Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/490a29b6-2a93-3a29-b3ba-b50184bd36f6.roa
File:                     490a29b6-2a93-3a29-b3ba-b50184bd36f6.roa (raw, json)
Hash identifier:          Vz7H9Z/weMyeKt94A7Dq1d+2i51YeX+jf5s4wZGM+wc=
Subject key identifier:   5A:48:07:05:CC:79:A7:C8:75:62:E3:91:CA:AD:AE:A6:87:54:46:F3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D746FE021AF36441E7ED56CC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/490a29b6-2a93-3a29-b3ba-b50184bd36f6.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     701
IP address blocks:        74.110.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:e0:21:af:36:44:1e:7e:d5:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=3c9b8f9c-18ff-4d47-884a-2fad68294fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a4:e3:18:0e:81:80:ed:35:e9:d2:2f:81:40:
                    d2:e2:13:fa:c2:a0:76:1b:45:65:ec:60:72:e0:5c:
                    e5:8f:02:06:3b:1a:10:f9:60:1c:c8:d5:ff:7e:64:
                    cb:65:86:3d:ae:92:bb:8d:80:78:d5:10:0a:4a:67:
                    97:24:83:b8:d7:5a:26:9b:da:b9:e7:cb:df:d9:aa:
                    0e:74:a6:97:2b:ca:83:f8:38:b7:31:9b:1f:02:33:
                    68:83:43:16:4d:70:15:13:03:1a:e0:97:05:97:e1:
                    15:fb:1f:7a:2d:68:f2:67:fb:a9:b6:75:0f:24:b0:
                    e4:a4:79:51:44:88:1c:e6:38:2d:0c:12:b0:ff:4f:
                    a6:03:b2:cc:ed:71:96:69:de:04:eb:cc:a0:41:fa:
                    41:c9:43:b9:bf:db:fb:c0:d1:ff:2f:87:8b:08:c7:
                    49:9b:26:ad:80:bf:b0:19:a0:e4:d1:a1:89:bd:30:
                    b7:27:ce:5c:a8:72:3f:26:ba:92:53:03:cd:d5:11:
                    82:70:43:34:15:a7:9b:16:b4:3d:a9:bf:dd:45:01:
                    1f:39:39:60:64:fe:db:24:7f:e0:7e:06:b3:1c:e6:
                    e1:da:bf:17:1e:f5:92:27:38:7b:77:cd:11:8c:50:
                    87:bf:00:33:27:a4:eb:54:eb:c0:cd:80:da:2e:39:
                    9a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:48:07:05:CC:79:A7:C8:75:62:E3:91:CA:AD:AE:A6:87:54:46:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/490a29b6-2a93-3a29-b3ba-b50184bd36f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.110.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:95:19:90:9b:c5:51:f0:eb:5e:42:8e:9b:30:a5:91:1c:82:
         48:f5:2c:f4:fb:c6:a6:c9:88:03:a3:90:8f:11:d6:d9:bc:92:
         7d:19:ed:8e:88:68:61:af:63:13:2c:64:0e:87:ed:5b:3d:22:
         a8:f5:df:26:9b:17:6f:45:a0:cd:7a:bf:8b:69:8e:96:7b:8f:
         6c:6e:47:e0:12:b1:dc:35:58:93:52:99:8b:be:32:e7:ef:e4:
         2a:c9:2b:ae:24:f4:db:f8:0b:bb:85:41:14:61:5b:4e:f7:a7:
         69:cf:6f:ea:ec:7e:1a:13:a4:aa:0c:f5:cb:87:55:0e:ca:af:
         ef:4a:bb:85:33:29:21:85:f5:da:ae:bc:09:e3:5e:08:e2:5a:
         62:66:fb:f5:15:15:d0:75:e5:48:fc:c1:c3:ab:2c:4c:fe:38:
         58:96:f7:9d:fc:e0:54:21:08:db:6c:a6:04:5f:14:4d:3d:51:
         08:83:ef:2f:bd:3e:1c:3b:86:17:0c:14:a4:56:2a:f3:65:f8:
         47:87:cc:2c:87:50:ef:ea:a4:6d:6a:46:2e:d9:ee:4f:7c:a8:
         a7:11:f7:f1:ce:19:c1:81:ff:f0:26:cd:4f:06:e2:a9:d9:f9:
         53:96:e4:62:6a:82:ae:4d:96:9f:09:35:9a:97:df:75:75:53:
         e3:bc:5a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:06:57 2026 by rpki-client