:f5:57:57:20:e6:e7:51:30:7a:01:b9:dd:14:
                    39:6a:36:0f:22:b4:89:e4:53:16:69:a5:6a:3a:ad:
                    e7:51:de:e3:77:ba:e6:fc:2e:f7:de:6d:5c:f4:c8:
                    68:18:47:22:93:e0:62:4d:86:cd:98:94:f9:c2:da:
                    d2:c1:d8:71:02:b7:09:9b:8b:26:1f:cc:76:30:a0:
                    61:dd:48:00:b0:0f:2c:c2:08:7d:6a:2b:4f:a3:dd:
                    dc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EE:51:BE:05:16:93:4C:5F:CE:55:49:02:46:F6:B2:F1:A7:59:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8364021f-47cb-375d-9a8e-36d1e21d1e8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:f1:99:9b:0d:4a:0d:98:62:f3:fd:5f:7e:34:71:68:5a:03:
         01:63:07:cb:4f:9a:02:98:bc:3d:cc:3b:e9:1c:f4:b4:12:43:
         ad:c6:8f:5f:d1:49:5a:b3:5f:83:cc:02:7e:af:94:ff:85:f3:
         97:77:b4:c1:51:72:47:d9:54:14:18:c9:ab:2c:6f:1f:75:24:
         e7:03:d0:1c:55:c3:a4:0e:f2:bc:bf:ef:6c:26:a6:3c:10:9d:
         79:2d:9f:4d:63:9e:a8:4d:b0:8c:a2:5d:e0:26:1b:bb:92:ad:
         d1:73:16:df:cb:01:77:7c:e1:08:50:e5:79:c3:e1:d2:1a:2d:
         04:cf:0d:a6:35:e2:ab:94:1a:92:9c:a6:82:d5:75:4d:8f:53:
         a5:f8:9a:3f:54:5d:e0:66:df:c1:d3:02:8d:97:e0:3b:61:8c:
         ff:0e:b8:38:23:8d:29:f8:4b:de:fe:75:91:e0:cd:79:79:67:
         f7:4d:35:e1:48:1d:0d:d2:9f:b5:50:6e:9f:24:15:05:a9:c9:
         7e:12:70:ea:6b:86:97:2f:2d:b5:8a:dd:64:54:37:1a:4f:27:
         5d:f3:dd:fe:3f:2b:f7:85:d3:cf:8d:f4:86:be:11:4b:2b:96:
         80:af:7d:27:9a:47:67:f7:a4:12:d0:b7:0c:03:a2:1e:91:93:
         ba:4d:96:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz57b2ExUIak7u1K4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDIyNTAzNDk1NloXDTI2MDUyNjAyNDk1NlowLzEtMCsGA1UEAxMk
ZmMxZWM5ZDUtNGM5Zi00MGM0LTkyOTAtNWEzMjc1NmJjODVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHW2QCpnUDWkOq7PUbsbh/hB1ScNW2XFLc0B
bitOYmPqyUEsRBwftM4E7ZSpmoJOq5AvomrlYbEmlciSAAxmQEDd4CkG0IKuP/+r
DQU3JOvxx5XxTSg+GATj92yy1stytXADQTGiReMruNfTLsa895wfmhZwMgKQkhI5
W8Y9dwnPmVd7tQfi0PfxbeR22HY9A6gFC3ZaGeO3JJnYoSP/eooHFYnIkPVXVyDm
51EwegG53RQ5ajYPIrSJ5FMWaaVqOq3nUd7jd7rm/C733m1c9MhoGEcik+BiTYbN
mJT5wtrSwdhxArcJm4smH8x2MKBh3UgAsA8swgh9aitPo93c1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHruUb4FFpNMX85VSQJG9rLxp1mDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODM2NDAyMWYtNDdjYi0z
NzVkLTlhOGUtMzZkMWUyMWQxZThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgEfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAPxmZsNSg2YYvP9X340cWhaAwFjB8tPmgKYvD3MO+kc9LQSQ63Gj1/R
SVqzX4PMAn6vlP+F85d3tMFRckfZVBQYyassbx91JOcD0BxVw6QO8ry/72wmpjwQ
nXktn01jnqhNsIyiXeAmG7uSrdFzFt/LAXd84QhQ5XnD4dIaLQTPDaY14quUGpKc
poLVdU2PU6X4mj9UXeBm38HTAo2X4DthjP8OuDgjjSn4S97+dZHgzXl5Z/dNNeFI
HQ3Sn7VQbp8kFQWpyX4ScOprhpcvLbWK3WRUNxpPJ13z3f4/K/eF08+N9Ia+EUsr
loCvfSeaR2f3pBLQtwwDoh6Rk7pNlnQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:08:49 2026 by rpki-client