Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/24a2b7f8-0917-3adc-b568-e8b64afe9aee.roa
File:                     24a2b7f8-0917-3adc-b568-e8b64afe9aee.roa (raw, json)
Hash identifier:          q7Ml6aPLUiuqHst5iTKZ6roVV8wtYVf1gN62l/O9TPQ=
Subject key identifier:   09:DE:BF:6B:83:E6:FD:62:27:C6:74:E8:DF:77:91:DD:38:F2:1A:CE
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CA9B4729CDE7EBB5545CD6200
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/24a2b7f8-0917-3adc-b568-e8b64afe9aee.roa
Signing time:             Tue 27 Jan 2026 10:09:50 +0000
ROA not before:           Tue 27 Jan 2026 10:09:50 +0000
ROA not after:            Mon 27 Apr 2026 09:09:50 +0000
asID:                     174
IP address blocks:        74.0.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a9:b4:72:9c:de:7e:bb:55:45:cd:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jan 27 10:09:50 2026 GMT
            Not After : Apr 27 09:09:50 2026 GMT
        Subject: CN=299d738c-12b2-4f41-8759-c1403c832fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:64:96:b6:ae:37:12:e0:3f:51:22:f3:c0:76:
                    0d:d3:37:58:49:cc:58:ad:c0:69:a0:d0:17:5b:c1:
                    8b:e6:0f:8c:e4:da:32:07:17:13:85:24:c2:0e:49:
                    5c:8e:1c:3e:77:f6:04:96:6a:25:75:6e:bf:70:dd:
                    6e:37:4e:62:5c:3d:32:68:d9:20:45:58:9e:a8:d2:
                    e8:8d:e2:df:be:81:48:10:dd:50:11:36:31:4f:5c:
                    a4:ea:85:93:e0:7e:30:77:79:89:95:d2:16:11:d8:
                    14:8a:2a:f8:9a:4d:bc:f7:52:dc:d2:1e:b4:02:6d:
                    d9:c8:40:d9:34:8e:53:6b:58:ad:67:a8:14:72:62:
                    35:d0:e7:d4:52:00:f1:f0:20:89:d6:14:61:88:c7:
                    c3:02:fe:04:bf:d0:d7:cc:4f:94:0e:31:e4:3c:32:
                    dd:d2:4f:93:73:42:94:6f:2f:7d:b0:7a:66:d6:da:
                    fd:fb:3b:7b:7f:68:bb:47:dc:4f:7d:2d:7e:3a:08:
                    a6:a1:2a:ab:1a:6a:da:29:24:00:af:03:b3:0e:21:
                    31:ab:3e:56:11:22:39:ac:5c:2b:1e:f9:f4:fd:fd:
                    66:01:4b:74:02:8a:23:98:17:85:55:df:5b:c4:6d:
                    fa:ca:ff:23:d4:c5:e1:12:13:64:fa:57:2c:e6:3f:
                    fd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DE:BF:6B:83:E6:FD:62:27:C6:74:E8:DF:77:91:DD:38:F2:1A:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/24a2b7f8-0917-3adc-b568-e8b64afe9aee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.0.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:83:af:7c:e9:82:44:fe:2e:aa:29:3b:89:06:0d:ff:6d:d6:
         5c:a0:f0:1f:98:e2:5a:0c:b2:5b:3c:3c:f3:cf:ab:6c:ba:34:
         8a:a3:99:65:88:eb:df:37:11:e5:65:be:01:7b:fe:0d:ea:99:
         23:a3:42:5b:b6:64:74:78:66:de:ef:9c:5a:7f:c2:64:b3:71:
         48:2d:50:96:24:3d:91:57:fc:57:f5:ab:7d:17:05:11:80:50:
         6b:24:a0:0a:71:aa:05:e3:5f:38:41:6f:fa:cb:75:e6:b9:59:
         22:7a:36:ee:15:53:e1:60:7c:a7:cf:b7:03:cf:6b:00:d4:f2:
         df:9b:fc:1a:78:dc:5f:fc:bb:6f:50:3c:41:9b:4e:6b:9f:97:
         3c:3f:94:72:c4:8a:e2:40:56:57:57:ae:e6:21:56:37:a9:bb:
         f5:d2:42:c1:82:22:4d:42:2a:ac:ab:05:ac:3d:31:be:47:03:
         fc:1b:f7:63:ad:4d:9f:ea:e4:fe:68:05:76:cd:5c:6a:92:c3:
         2b:90:6c:a4:51:7e:03:84:65:79:ca:05:b6:11:b7:c6:82:0a:
         cb:1b:ea:c3:9b:e8:80:70:ac:65:7c:0a:bb:0a:2f:bf:7f:e9:
         36:4b:97:05:1f:90:1c:1a:25:95:40:35:ae:c3:f9:10:1a:60:
         37:c6:20:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 22:27:35 2026 by rpki-client