Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9fde337d-9a82-305d-8892-35be1c80c916.roa
File:                     9fde337d-9a82-305d-8892-35be1c80c916.roa (raw, json)
Hash identifier:          VgpebQsRFEKLLyL7EjycPCrDYf6Wk6I376a+yFmttSc=
Subject key identifier:   BE:D7:92:AD:2C:41:62:9A:44:5E:96:05:2F:DB:E3:88:4E:88:81:C3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D6C0FBC43673185E5964D7232
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9fde337d-9a82-305d-8892-35be1c80c916.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     701
IP address blocks:        74.109.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:bc:43:67:31:85:e5:96:4d:72:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=b4085320-e4c8-4e77-bd30-bfd340847657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3e:57:ae:0f:9a:1d:88:1c:e6:ac:c5:28:fc:
                    2e:ac:74:67:8d:ce:3d:12:e7:98:70:f3:52:6d:c2:
                    90:c1:98:75:12:7a:ef:50:8b:5d:f6:00:a8:89:44:
                    6a:5b:31:ef:75:be:32:cc:9c:3c:94:fd:93:44:4a:
                    3a:da:2c:b6:01:50:33:dc:93:18:b0:dd:05:07:c0:
                    c1:56:ee:fc:ce:e3:02:af:82:fd:28:80:b1:c7:b4:
                    31:cf:ba:0d:eb:a0:aa:df:a1:f8:c6:97:56:96:27:
                    fc:5b:5f:11:2b:76:d6:e8:48:47:4d:ff:66:ad:18:
                    b1:23:5a:31:39:a2:1b:2e:7d:00:bd:2b:8a:25:49:
                    f2:ed:67:73:70:79:94:40:a6:8d:cd:6a:b6:15:13:
                    66:a9:0d:2f:be:7b:9f:9b:bc:84:dd:ad:a0:7c:2e:
                    ff:2a:81:73:78:51:cf:ee:80:6a:1c:1c:e1:5b:93:
                    31:4d:83:f2:a2:74:d9:ce:dd:83:be:58:94:d7:53:
                    10:62:78:a9:7f:56:bf:c0:d2:4f:37:ba:92:36:35:
                    87:f0:66:70:e3:3f:10:d6:4f:b0:36:64:f8:09:2c:
                    79:85:0d:4f:5b:c4:d1:2e:3f:b2:70:13:ea:11:13:
                    a6:f3:63:54:f0:49:84:b5:c2:fa:bf:2a:71:69:fd:
                    a2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D7:92:AD:2C:41:62:9A:44:5E:96:05:2F:DB:E3:88:4E:88:81:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9fde337d-9a82-305d-8892-35be1c80c916.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.109.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:c2:11:70:2a:d3:66:8e:9d:cc:4c:7d:bd:22:af:92:ae:34:
         6f:33:c8:d3:a9:f3:0a:2b:24:97:ff:61:f0:0c:80:35:78:ee:
         91:8d:ba:ca:e5:a9:57:29:47:6d:ab:1b:c3:d1:4f:c1:4f:de:
         5c:33:a8:2e:ee:f7:82:a5:9b:90:1c:27:55:64:00:75:fc:fc:
         4f:b4:05:e9:a2:21:90:92:5d:5f:19:f6:53:9a:00:83:6c:4b:
         27:5c:8e:e4:4c:6f:d2:37:26:bf:d9:11:cc:5b:e1:fd:9f:c7:
         7a:fb:ed:22:1d:e4:8c:96:e4:bd:02:29:c9:88:68:14:70:30:
         56:fe:34:31:28:b0:5c:02:ce:c1:8d:b4:eb:0d:9e:5b:09:55:
         50:cb:e8:5e:f6:9d:04:17:07:20:8b:b2:c6:12:82:78:0c:f8:
         35:81:e8:15:bb:61:94:42:4f:1b:77:e9:c3:5a:b3:7b:10:ab:
         f6:a3:ba:26:b5:54:82:d8:e7:de:fb:c4:30:0d:ae:be:17:8d:
         b9:b5:b5:b5:d4:24:ac:64:e9:34:35:bf:6d:52:22:6e:a3:40:
         15:7f:5d:dd:ce:07:15:8f:78:e7:0f:32:c8:03:fe:0c:38:67:
         ba:73:06:d2:cc:e0:6e:3b:25:10:95:fc:d7:68:a4:8b:b5:ca:
         f4:c5:e7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:31:33 2026 by rpki-client