Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7/db0488e3-95ed-323c-9b97-147429b7c044.roa
File:                     db0488e3-95ed-323c-9b97-147429b7c044.roa (raw, json)
Hash identifier:          ZG26PTUi6znUteZIaiqXEx52hlDiGiTWaH7vrfpEs7I=
Subject key identifier:   AB:30:07:92:9B:17:2B:06:38:99:24:7D:71:7A:9F:9D:B7:4E:4F:D7
Certificate issuer:       /CN=35da68f2-165e-4898-bf59-8aa1e523eba7
Certificate serial:       010D0C9F4328584D7266EBD2B9060DDB34AEE700
Authority key identifier: 3F:89:5F:7D:C6:6A:66:03:06:06:37:08:8B:9E:AE:53:F7:D9:72:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7/db0488e3-95ed-323c-9b97-147429b7c044.roa
Signing time:             Thu 09 Apr 2026 07:31:06 +0000
ROA not before:           Thu 09 Apr 2026 07:31:06 +0000
ROA not after:            Wed 08 Jul 2026 07:31:06 +0000
asID:                     14618
IP address blocks:        74.113.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7/35da68f2-165e-4898-bf59-8aa1e523eba7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7/35da68f2-165e-4898-bf59-8aa1e523eba7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:72:66:eb:d2:b9:06:0d:db:34:ae:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35da68f2-165e-4898-bf59-8aa1e523eba7
        Validity
            Not Before: Apr  9 07:31:06 2026 GMT
            Not After : Jul  8 07:31:06 2026 GMT
        Subject: CN=ba6f39af-2de0-467b-8ab8-33b54f09f73b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b0:d6:eb:73:a7:4b:9d:87:e1:c2:63:9a:eb:
                    23:74:3d:d4:0e:fa:b6:06:c7:12:5f:2b:2e:db:28:
                    77:41:50:bb:dc:27:25:d7:87:94:12:95:98:df:7f:
                    29:dd:0d:89:cf:51:56:41:d3:d6:96:a2:e5:48:fb:
                    fb:08:7b:9c:5f:3a:cd:24:74:92:89:c2:78:fa:2b:
                    7f:52:ff:c9:30:b8:33:f0:68:fc:a4:6f:a8:2e:06:
                    05:1a:5c:c1:2c:cc:33:8a:44:5a:4f:4a:e8:ac:cf:
                    a6:41:2f:5d:be:db:ac:98:a6:b1:d1:d0:dc:92:e2:
                    c6:94:99:29:0d:2e:4c:7b:2f:49:c6:66:ea:ed:55:
                    ad:31:5f:9d:69:c1:c9:a4:10:be:50:33:6a:a5:1b:
                    a7:39:72:db:94:2b:c1:01:5c:1f:10:c7:55:ff:10:
                    86:c9:45:95:99:f0:89:65:51:82:cc:70:98:bc:ba:
                    46:96:44:68:ce:c9:de:66:5a:dd:c9:35:00:7e:3a:
                    b8:16:b6:12:46:7f:ae:a4:ae:6b:25:da:ab:1a:bc:
                    98:2b:40:47:ba:ee:a1:67:30:ae:98:0f:60:dc:0c:
                    0c:82:aa:bc:c5:9e:48:e6:af:76:1b:0b:ae:73:ab:
                    51:ae:f3:01:97:23:e8:9f:e2:0c:7a:ed:ba:35:11:
                    9e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:30:07:92:9B:17:2B:06:38:99:24:7D:71:7A:9F:9D:B7:4E:4F:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7/db0488e3-95ed-323c-9b97-147429b7c044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7/35da68f2-165e-4898-bf59-8aa1e523eba7.crl

            X509v3 Authority Key Identifier:
                keyid:3F:89:5F:7D:C6:6A:66:03:06:06:37:08:8B:9E:AE:53:F7:D9:72:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.113.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:5e:05:03:86:51:34:fd:31:bb:1f:cd:be:e1:b6:5a:3e:e0:
         cc:39:6f:48:21:53:87:a6:9e:84:26:70:49:b6:7e:48:78:9e:
         9b:e0:31:7a:1a:13:2e:6e:bc:f6:76:8d:f7:c9:fc:93:70:50:
         36:8d:10:b7:74:4a:79:ad:40:4d:47:e9:11:e7:32:9a:d0:ba:
         39:7a:d9:fe:c3:59:26:ed:f4:0d:fc:e3:9c:b1:f1:8c:15:94:
         71:9d:3e:63:69:29:68:e8:19:d3:93:80:e0:24:37:37:c5:34:
         a5:c5:1d:16:ea:68:fa:8b:57:5f:6a:c7:98:e7:79:f3:cf:40:
         27:e6:a6:23:aa:81:20:09:f5:42:a6:03:e8:1a:68:46:dd:09:
         6b:ad:30:de:09:eb:d6:d9:71:b2:98:e3:6f:dd:15:76:15:b1:
         28:90:b6:55:a4:1a:b4:8a:36:37:40:e8:fc:51:95:28:22:2a:
         d0:1f:81:5d:20:61:ed:64:fb:30:f7:30:86:67:cd:e3:fc:5b:
         c8:5e:9d:79:e7:c4:1d:75:95:03:44:a6:05:0f:f6:aa:39:e7:
         99:94:8a:37:19:87:5e:2e:6d:5f:dd:ea:c1:97:6b:ec:bb:5a:
         47:6a:9d:ad:5d:57:f5:4e:59:f7:a8:3d:23:d2:18:eb:ab:00:
         dc:35:53:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:14:04 2026 by rpki-client