Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/910f9667-7a39-34ba-adc7-937a7326b558.roa
File:                     910f9667-7a39-34ba-adc7-937a7326b558.roa (raw, json)
Hash identifier:          qmtmZYdG75Jim54j5swQ5riXTRio70/dNJ8rGiLPrsM=
Subject key identifier:   6A:4E:33:9C:BC:CA:FA:5B:E9:D5:4C:A3:BF:E3:C0:BF:6F:A2:10:52
Certificate issuer:       /CN=bb385b0b-5ada-48ff-9c34-3440a6550535
Certificate serial:       010D0C9F4328584E858F89455E14C2F311BF1260
Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/910f9667-7a39-34ba-adc7-937a7326b558.roa
Signing time:             Thu 16 Jul 2026 21:00:12 +0000
ROA not before:           Thu 16 Jul 2026 21:00:12 +0000
ROA not after:            Wed 14 Oct 2026 21:00:12 +0000
asID:                     26337
IP address blocks:        74.119.238.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:85:8f:89:45:5e:14:c2:f3:11:bf:12:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535
        Validity
            Not Before: Jul 16 21:00:12 2026 GMT
            Not After : Oct 14 21:00:12 2026 GMT
        Subject: CN=9c7f8567-1013-4e61-bf2a-e48899f26148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7f:1e:0e:57:c3:77:2c:88:44:b7:81:46:77:
                    46:7c:38:c4:82:89:30:8e:9e:6d:32:05:99:9b:ed:
                    61:ef:dd:19:35:1f:e9:c1:31:2f:29:18:1c:6c:69:
                    3b:6b:40:30:db:3e:60:e7:c7:22:1d:e1:c3:12:27:
                    39:37:c9:e0:8f:24:49:01:f9:79:35:bc:8c:1d:13:
                    ae:fb:d3:f8:33:5e:c5:c7:e0:fd:79:d2:e6:2c:b9:
                    53:1a:ef:fa:44:80:08:2c:b1:35:cb:b2:e5:0e:78:
                    5c:1e:b2:eb:9e:85:06:0c:95:7b:6b:2a:04:36:32:
                    b5:92:bb:4e:cb:49:45:6b:de:56:a7:09:51:b3:c7:
                    4a:62:e0:09:70:32:c4:aa:da:75:4a:d8:d6:a9:d4:
                    e9:2d:f8:b9:e9:54:67:5e:b8:7c:1d:f0:f5:61:b5:
                    a2:94:c1:ec:34:2f:5d:0f:6f:5b:32:69:b4:b0:81:
                    c3:80:9d:a2:1f:f8:16:96:b4:6b:51:e2:69:03:9c:
                    80:dc:bc:d6:d6:04:83:91:93:0b:63:3a:13:7e:56:
                    9b:47:ab:43:63:a0:cc:68:14:a8:3d:d0:df:a7:0b:
                    8e:c2:61:05:2a:06:7b:a3:55:b4:7b:be:56:63:fd:
                    d6:2b:04:b7:f7:75:14:49:cf:f6:88:76:62:a2:57:
                    fb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:4E:33:9C:BC:CA:FA:5B:E9:D5:4C:A3:BF:E3:C0:BF:6F:A2:10:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/910f9667-7a39-34ba-adc7-937a7326b558.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl

            X509v3 Authority Key Identifier:
                keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:2b:06:ea:46:cd:47:d7:c9:29:2c:d3:5b:6e:7a:15:c5:fe:
         5c:8c:eb:29:ab:4f:a7:ed:43:89:a9:cd:9e:5a:31:b7:06:8f:
         94:64:37:a8:13:e3:bb:87:0f:35:97:31:6f:4c:a8:a0:2d:79:
         37:5d:d6:8d:13:ca:ce:19:5f:ba:1f:c6:cd:ef:13:be:dd:10:
         a3:c8:62:0d:50:ae:2b:ad:88:7e:d8:2f:1f:77:e0:53:3d:53:
         0e:76:12:08:2c:2c:5a:c3:39:de:84:f7:97:0e:92:83:b0:91:
         ae:13:b0:fc:e0:3b:99:0a:7c:dd:cd:e3:29:2f:a8:6f:3c:05:
         fe:c6:2a:23:00:1a:ae:95:ae:5e:b3:f8:00:1a:bf:26:64:fc:
         1e:da:01:35:04:6e:5b:66:70:ef:63:04:63:1d:a6:31:0c:05:
         e9:19:b4:cf:00:25:9d:d9:83:eb:d1:ef:b5:19:1e:0c:1a:6d:
         59:86:e6:a2:dd:e0:fc:27:44:78:f2:b4:bb:03:43:c9:40:53:
         48:6a:79:ca:6c:df:5f:cf:02:00:cc:f7:43:9b:4f:d3:b1:8a:
         52:c3:85:39:4e:63:ab:9a:50:3d:60:18:26:58:f4:3f:9a:c0:
         fd:ea:f6:c8:a5:00:8f:6d:67:4a:83:39:e4:e6:04:45:73:af:
         6b:98:e8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:11:34 2026 by rpki-client