Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/c034c24b-f430-3585-8e79-eb1809a82790.roa
File:                     c034c24b-f430-3585-8e79-eb1809a82790.roa (raw, json)
Hash identifier:          KmmE8hUJQcvfIuoKDmSPCUnZhsgjZBK9ivO4N3oW8ok=
Subject key identifier:   5F:69:EE:5A:0D:A8:2D:B2:FB:C2:0D:25:7C:45:AF:F8:83:7B:F9:D9
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584EA7906F29CEFC01B87DB0DAD0
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/c034c24b-f430-3585-8e79-eb1809a82790.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19901
IP address blocks:        74.167.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:6f:29:ce:fc:01:b8:7d:b0:da:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a3703742-868d-4ae8-bf2f-39db268f7e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:50:cd:59:a3:12:d7:20:dc:f9:63:b3:52:09:
                    c2:5b:0c:93:43:5e:b1:65:2f:8b:01:ca:97:ff:0d:
                    fc:28:78:db:7f:46:db:77:4c:e9:ff:66:0f:57:aa:
                    09:82:ed:8d:ac:94:0f:43:b9:27:3a:d8:ca:d8:a3:
                    ed:35:7f:81:70:2d:7f:d6:ec:06:2f:27:8e:a4:2e:
                    b2:f3:60:f1:e7:19:79:6c:31:ce:6e:a8:5a:00:78:
                    b4:60:3d:54:9b:6e:9d:83:9a:ba:b9:89:7c:54:54:
                    e6:67:b8:47:b8:1a:9f:5b:6c:a0:b1:b2:00:40:20:
                    5e:ff:24:3d:a0:35:8e:35:4f:59:d0:50:ce:8b:8a:
                    14:0c:86:f3:86:9c:d5:3e:a2:9e:20:79:69:7c:3c:
                    26:a3:ee:72:f4:06:3a:ce:5f:10:af:88:f9:a4:a8:
                    97:8c:06:6b:f7:56:c7:16:b3:de:e0:ef:1a:2a:69:
                    0f:85:41:ef:49:52:2f:eb:c4:d0:c0:88:81:01:77:
                    d5:c4:48:3f:9b:f4:9e:fd:f1:4d:59:38:14:f8:c6:
                    70:65:0b:fc:1e:c9:7b:a1:c6:3d:5f:9e:5a:69:a4:
                    44:3f:13:be:04:40:c7:c0:5c:6f:b1:72:ce:c1:d1:
                    aa:b0:d7:3b:a8:3f:d6:99:66:11:89:c8:88:85:d3:
                    d4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:69:EE:5A:0D:A8:2D:B2:FB:C2:0D:25:7C:45:AF:F8:83:7B:F9:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/c034c24b-f430-3585-8e79-eb1809a82790.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.167.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:f8:8a:5d:0a:91:49:f4:3d:a2:e7:89:6d:6f:2b:a2:75:17:
         c5:92:2f:a2:05:a8:23:e0:cc:3c:e3:ec:40:e3:84:c1:67:72:
         2a:9f:d4:93:0c:ce:e4:77:65:26:17:79:d4:b7:5d:b3:00:9e:
         f4:f3:ad:fe:4b:30:59:87:bd:5e:df:bb:5f:ca:b5:a9:d3:18:
         f2:2b:8a:cc:30:2f:9b:63:a6:cb:c4:fd:9b:bf:7b:05:b8:a1:
         82:d4:46:0c:3c:9d:79:52:19:09:7a:89:a2:1e:56:7b:f3:83:
         0f:47:08:b6:04:0c:41:b2:a7:ca:e5:bb:9d:2f:f9:a9:a7:3a:
         9c:8a:e9:5b:59:d3:20:17:1a:f0:b2:e1:c8:50:e1:7a:86:18:
         d1:31:bf:d6:3c:a4:55:6e:b3:70:e4:b5:01:2f:98:01:09:db:
         e6:13:a8:a5:fd:c8:07:15:1f:0f:aa:7c:2c:29:b4:b7:73:fb:
         84:6f:46:7e:3b:87:38:0f:b5:0e:58:02:11:47:0c:16:68:42:
         f4:0f:3e:be:73:cd:f4:b5:11:8b:ac:d6:de:46:ee:6d:04:47:
         7f:f0:cd:e5:8f:28:c5:e0:3c:42:d7:5f:10:a1:62:f8:46:dd:
         24:63:7e:5f:64:3d:28:b4:bb:37:98:78:68:0f:38:b4:be:48:
         5b:30:56:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:41:01 2026 by rpki-client