Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/781cf627-f7ee-34af-9df1-1f16dea657a6.roa
File:                     781cf627-f7ee-34af-9df1-1f16dea657a6.roa (raw, json)
Hash identifier:          7aknL5oGHx9yH8GhGgUOfV8zPzLCUY/+IhZig4A3rkA=
Subject key identifier:   30:D4:4F:CA:87:FB:9D:74:C7:7C:54:DB:B9:B3:00:E0:55:86:6A:85
Certificate issuer:       /CN=900e393b-502e-4acc-8781-1980cd140a32
Certificate serial:       010D0C9F4328584ECBD1E7F32D098EC27B07EDC0
Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/781cf627-f7ee-34af-9df1-1f16dea657a6.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     812
IP address blocks:        74.198.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:e7:f3:2d:09:8e:c2:7b:07:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=224a7a45-604f-41b9-a620-06d8d59205c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:63:0a:45:a1:ae:d9:70:2c:8b:5e:e0:bd:fe:
                    78:8b:db:14:04:95:7a:27:39:e7:36:b6:c8:36:70:
                    3f:37:ef:c8:b6:71:57:49:e8:17:79:53:43:fc:0c:
                    0a:bd:fa:bc:40:f6:8e:0d:08:9c:53:6f:f9:21:1d:
                    56:42:7a:70:c3:e8:8f:9b:3b:55:20:40:15:b0:80:
                    78:0c:bf:c1:e9:72:c1:e5:c4:e9:d5:d9:29:b1:b9:
                    43:51:08:bf:e3:79:58:17:51:45:99:c0:ab:44:45:
                    8a:24:3d:4d:35:77:b6:95:11:e7:c4:48:8e:09:08:
                    04:c1:ed:65:70:d6:07:87:a4:e9:fc:08:f7:c3:1b:
                    44:dc:b1:ee:8c:6d:bb:7a:bf:00:e6:76:ca:e0:5c:
                    28:e5:d3:6a:99:2e:8f:0d:d0:97:e6:bf:52:14:49:
                    f8:c1:59:d4:77:f9:b9:30:fd:b7:b8:ad:99:73:8c:
                    dc:e1:f8:b3:c1:97:e3:55:9f:9c:9d:4a:f2:09:af:
                    a5:a5:ee:cf:9e:a2:12:f0:92:ec:13:3b:4d:f3:89:
                    f7:65:e7:a4:65:6c:69:2e:bd:e8:6a:69:cc:c8:6e:
                    d7:5c:aa:46:42:47:a4:f6:ed:31:39:fc:80:4b:18:
                    e7:64:9f:19:88:b6:a0:d0:c3:91:c4:32:af:58:5d:
                    9d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D4:4F:CA:87:FB:9D:74:C7:7C:54:DB:B9:B3:00:E0:55:86:6A:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/781cf627-f7ee-34af-9df1-1f16dea657a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl

            X509v3 Authority Key Identifier:
                keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.198.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:70:0e:b6:42:d8:db:7a:36:a0:98:90:06:6f:62:2c:3d:ca:
         9d:3c:c7:d9:f2:75:13:53:28:66:9e:a3:0d:22:5d:66:1d:4c:
         23:0d:51:ff:41:4f:d5:6c:a2:d5:17:ce:38:14:ba:60:54:7a:
         0b:60:de:c7:33:64:7d:4b:53:78:a4:50:d6:78:12:5b:ee:97:
         b5:28:0a:ec:75:31:4c:46:3f:37:86:d9:c8:92:53:0d:df:ce:
         61:5f:8c:a6:5d:01:4f:16:1c:45:28:29:dd:70:0f:4a:21:bb:
         7a:1a:18:5e:09:ac:8d:75:b6:e6:ac:d5:c7:a6:2f:1f:f1:59:
         0a:71:11:9a:b0:1f:59:55:04:c6:03:03:ea:63:8e:5c:a5:86:
         f2:36:1a:c3:6c:86:36:48:e8:5e:78:1b:7b:8a:33:9e:4d:73:
         f2:4f:9e:16:5d:12:e3:3b:52:80:51:cd:7f:88:58:7f:1d:7c:
         8b:f8:f2:99:58:7d:8c:b5:73:cb:30:7e:8f:bd:02:9b:b5:77:
         f5:a7:30:a6:6e:be:85:85:6d:d6:df:ad:02:7e:3a:02:74:42:
         25:09:00:5a:d8:57:a7:e2:ab:b8:51:9c:61:0a:37:34:f1:7f:
         b6:83:9b:09:5a:ad:bd:12:4a:1d:fb:da:5f:3f:f3:4d:4b:c6:
         80:41:20:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:23:06 2026 by rpki-client