Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/065b1e98-4a36-32df-a104-46549d6e419c.roa
File:                     065b1e98-4a36-32df-a104-46549d6e419c.roa (raw, json)
Hash identifier:          LeX1+vuiLzvKJyzDRFADyX8YBh08as8aTHn1RQBY4pk=
Subject key identifier:   1E:1E:1E:6A:B0:9C:60:77:DB:B4:25:FD:8F:81:E8:3E:99:03:28:96
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584ED2CC77F9FF86AF6520291100
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/065b1e98-4a36-32df-a104-46549d6e419c.roa
Signing time:             Thu 13 Aug 2026 13:00:12 +0000
ROA not before:           Thu 13 Aug 2026 13:00:12 +0000
ROA not after:            Wed 11 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        74.2.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d2:cc:77:f9:ff:86:af:65:20:29:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 13 13:00:12 2026 GMT
            Not After : Nov 11 14:00:12 2026 GMT
        Subject: CN=d29ced4e-8b68-4a17-bad3-75c841cf688d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:bd:d6:d2:a5:81:db:bd:22:ae:da:36:1a:60:
                    2e:3f:2a:52:74:62:17:c1:ea:c7:88:b9:22:ec:d0:
                    50:df:19:07:e8:42:cb:44:dc:ee:49:9c:df:9d:a6:
                    3e:5f:e0:48:6c:d8:43:d6:43:98:2d:34:3b:20:de:
                    25:54:6a:85:12:0e:75:62:96:30:81:7f:a0:00:a0:
                    07:5e:b8:ed:e1:29:dc:20:40:b8:49:ed:3b:13:b0:
                    f1:8e:da:ba:06:7a:89:58:fd:60:70:30:bd:5e:fa:
                    5d:f4:25:c3:d0:11:3e:42:87:7d:82:7d:78:c7:81:
                    b8:16:88:fd:d4:75:d5:9e:b4:12:c1:3f:63:5e:61:
                    a4:6a:05:55:bb:9b:eb:a5:67:aa:d9:8c:e7:39:e9:
                    f7:d4:98:55:f9:72:4e:04:09:b9:89:2f:2e:5b:87:
                    46:fa:97:33:7c:a0:a3:66:ce:a4:c9:9d:6c:d5:7e:
                    c7:63:85:08:2a:8e:b0:5b:e9:c8:58:13:29:ea:39:
                    ff:e2:40:13:90:63:7e:44:6f:6d:ab:e2:d6:46:12:
                    dd:14:c2:20:88:e2:ee:af:5a:ac:62:4a:94:92:f8:
                    65:45:ec:18:dc:81:98:0a:b1:dc:c3:9d:99:77:63:
                    d2:0c:03:9b:c6:1e:04:4e:6e:ba:2f:9d:39:54:42:
                    b2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1E:1E:6A:B0:9C:60:77:DB:B4:25:FD:8F:81:E8:3E:99:03:28:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/065b1e98-4a36-32df-a104-46549d6e419c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.2.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:04:6a:17:d6:e3:fa:f7:76:53:1a:eb:c4:66:19:e1:bc:f4:
         11:e2:bc:98:bd:30:85:0c:1b:3b:2d:63:b8:01:72:ee:a5:8b:
         88:49:1e:58:3d:0e:ae:0b:72:50:b8:50:15:5e:67:f3:fc:48:
         19:3e:74:1a:bc:f5:6a:f2:99:c8:a0:0b:57:93:25:f0:41:74:
         b3:6e:ca:4a:71:1e:b0:b7:f3:29:ef:d3:90:72:8f:0a:e3:20:
         8f:02:d8:2b:4f:c2:8e:c0:d5:07:3d:11:ba:f5:2c:cc:79:e8:
         46:19:b7:d6:4c:65:dd:50:7e:f7:2f:d1:4c:b0:45:0c:dc:7e:
         c5:c8:97:bd:e1:f4:b6:e8:07:cb:53:0d:5e:84:5a:5b:2d:ce:
         8e:06:5e:7a:26:fe:55:5f:76:04:90:5f:7e:14:b2:74:51:a3:
         d2:74:2b:60:9a:08:0c:e6:68:54:dc:80:e3:b0:dc:11:fc:9e:
         51:6e:ec:8a:cf:5a:25:8a:c4:de:9a:2e:73:7b:26:e3:18:d8:
         56:5d:19:43:35:87:55:05:44:79:58:44:ab:b7:76:3e:c4:c1:
         f4:aa:bb:2c:0e:12:b6:43:d4:f3:d9:c3:67:ca:c3:ea:56:c7:
         3f:ec:72:e2:62:11:d2:8a:63:4b:0e:31:12:32:06:87:e2:54:
         12:3e:6c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:14:29 2026 by rpki-client