Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/655af5eb-8f29-3eb8-8d87-138bfc1195b2.roa
File:                     655af5eb-8f29-3eb8-8d87-138bfc1195b2.roa (raw, json)
Hash identifier:          5Zgsy8etxWlu5EAc5ItmaHrzjW4Cj2qTH26YsYQ/RI8=
Subject key identifier:   B1:E1:66:F1:93:D4:05:7A:65:16:C2:04:86:3E:65:96:8E:DB:74:76
Certificate issuer:       /CN=900e393b-502e-4acc-8781-1980cd140a32
Certificate serial:       010D0C9F4328584E5084B65EBAD295DF2E3895E8
Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/655af5eb-8f29-3eb8-8d87-138bfc1195b2.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     812
IP address blocks:        74.198.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:b6:5e:ba:d2:95:df:2e:38:95:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=ecbf7615-f469-47ec-bbae-65eb8008b55b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8a:dd:dc:59:96:a6:57:54:95:8b:05:43:de:
                    bc:f7:0e:0d:14:c0:75:d4:07:7e:77:c7:56:f8:b3:
                    5a:5a:87:19:be:e8:a0:90:8c:c8:88:f8:23:2b:1b:
                    29:d8:8e:ec:a5:4d:74:3e:f5:86:bb:28:bd:4b:5a:
                    ca:73:c0:a3:8b:74:33:cf:89:04:16:52:0e:34:ab:
                    62:15:66:17:84:c9:07:ec:28:4a:c0:f5:64:25:33:
                    2b:73:9d:ab:8d:9d:c7:9f:de:08:8e:66:7b:0f:16:
                    e6:01:da:60:9d:57:fa:3f:78:ce:69:1f:e5:50:44:
                    28:25:97:db:ce:db:23:9c:90:a2:79:92:9b:21:90:
                    9b:0b:ee:8a:4b:58:16:fa:a5:ca:df:a5:72:c7:cc:
                    e4:04:f5:6a:50:1a:e8:8a:c0:70:69:3f:ba:d6:79:
                    e4:49:01:ec:eb:6c:a9:ec:63:45:21:79:2c:88:80:
                    66:83:74:40:45:4c:b1:6a:61:33:2a:dd:90:e4:65:
                    99:4b:56:7b:92:fd:e2:b9:59:cc:08:7f:9f:9f:db:
                    38:b4:9c:89:3b:66:e4:b4:7e:ab:1c:3e:aa:c7:c3:
                    e0:92:99:67:0b:ad:af:79:76:c2:a5:fe:7d:2d:9d:
                    be:c5:a3:ce:e3:2a:7d:f7:e4:d4:5d:5a:4e:a0:6f:
                    49:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E1:66:F1:93:D4:05:7A:65:16:C2:04:86:3E:65:96:8E:DB:74:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/655af5eb-8f29-3eb8-8d87-138bfc1195b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl

            X509v3 Authority Key Identifier:
                keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.198.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:17:cf:b6:0a:7e:ad:fd:7f:3f:2b:27:a6:65:ae:2d:2a:48:
         39:4e:db:7b:88:c9:5b:d0:f9:eb:e4:a0:a5:df:f6:8c:9b:ac:
         b7:21:43:99:24:32:10:1a:e2:6f:7a:7b:5d:59:01:dd:13:f7:
         b5:ff:3c:9a:3b:cc:41:d9:d3:58:d6:81:6c:74:b7:f4:38:0d:
         21:aa:ed:08:85:85:1b:c0:7f:bc:86:9a:1b:cd:4d:07:cd:47:
         4f:33:f4:b3:28:e6:3d:d8:cf:30:7f:a6:8a:95:83:93:e4:25:
         66:92:6d:ee:32:ad:09:6f:43:34:ca:99:f0:95:ce:bf:cd:1f:
         a5:d1:24:06:00:83:5d:10:62:b1:a3:22:25:96:12:16:03:f7:
         01:89:8b:5b:bc:8c:7c:c3:49:60:b9:85:96:5c:06:82:02:b3:
         18:fd:5f:68:0c:65:b5:59:01:4f:b0:12:68:a5:c0:ab:3f:8d:
         90:5f:7e:2e:8b:07:cd:35:d1:b0:eb:31:90:9c:58:aa:c3:b0:
         1b:28:3e:0a:f9:64:e0:79:e8:d9:a9:ee:9d:42:1a:c9:a4:dd:
         53:c4:c4:fe:b3:f9:9c:7a:f6:cf:24:1c:9f:0b:38:a8:1f:3c:
         3c:c7:e5:f2:0d:38:08:cf:3a:95:9f:45:c3:78:ef:34:ac:1f:
         23:f9:2b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 15:02:29 2026 by rpki-client