Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/4a1a256a-13d7-36b8-9cc4-8cb967ddba61.roa
File:                     4a1a256a-13d7-36b8-9cc4-8cb967ddba61.roa (raw, json)
Hash identifier:          gbVAr7IaR2h6a4Ndq467XAY2b/NCJOQ5FprW/v91HEA=
Subject key identifier:   5C:20:9E:94:6F:BC:94:68:E5:B8:C1:9D:C3:ED:7F:EB:11:04:1A:55
Certificate issuer:       /CN=0a846bda-a477-4fe0-8f13-997253568b7e
Certificate serial:       010D0C9F4328584EC29EAEF80882F7F0CC58CE74
Authority key identifier: DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/4a1a256a-13d7-36b8-9cc4-8cb967ddba61.roa
Signing time:             Fri 07 Aug 2026 17:55:04 +0000
ROA not before:           Fri 07 Aug 2026 17:55:04 +0000
ROA not after:            Thu 05 Nov 2026 18:55:04 +0000
asID:                     202736
IP address blocks:        74.122.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:9e:ae:f8:08:82:f7:f0:cc:58:ce:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a846bda-a477-4fe0-8f13-997253568b7e
        Validity
            Not Before: Aug  7 17:55:04 2026 GMT
            Not After : Nov  5 18:55:04 2026 GMT
        Subject: CN=5d08e445-c7f8-4ce0-baf9-554b5427fda0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:10:23:62:92:56:db:58:26:2a:7c:ac:2f:13:
                    79:9e:58:ab:0a:b5:9a:d8:d8:6a:13:c3:d8:32:c0:
                    8b:ad:ec:b7:1a:74:3b:c4:ae:b0:54:65:43:2e:46:
                    e5:23:c9:dd:5e:b8:f5:f4:33:1a:a5:83:e7:a9:db:
                    b5:18:a0:b9:66:3a:58:3e:cc:db:80:ec:e4:14:74:
                    c0:fe:fe:5f:bf:a4:e0:37:b5:88:5e:fa:21:db:5a:
                    c8:12:76:02:4c:38:94:5b:2e:f3:30:e7:0d:99:f8:
                    13:68:d2:56:e4:c4:be:92:aa:eb:07:06:49:f2:ce:
                    af:4f:be:20:f6:71:9a:e3:24:03:d1:6f:7c:da:8d:
                    60:2a:0f:e6:a3:0c:8a:fb:40:af:c3:13:50:22:eb:
                    7c:8f:ce:e3:07:38:f2:80:cd:bc:be:71:d3:24:86:
                    76:25:6e:2e:59:09:98:67:ef:e8:23:4e:91:57:14:
                    32:a5:03:b2:aa:93:c0:a0:3d:9c:c3:9f:30:21:ad:
                    29:24:72:e1:cd:7a:cc:83:97:69:f2:29:b2:71:0f:
                    22:e0:83:66:f4:cb:2f:81:1e:ea:cf:94:f5:fd:07:
                    b4:9d:4e:23:3c:c2:21:e3:5e:30:a2:b9:98:88:82:
                    13:2b:89:1b:0d:75:2c:8e:6f:3c:aa:40:78:27:0c:
                    42:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:20:9E:94:6F:BC:94:68:E5:B8:C1:9D:C3:ED:7F:EB:11:04:1A:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/4a1a256a-13d7-36b8-9cc4-8cb967ddba61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.122.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:c9:66:51:a0:ec:c0:de:a5:f5:f3:9a:c7:b9:9f:36:46:4d:
         ef:be:36:fb:ae:2a:f4:b7:48:63:76:fa:4c:80:e5:ce:c0:3b:
         31:e7:8d:2c:e2:2d:b1:a0:e6:b9:8c:f8:de:a5:a1:f5:19:29:
         2d:8d:c5:3c:29:2c:15:98:2b:ba:ca:b5:9f:af:08:89:45:18:
         b3:87:24:2e:92:24:96:05:29:26:60:f8:c3:3f:7e:36:63:ed:
         e3:8f:ea:4b:88:bb:ed:b4:8e:c2:81:3d:5d:8d:aa:81:f3:56:
         64:b7:03:aa:49:3b:5f:63:ad:b9:cd:29:a7:97:4c:1f:6f:fc:
         9a:c4:c0:19:db:d1:2f:3e:4b:58:cd:ab:29:8f:d7:34:2e:d6:
         dc:4f:39:80:9a:71:2f:7e:00:67:79:54:cc:8f:ea:5b:c9:03:
         c0:16:4d:da:06:35:98:57:50:59:57:14:0f:cf:af:19:f5:d1:
         2b:07:95:6f:3e:ea:6b:5c:11:f0:26:fb:ba:e5:57:c3:0b:7c:
         21:18:dc:9e:ff:65:1a:2a:bf:49:2b:51:a7:55:2a:de:66:4b:
         7e:a4:a1:4f:9d:6a:55:09:3d:88:34:c2:93:34:ab:a6:3f:e1:
         11:2b:77:1c:f6:e8:a4:1b:71:8d:69:ec:ac:0e:b0:a5:b7:f7:
         36:60:66:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:10:57 2026 by rpki-client