Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/065b1e98-4a36-32df-a104-46549d6e419c.roa
File:                     065b1e98-4a36-32df-a104-46549d6e419c.roa (raw, json)
Hash identifier:          DVInpriUJRtOtnM6LurfdYT9ZL73qIAmB85VsC8Ec4w=
Subject key identifier:   22:75:76:05:37:81:DF:DF:B6:E7:23:2B:DD:93:0A:26:86:BA:3C:92
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D5024E1E1751AA9FCD4B21640
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/065b1e98-4a36-32df-a104-46549d6e419c.roa
Signing time:             Sat 28 Mar 2026 01:00:31 +0000
ROA not before:           Sat 28 Mar 2026 01:00:31 +0000
ROA not after:            Fri 26 Jun 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        74.2.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:50:24:e1:e1:75:1a:a9:fc:d4:b2:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar 28 01:00:31 2026 GMT
            Not After : Jun 26 01:00:31 2026 GMT
        Subject: CN=fb3564ea-ab50-4253-b4de-a5d57c21acd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1c:9a:13:43:25:ef:ca:fa:d5:6d:d3:7b:98:
                    bf:d5:66:e8:9d:82:fb:d7:1d:e2:ea:ea:f5:24:4a:
                    01:04:ce:34:85:1f:3a:5a:e9:8b:3c:69:6f:5e:59:
                    8f:5c:be:3e:ce:e8:44:55:00:d8:f6:9c:a3:60:64:
                    44:00:8f:14:48:74:e4:55:4a:1b:97:0d:78:7d:e9:
                    48:08:6b:46:f9:a2:56:4e:d9:c3:76:5e:cd:5f:d9:
                    77:a9:a4:f6:9e:76:6a:d7:ac:47:b0:1f:2e:47:8b:
                    1d:0f:95:7c:57:c9:8c:cb:71:29:3b:c8:1b:c4:73:
                    fc:97:e4:36:8b:f5:0c:aa:92:cd:9b:5d:e3:49:1b:
                    80:b1:d2:7e:9e:27:30:27:7d:56:bc:ea:c8:1c:85:
                    cf:fb:73:32:9d:f5:03:5f:98:24:46:5c:2a:e8:43:
                    83:98:93:05:0d:15:21:60:c4:7d:12:3f:72:3f:db:
                    a3:0c:cd:28:eb:21:d0:3b:22:b8:06:31:81:4d:dc:
                    35:6e:4b:71:cc:44:9e:4e:c3:36:02:fe:08:44:9a:
                    54:4e:3a:fb:81:68:67:9a:a8:54:24:a4:53:00:7b:
                    02:bf:01:82:2e:b9:c5:84:5b:e3:6e:9e:0e:00:a3:
                    17:1c:1f:fe:fc:da:de:df:7b:3f:07:bc:1b:1a:9d:
                    23:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:75:76:05:37:81:DF:DF:B6:E7:23:2B:DD:93:0A:26:86:BA:3C:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/065b1e98-4a36-32df-a104-46549d6e419c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.2.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a3:51:90:42:3e:65:db:ab:4e:4d:67:c5:9d:4d:3e:c4:2c:
         c8:f3:34:c8:1d:56:20:5d:00:23:40:fe:ad:a8:a4:f5:01:ac:
         f1:81:50:c9:c8:2a:7c:75:78:05:dc:41:ae:89:4a:78:22:8f:
         bc:b0:fa:44:28:47:50:53:df:bf:b4:c7:02:34:4b:81:79:4d:
         0b:fa:1c:98:89:b9:56:71:d0:4c:12:02:19:24:09:e6:ef:19:
         4b:d4:c4:1d:fb:61:a5:74:20:57:a7:98:e6:3c:ff:08:31:df:
         70:6e:b2:c4:97:a1:f7:50:2b:27:0f:c6:c2:97:58:79:4f:3e:
         fa:6a:5b:34:28:46:68:a8:d6:b8:bc:50:a7:90:ec:25:60:dc:
         59:ba:46:ab:1e:1b:ac:c2:b4:91:d2:8d:a7:24:91:96:9f:ad:
         4a:ae:9a:e4:32:0d:a2:b4:b7:47:93:8d:6e:19:46:2f:fb:fe:
         66:62:b8:26:17:d4:00:b6:cb:45:9a:f8:16:3b:35:c7:ca:2e:
         55:04:83:0a:1b:57:95:59:20:26:92:33:3e:80:7c:a7:af:5f:
         17:16:3b:1e:95:02:a5:06:a6:0f:9c:b6:c4:b7:ac:ad:e5:c2:
         7c:d9:e1:c0:62:f7:1a:47:6a:b1:ef:59:ac:e2:79:a1:bb:6c:
         ad:f6:fe:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 23:18:08 2026 by rpki-client