Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/0edca400-cd61-3ca4-979f-1d1ea696790f.roa
File:                     0edca400-cd61-3ca4-979f-1d1ea696790f.roa (raw, json)
Hash identifier:          a2/JuZkoY2t9uVlPRQimpCrs2zTFvs0HUCDgJ0vhqKY=
Subject key identifier:   C3:70:A4:B7:51:27:1F:CC:7C:8A:36:09:AC:3B:F7:FF:F9:37:89:76
Certificate issuer:       /CN=900e393b-502e-4acc-8781-1980cd140a32
Certificate serial:       010D0C9F4328584F6F22D39EE6BFFE9C91239100
Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/0edca400-cd61-3ca4-979f-1d1ea696790f.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     812
IP address blocks:        74.198.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:d3:9e:e6:bf:fe:9c:91:23:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=d89214ac-8606-4cdc-b81f-6438c92c5839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6e:6d:79:86:b6:16:b5:80:36:ed:93:57:54:
                    d7:34:11:e3:0a:7d:f5:1d:78:43:56:8a:0e:b6:d6:
                    26:dd:e4:5c:be:ab:1e:33:27:ba:85:c3:01:3e:28:
                    84:44:a3:ac:9b:b9:87:27:aa:15:08:eb:f0:cd:c3:
                    24:d1:92:6a:5e:e7:b8:fb:16:b7:81:fc:ee:b2:ba:
                    d3:5d:58:31:15:28:50:31:6e:b5:16:91:eb:3d:6f:
                    48:c4:f5:ba:38:35:6d:02:e0:ad:a8:88:cb:cd:a2:
                    27:91:5b:72:08:8e:cd:0e:8a:a8:85:98:8d:bd:8b:
                    0d:8e:de:4c:5d:9a:03:4f:49:a8:1f:1e:b8:91:2e:
                    a9:d1:69:c6:21:d8:0f:b9:fc:2e:81:b0:11:4a:33:
                    11:d3:c8:d9:5a:fb:78:af:34:82:a6:97:03:0f:be:
                    5e:6f:3c:80:d4:d9:22:17:8f:75:26:d8:0e:76:88:
                    94:b4:14:d9:e2:6c:95:1a:f4:23:7b:6a:02:33:89:
                    4f:f5:ed:a8:ae:e3:bb:8f:74:03:f3:24:bf:6a:06:
                    ca:8f:3d:6b:cb:87:d0:47:78:a4:cc:68:57:72:38:
                    57:9d:35:e7:9d:6c:5b:f9:27:1a:58:3d:e8:07:d7:
                    7b:74:71:14:7f:25:02:18:85:d4:99:cd:14:b5:8c:
                    fe:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:70:A4:B7:51:27:1F:CC:7C:8A:36:09:AC:3B:F7:FF:F9:37:89:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/0edca400-cd61-3ca4-979f-1d1ea696790f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl

            X509v3 Authority Key Identifier:
                keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.198.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:31:cf:10:92:45:60:e9:57:79:6d:35:9a:9b:1e:ba:91:38:
         a4:19:2a:40:12:8f:55:8a:e1:d1:43:6b:8b:df:e0:52:0e:14:
         f4:f3:0d:66:28:7d:95:ec:cd:ed:20:dc:c2:9a:aa:34:a1:ec:
         01:86:19:13:af:f9:7a:7b:71:2c:64:df:cc:e1:b1:7e:38:70:
         aa:d6:4f:2a:17:c6:65:8e:9c:ba:35:41:05:9f:7c:7c:1d:c9:
         7b:d2:a7:f0:b6:4d:da:92:dd:07:f5:36:c8:df:2b:60:e5:e9:
         c8:08:80:be:0f:5e:50:15:f8:3f:2c:5a:71:f6:08:aa:ca:c5:
         15:76:84:ca:20:0d:99:36:c0:db:43:41:e7:a4:da:79:92:74:
         9e:20:c4:d3:0b:e5:20:18:c3:31:a9:96:ad:f1:34:0c:f2:2e:
         91:bd:38:a5:f1:dc:41:63:7b:14:bb:90:7c:47:de:0f:ba:e7:
         6c:b7:e7:df:17:29:68:e4:64:53:8a:48:bc:ea:fc:a4:34:0b:
         25:46:c2:3c:98:15:6e:21:79:e0:67:26:c0:c9:d3:15:ca:e5:
         3d:d6:ac:88:1c:67:2f:df:f7:e1:fa:c7:66:5f:98:e4:e6:94:
         58:d2:de:e4:fb:1c:89:5e:9a:98:e3:4f:b5:4f:c0:ed:74:4b:
         c0:95:68:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 07:55:45 2026 by rpki-client