Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/7b196f8c-acc6-3c62-b79a-30574bb93e44.roa
File:                     7b196f8c-acc6-3c62-b79a-30574bb93e44.roa (raw, json)
Hash identifier:          QRhvLCCpH3vt6fT8a3bbSDG8k0UlvUNAkGwt/J33Osk=
Subject key identifier:   F8:9A:3D:7E:53:EE:50:86:B9:51:17:3D:D3:94:37:62:07:FA:FF:FD
Certificate issuer:       /CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d
Certificate serial:       010D0C9F4328584F9E989C43E8554BC381DE5580
Authority key identifier: AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/7b196f8c-acc6-3c62-b79a-30574bb93e44.roa
Signing time:             Sun 25 Oct 2026 13:00:13 +0000
ROA not before:           Sun 25 Oct 2026 13:00:13 +0000
ROA not after:            Sat 23 Jan 2027 14:00:13 +0000
asID:                     21898
IP address blocks:        74.188.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9e:98:9c:43:e8:55:4b:c3:81:de:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d
        Validity
            Not Before: Oct 25 13:00:13 2026 GMT
            Not After : Jan 23 14:00:13 2027 GMT
        Subject: CN=36b10125-f286-43fa-8e35-9923547290fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4c:08:2d:0e:58:d1:cf:2b:a3:7a:67:58:4e:
                    a7:31:a3:96:c2:fa:76:f2:a3:a7:42:ad:b5:a9:cb:
                    7c:4f:06:2b:1d:a0:71:a3:0e:67:f9:bc:0c:ea:88:
                    15:0b:41:f6:0b:fe:ed:5b:d2:ec:17:0c:a9:0a:d1:
                    5e:ea:4c:71:99:7a:e6:a6:8b:de:d9:39:57:23:ed:
                    39:26:62:77:64:b9:5c:e7:fc:71:8e:a2:64:03:ba:
                    a2:17:8a:82:02:65:6c:e8:5b:b9:55:ce:e4:df:dc:
                    fd:de:eb:bb:f2:00:1c:48:17:ee:2d:4d:ed:1d:ef:
                    9a:63:e6:ec:0d:31:bc:97:a6:14:15:8b:5c:f7:40:
                    ad:84:93:a6:c7:b8:71:9a:0b:97:74:88:17:c1:8f:
                    05:aa:38:96:7d:a6:cb:51:07:58:a6:b4:1a:4a:4f:
                    67:27:a3:5b:9e:bd:57:ed:c4:5b:d2:0e:0c:f8:f6:
                    7e:c6:8d:59:97:ea:87:1b:74:49:99:07:32:72:b8:
                    77:c8:ab:ef:8a:89:40:4b:98:52:a8:5f:26:ca:9a:
                    a5:18:c9:50:a2:d2:ad:56:42:a7:4a:30:b3:e0:a6:
                    ba:2e:1c:ec:81:d1:46:ec:d5:9f:3e:b0:e9:f9:93:
                    3b:03:d6:86:26:52:06:4a:75:7a:3d:55:2d:82:37:
                    57:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:9A:3D:7E:53:EE:50:86:B9:51:17:3D:D3:94:37:62:07:FA:FF:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/7b196f8c-acc6-3c62-b79a-30574bb93e44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl

            X509v3 Authority Key Identifier:
                keyid:AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.188.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:c1:4e:33:36:9a:75:7c:6f:21:41:14:f4:99:51:46:3b:78:
         e7:25:fb:74:47:2d:32:f9:35:45:91:c1:7c:6c:12:9e:de:90:
         ca:4d:04:79:54:31:86:22:7f:87:d5:28:f3:b4:5b:06:94:2a:
         29:82:7f:0d:95:f4:10:76:12:c9:7b:cd:78:97:bc:f7:84:c8:
         91:69:5c:c3:9c:92:94:3d:17:c0:47:15:4c:3e:9a:65:a7:79:
         c9:64:5a:0e:0a:6a:37:d9:8a:33:33:50:ed:4a:3f:6c:71:fb:
         e4:64:a7:da:25:51:b3:1c:69:ae:06:c7:c7:a5:ab:a9:ca:59:
         49:5f:7e:88:25:b6:4c:ad:7c:d9:60:17:5a:e9:e7:7f:b2:8a:
         25:2b:b3:18:c9:92:96:07:55:77:f1:30:66:51:b7:6a:01:71:
         66:54:36:3b:f9:a2:8a:d4:cd:9a:4f:eb:9a:22:42:6c:d1:ff:
         6d:92:a8:41:e4:3f:b2:50:c2:8b:95:28:bf:b3:db:f4:46:4c:
         79:25:cb:ba:01:66:d2:22:31:25:bb:7b:b4:c6:00:f6:c9:b9:
         59:8c:5f:81:99:98:f1:1e:d0:7f:b4:7f:be:e8:95:b9:cd:66:
         1f:72:7d:f5:7c:ed:17:c5:ed:f4:a4:fb:3e:54:13:c4:a6:e7:
         30:b6:3d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 23:39:32 2026 by rpki-client