Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cf70d300-25bd-30f4-a6fd-23a33417314e.roa
File:                     cf70d300-25bd-30f4-a6fd-23a33417314e.roa (raw, json)
Hash identifier:          DAw1x+3jajE2hz4p179KI48Jwixh22s/f4xDldDTuh0=
Subject key identifier:   69:6B:10:10:E6:7C:2B:25:3F:6F:81:27:9C:A9:59:1A:F1:39:11:95
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584E6C6F682703BB7758918736C0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cf70d300-25bd-30f4-a6fd-23a33417314e.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     397003
IP address blocks:        76.74.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:68:27:03:bb:77:58:91:87:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=43dd120b-aa1a-4be0-bff1-c0248b17e09c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:06:e8:fe:3f:56:15:25:06:03:b3:a0:1b:8f:
                    47:5e:c0:93:66:ed:e0:54:b7:1b:ea:08:89:5f:2e:
                    69:49:48:52:5d:fe:7c:55:0d:dd:24:1b:f3:21:93:
                    20:8e:d4:a9:38:91:a4:8a:12:e1:33:44:2e:1e:f8:
                    2e:ce:64:65:55:45:61:7b:a1:ac:f5:55:40:b7:5f:
                    eb:55:04:72:44:f9:5f:01:98:a4:3d:b4:57:4a:b6:
                    97:7b:94:3b:ed:c0:ae:99:9e:f6:41:6f:f9:f2:ca:
                    a9:f3:4e:b6:19:92:a2:be:90:d8:50:66:74:aa:ce:
                    d3:97:bd:1b:80:57:db:bd:05:97:40:9d:9c:f3:a9:
                    d5:3a:0e:f1:23:db:51:f8:32:27:f8:78:93:10:89:
                    a8:fd:c0:87:0c:1f:6d:5b:4a:2b:51:63:05:86:44:
                    b0:5c:2f:a8:a9:fb:f8:9d:09:65:c7:c4:36:a6:c7:
                    01:9d:08:1b:a2:08:03:11:71:8f:82:e6:ca:1f:25:
                    75:81:39:79:00:51:f3:1f:34:7c:3e:2b:4f:90:0c:
                    91:06:e6:b4:9b:a2:0a:12:af:0b:61:d7:1b:32:50:
                    02:3c:3c:15:f4:ae:8b:7b:ad:4e:97:5e:27:0a:01:
                    b2:d9:70:bd:98:af:9e:7e:ba:f7:00:b9:fc:6a:f6:
                    f9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6B:10:10:E6:7C:2B:25:3F:6F:81:27:9C:A9:59:1A:F1:39:11:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cf70d300-25bd-30f4-a6fd-23a33417314e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.74.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:72:05:bf:38:ab:58:f0:42:8c:81:bf:d3:84:ed:03:d5:25:
         0a:50:e1:e7:3f:a0:64:fa:4a:9d:6b:12:6d:f3:3c:52:ec:a1:
         e7:60:9e:98:9e:41:dc:57:71:f7:c9:07:65:79:7d:36:ec:5e:
         da:6a:88:f8:ca:72:fd:4b:c7:fb:1c:1d:f8:d1:2b:a0:69:52:
         c6:b2:d8:8c:eb:04:d5:75:d4:39:a7:87:ec:f7:54:c0:d3:b4:
         eb:a2:10:42:64:29:b3:98:78:ad:13:15:d4:d4:e3:2c:0f:4b:
         84:82:ab:80:fd:f7:32:36:dc:da:2d:64:40:13:3d:b1:8f:12:
         2f:00:30:a2:1a:08:46:c7:cf:64:39:bf:a1:ef:53:19:76:77:
         f9:02:98:00:7c:d9:2b:fa:6c:5c:bc:f1:f7:db:1c:b7:a4:7d:
         35:2a:a7:69:69:bd:57:ce:f2:20:98:35:12:bd:08:15:7e:4b:
         fe:01:c1:00:8d:71:77:2c:c6:e9:4f:94:57:c3:4a:1b:06:b5:
         4a:81:89:2e:c1:6e:b2:f3:f9:fd:ee:84:46:22:0f:ec:8c:92:
         5a:69:67:6b:a7:97:3f:e8:d8:31:8f:2c:34:0d:a9:97:dd:c4:
         f1:ec:18:bf:42:b9:ba:21:d6:54:3a:7f:71:d2:1e:6f:f6:01:
         b7:b7:4b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:08:36 2026 by rpki-client