Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a75d1112-a8d8-3611-aab6-f7265c4a02e6.roa
File:                     a75d1112-a8d8-3611-aab6-f7265c4a02e6.roa (raw, json)
Hash identifier:          Q31ls3nblkvgF5ZU4mUgkfB1LQ8J586XY12sP7OZ6E8=
Subject key identifier:   74:D1:2C:9D:33:C2:45:F5:A7:6C:EE:8D:BD:3E:7B:67:F4:E2:91:36
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D83CB14AA4777F9664060CCE0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a75d1112-a8d8-3611-aab6-f7265c4a02e6.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     834
IP address blocks:        74.2.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:14:aa:47:77:f9:66:40:60:cc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=95eb0022-b6cd-417f-b0f1-b547df20fafe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7c:52:2d:47:0f:39:65:b0:fa:d8:1d:5b:04:
                    0f:96:26:00:8b:eb:cd:c0:63:a6:f5:da:c3:48:3e:
                    b9:68:e0:34:eb:0a:68:6b:ba:18:4f:10:95:d6:39:
                    d7:d2:24:23:3c:0e:3d:b6:36:98:4d:e3:61:e6:87:
                    aa:21:50:b8:f9:2e:f9:90:ad:bb:53:54:13:c5:46:
                    d5:6c:3f:e4:f8:dc:47:a5:6a:e1:50:2f:88:90:e6:
                    91:8c:d6:f7:f2:06:c5:38:cd:01:29:00:83:80:45:
                    85:7c:08:d3:46:f2:2d:44:57:cb:ea:dd:47:a0:f1:
                    c8:52:8a:fa:cf:31:34:ce:65:45:a5:b5:d1:95:56:
                    38:c6:e9:a6:5c:b2:1a:b1:40:11:3a:5b:26:45:13:
                    75:49:69:db:89:d5:2d:f3:21:af:71:e3:af:6a:04:
                    c6:e5:10:6f:c2:84:ed:61:84:d6:e2:9f:dc:bf:9f:
                    bb:03:4f:11:bf:4f:89:fc:57:40:38:01:37:86:75:
                    b4:81:60:22:54:cf:c6:f5:9b:e9:51:3a:35:5d:83:
                    d4:e8:dd:d3:ed:b0:0d:c6:2b:d1:a0:5e:ec:51:5d:
                    7c:5c:27:c7:a4:01:b9:84:e7:58:28:d0:86:63:59:
                    6f:2a:4f:0d:d7:c2:0e:d1:64:ed:06:c2:9c:40:6a:
                    d4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D1:2C:9D:33:C2:45:F5:A7:6C:EE:8D:BD:3E:7B:67:F4:E2:91:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a75d1112-a8d8-3611-aab6-f7265c4a02e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.2.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:5e:94:6c:28:32:c2:72:70:c3:24:1a:96:b5:13:38:5e:33:
         35:ab:1c:99:f2:76:8f:d1:b6:a6:aa:a9:e9:b9:d6:71:8c:50:
         98:92:07:0a:a7:5b:f1:7a:1b:c3:8f:5f:40:dc:cb:b2:18:04:
         6f:22:89:a2:ca:a4:f0:45:c1:7d:5f:1e:33:c1:31:14:af:ff:
         90:a1:60:ed:c1:6f:3f:e3:87:74:4c:ac:89:24:8d:54:69:fa:
         b0:82:fc:36:5f:88:93:3b:78:2c:93:06:f3:ef:f3:68:5c:4a:
         97:aa:e0:fc:7b:bd:55:99:ac:9e:ee:a3:6f:e6:e2:17:0a:a9:
         86:9d:b5:f5:da:77:66:f4:9d:e7:06:06:b2:19:b8:72:c2:5b:
         f5:36:91:d7:01:ed:08:09:d9:c6:5d:64:cc:c1:9d:c1:ca:c0:
         90:a0:2e:e8:ac:e7:58:ef:18:66:91:6b:d3:e9:82:e8:e8:e8:
         81:ae:d3:fc:f9:c5:7a:1c:11:ba:0a:cb:80:dc:95:1f:55:2a:
         6b:e5:3d:0f:9c:07:18:02:9c:a4:d2:cc:78:bc:69:3e:a1:f7:
         44:4a:c9:1e:5b:83:fa:43:f5:bb:0b:26:5d:18:1c:f2:4d:c4:
         84:c4:40:18:36:18:6e:f6:d8:25:d2:f3:dc:63:b8:2f:fa:a7:
         18:bf:fd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:52:53 2026 by rpki-client