Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f148b73-c2cd-4595-8670-0f56bb44f8c6/1aa9f7a0-2f21-3d5f-800e-da45eef47f06.roa
File:                     1aa9f7a0-2f21-3d5f-800e-da45eef47f06.roa (raw, json)
Hash identifier:          8CxZBuhEUHixLNEqMBVEm7HRHqcBTcG+l9ULgeMzEEA=
Subject key identifier:   B0:D0:24:CB:D7:BE:6D:20:CC:F4:BC:24:31:EC:FD:16:A1:EF:54:E1
Certificate issuer:       /CN=7f148b73-c2cd-4595-8670-0f56bb44f8c6
Certificate serial:       010D0C9F4328584D666B805B9865504CCE391300
Authority key identifier: 0D:AA:B7:42:61:4E:AE:6A:A2:A2:B7:F7:41:96:9E:A8:CE:0A:7D:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f148b73-c2cd-4595-8670-0f56bb44f8c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f148b73-c2cd-4595-8670-0f56bb44f8c6/1aa9f7a0-2f21-3d5f-800e-da45eef47f06.roa
Signing time:             Sun 05 Apr 2026 00:30:38 +0000
ROA not before:           Sun 05 Apr 2026 00:30:38 +0000
ROA not after:            Sat 04 Jul 2026 00:30:38 +0000
asID:                     401742
IP address blocks:        74.214.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f148b73-c2cd-4595-8670-0f56bb44f8c6/7f148b73-c2cd-4595-8670-0f56bb44f8c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f148b73-c2cd-4595-8670-0f56bb44f8c6/7f148b73-c2cd-4595-8670-0f56bb44f8c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f148b73-c2cd-4595-8670-0f56bb44f8c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:66:6b:80:5b:98:65:50:4c:ce:39:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f148b73-c2cd-4595-8670-0f56bb44f8c6
        Validity
            Not Before: Apr  5 00:30:38 2026 GMT
            Not After : Jul  4 00:30:38 2026 GMT
        Subject: CN=29fbd799-404f-4349-be08-a468bfd8072f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:73:11:e0:46:e7:6c:67:bb:bc:bc:67:27:92:
                    f7:22:ce:ce:6c:26:c1:fe:ae:08:ff:cc:79:a3:f2:
                    23:f2:59:70:07:47:55:d7:07:cc:7e:b0:25:8e:af:
                    8f:c2:9f:0e:83:c2:e6:3c:c2:f2:d2:78:44:a0:06:
                    5a:b9:02:24:fa:6e:36:88:e6:cd:0f:02:7c:b1:b1:
                    17:b1:b6:86:24:2a:44:d3:3a:db:c8:f9:d9:36:a1:
                    ca:30:f8:ec:46:4e:c8:ff:e3:c2:17:52:9a:dd:3e:
                    02:29:4b:79:84:e5:e9:98:2a:2a:6f:18:a8:80:c9:
                    a0:23:8b:8b:4b:7a:18:b6:b7:ca:b4:80:d3:37:f3:
                    5b:70:51:0a:65:cc:39:cf:32:d9:ac:4a:7f:61:21:
                    09:28:f5:b7:de:f2:49:44:f4:7b:59:cf:1d:70:fb:
                    98:31:de:cd:18:14:9a:d5:8f:b4:f8:ec:69:29:b2:
                    a4:fa:c0:47:6d:d8:3a:24:f7:1f:19:de:fa:85:34:
                    53:5b:af:da:b4:d9:34:83:26:ec:21:13:3c:6f:4c:
                    f3:39:df:b8:cb:a7:93:7b:17:ee:10:e1:32:6c:e2:
                    fa:c8:9b:1d:e2:5a:49:af:60:eb:12:38:72:a8:5d:
                    e5:a3:2b:d4:54:f5:af:0a:a1:33:f1:19:f0:dd:4e:
                    15:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D0:24:CB:D7:BE:6D:20:CC:F4:BC:24:31:EC:FD:16:A1:EF:54:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f148b73-c2cd-4595-8670-0f56bb44f8c6/1aa9f7a0-2f21-3d5f-800e-da45eef47f06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f148b73-c2cd-4595-8670-0f56bb44f8c6/7f148b73-c2cd-4595-8670-0f56bb44f8c6.crl

            X509v3 Authority Key Identifier:
                keyid:0D:AA:B7:42:61:4E:AE:6A:A2:A2:B7:F7:41:96:9E:A8:CE:0A:7D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f148b73-c2cd-4595-8670-0f56bb44f8c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.214.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:f0:af:58:7f:78:71:28:e8:17:d1:bd:e5:f0:ee:ca:62:53:
         e4:87:01:b9:57:cf:c7:7d:4f:f1:c0:49:4f:2f:16:4d:21:0b:
         a2:eb:8e:60:e0:ca:52:a6:6c:b0:08:60:34:57:dd:13:a8:41:
         97:56:56:e5:81:56:e4:52:46:27:86:9c:e6:ed:51:73:24:f1:
         18:d1:61:1d:bf:24:dd:8a:19:55:01:57:94:4c:75:32:91:b0:
         bd:35:ab:78:c2:d4:f5:d4:21:fa:8c:04:4a:b6:41:05:23:96:
         e7:3e:c0:42:22:25:b0:c8:ea:96:95:5b:38:df:28:6d:08:22:
         c7:45:1e:66:b7:28:79:b9:30:bd:18:1e:25:e9:a0:28:e8:70:
         ab:e3:a6:12:7a:bd:14:a8:cd:79:61:ce:bf:cd:e3:94:0c:37:
         aa:2d:94:c1:6b:0d:13:47:52:df:4c:f5:a9:0f:14:72:05:23:
         92:be:50:94:ad:51:54:4b:dd:65:6e:08:0e:f5:95:da:e9:a3:
         e0:6e:da:64:7d:92:f1:be:c3:e7:13:b9:6a:7f:95:12:83:20:
         44:37:1c:d9:cc:9b:86:d4:49:9d:3f:f9:e2:5d:ff:f3:e6:cc:
         a5:70:c6:5a:65:16:3c:1c:ad:e9:41:b9:58:31:79:7e:1b:37:
         06:1a:3e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:29 2026 by rpki-client