Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cec4d741-3270-3526-8c82-434f2ede8717.roa
File:                     cec4d741-3270-3526-8c82-434f2ede8717.roa (raw, json)
Hash identifier:          tRRk5DJ5ODRaBZQBwFw9Mwg59LWQQ0zFRhQlqx8HjiE=
Subject key identifier:   7D:B6:86:7B:0F:9A:4C:5D:38:12:7D:D2:E3:6F:FD:8F:4E:B9:EC:B4
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F4AD618348D0CA9EEFDC39600
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cec4d741-3270-3526-8c82-434f2ede8717.roa
Signing time:             Fri 25 Sep 2026 12:56:39 +0000
ROA not before:           Fri 25 Sep 2026 12:56:39 +0000
ROA not after:            Thu 24 Dec 2026 13:56:39 +0000
asID:                     6079
IP address blocks:        74.0.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4a:d6:18:34:8d:0c:a9:ee:fd:c3:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 25 12:56:39 2026 GMT
            Not After : Dec 24 13:56:39 2026 GMT
        Subject: CN=b297c36f-6b85-4a9c-97d5-78756eb12c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7f:0b:eb:44:93:4b:36:b4:8f:31:5c:e5:da:
                    8f:58:df:db:69:61:15:7a:04:cb:61:66:be:5d:1d:
                    74:c5:2c:68:ed:bb:73:78:fc:d6:9f:d2:07:4e:08:
                    40:69:05:9a:51:3b:39:e4:cb:66:45:db:87:f6:2d:
                    9f:1f:64:fc:a1:2e:a3:ca:4e:5e:28:83:8d:a1:73:
                    75:9c:9f:46:d5:23:ef:00:7d:80:a2:8e:3e:a0:e3:
                    e5:b9:09:12:df:77:71:83:ba:8c:2b:b2:87:25:49:
                    9c:50:6c:45:1c:6f:c0:7f:b2:55:64:56:a9:db:19:
                    ca:bd:35:dd:b2:37:66:fd:f7:64:29:23:d5:ba:c1:
                    f8:75:fe:46:d0:08:22:10:3e:b1:a2:82:cb:71:e5:
                    0f:5d:88:86:af:9f:1b:25:42:f8:4d:6c:ca:78:d7:
                    b9:27:50:cb:9d:07:4a:90:19:da:a5:3a:00:97:9d:
                    89:ca:cd:8e:64:53:a0:69:4d:3d:a4:fb:82:fc:4f:
                    9f:68:34:bf:fb:0d:ba:5a:e6:bd:4a:1e:00:4d:e4:
                    1d:bc:98:28:0a:e0:a2:04:6d:a5:44:8b:4b:95:53:
                    ae:6c:42:bd:26:1a:05:c5:49:3c:d3:fe:36:0c:2a:
                    5c:c2:7d:80:96:82:bc:4c:a9:2e:f7:98:f3:68:00:
                    2e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B6:86:7B:0F:9A:4C:5D:38:12:7D:D2:E3:6F:FD:8F:4E:B9:EC:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cec4d741-3270-3526-8c82-434f2ede8717.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.0.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:3a:4b:41:d0:ad:1f:3c:48:f2:48:78:30:b0:6b:9e:2c:24:
         81:92:f6:8b:00:56:33:87:f1:2c:79:40:84:6b:6f:f7:fe:8a:
         05:80:f0:4b:25:e3:11:90:a3:6f:dc:66:0f:93:6f:f5:15:76:
         30:82:a1:6d:02:59:52:d3:d0:e8:97:6a:ee:28:24:cb:28:b3:
         ab:74:1e:65:24:c3:8d:f3:4f:2d:71:fe:23:04:7c:d9:40:79:
         ba:3f:ce:cd:a2:c7:c0:8d:63:f4:88:9f:f4:ae:a0:5d:dd:7f:
         bd:9b:be:72:27:67:a1:7b:15:7e:06:ae:e1:59:50:54:e0:e8:
         91:fe:4b:de:37:a6:c1:24:1f:02:5c:de:de:34:6c:b3:06:c7:
         be:7e:d4:a5:84:4e:cc:c3:74:75:06:ec:11:e0:9c:96:42:b9:
         a6:08:c0:47:0a:e8:d0:32:b8:2b:04:41:5f:6d:43:11:f3:40:
         0d:9d:30:65:4b:b8:0a:d9:b3:f6:60:85:dd:00:0d:2f:b0:f8:
         e5:52:ce:b1:f8:63:68:6d:f1:83:7e:84:25:64:fb:23:f3:83:
         45:3a:7f:33:a1:db:01:9c:e2:eb:df:4f:9a:12:63:0f:73:d1:
         68:5f:e7:77:88:5d:d7:6c:58:8a:64:ae:2b:95:77:8a:be:b1:
         71:34:b7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:53:04 2026 by rpki-client