Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d76f9b14-8e33-372d-851f-8b3e1cf425a3.roa
File:                     d76f9b14-8e33-372d-851f-8b3e1cf425a3.roa (raw, json)
Hash identifier:          mWyN3u+srw562zcDNGXpUV+vd+XfZ8RVeCtOkSZC5nk=
Subject key identifier:   3F:AF:57:D9:5C:87:36:BF:10:0B:0A:96:4C:CE:63:C5:D2:21:50:B1
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E9D4AB08E32DDA136F2A72E00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d76f9b14-8e33-372d-851f-8b3e1cf425a3.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     834
IP address blocks:        74.2.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:b0:8e:32:dd:a1:36:f2:a7:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=76949e7a-4d5c-4bea-94a6-c67c7f3d121f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:99:49:3f:d2:2d:a8:7d:72:c0:2f:55:79:31:
                    39:5c:1a:ec:44:33:d9:71:80:d1:a5:c6:61:1b:6f:
                    5c:6a:ed:66:e7:23:74:2d:89:c4:70:8b:6d:84:99:
                    3c:b9:da:6e:85:8f:61:ce:99:82:11:24:41:6b:68:
                    ba:c3:7c:6d:13:a7:26:13:2f:90:b4:d7:20:95:48:
                    c3:f5:47:92:22:2b:61:15:cd:76:3a:fd:8a:21:e9:
                    f5:41:24:16:41:85:b2:28:c8:35:0d:69:37:da:83:
                    e8:05:42:ce:59:1f:b1:6b:1b:cd:0d:f0:4a:1b:7a:
                    0c:b8:fb:f8:e0:9c:e8:72:78:d4:ec:7d:25:eb:8d:
                    24:55:64:47:ca:cb:98:d6:c9:9c:70:b8:44:f4:12:
                    e2:ee:66:ae:d4:ba:30:2d:a2:ef:92:4c:95:f0:36:
                    c5:ab:a3:13:5e:04:2e:4e:c9:19:44:12:7a:80:c3:
                    24:a9:e8:da:1c:32:14:d9:2c:f0:42:d8:c6:6d:15:
                    e2:0a:a8:6c:dd:74:0c:bd:a0:e1:83:4a:65:ee:b1:
                    bd:9c:bb:d6:6e:c6:0b:bf:0e:5a:f9:c4:16:7e:3e:
                    fd:23:43:2b:3c:38:cb:7d:33:36:4a:cb:99:4b:63:
                    a5:63:3d:95:13:b5:28:28:3a:92:9b:94:6f:a9:c7:
                    c3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AF:57:D9:5C:87:36:BF:10:0B:0A:96:4C:CE:63:C5:D2:21:50:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d76f9b14-8e33-372d-851f-8b3e1cf425a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.2.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:b7:39:23:6b:0a:07:37:74:13:e7:cc:f7:80:a1:57:6b:16:
         18:72:f6:47:3d:ed:41:f4:ad:73:e1:29:92:b4:fe:21:59:4b:
         fd:1c:7b:e6:78:39:4b:fd:69:56:10:14:71:27:05:76:81:ef:
         49:a4:93:91:15:60:2b:33:bb:da:09:c8:85:d0:e2:c4:20:41:
         b7:15:c9:42:78:76:08:1c:ee:da:a0:60:81:34:0b:23:72:b0:
         a9:8f:c3:c6:6c:5b:af:4d:12:41:73:56:d4:44:33:b9:1f:b5:
         34:0a:f4:9a:68:c2:8c:23:c3:41:54:ad:ea:c8:9b:0c:ab:26:
         18:a1:f2:f7:eb:c0:d2:7f:40:5a:d5:e9:d0:a2:9c:b7:32:b9:
         47:6f:e9:95:94:86:fd:c9:ea:95:99:88:b0:c9:fd:13:8c:0f:
         52:53:cb:5c:e1:69:bc:b4:78:74:d7:4a:10:71:24:77:12:d0:
         90:12:2e:03:2a:90:88:29:43:c1:d9:42:b6:c0:02:7c:3f:b7:
         5d:42:0e:df:e2:32:24:9c:15:3f:0c:a6:4f:41:bf:32:60:99:
         83:0f:10:b2:06:2f:79:ab:e1:e3:bf:37:4c:a5:cb:e0:4f:05:
         98:c4:42:06:9f:9d:2d:6d:8d:42:b7:77:31:05:0a:44:23:52:
         8d:42:8c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:19:07 2026 by rpki-client