Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4cbae457-2168-350f-bd3e-e16e8633c02b.roa
File:                     4cbae457-2168-350f-bd3e-e16e8633c02b.roa (raw, json)
Hash identifier:          iXzP0XWKxF0cdKrCKEK2zDS9Bn8lXy/gHRH8LuKPPOQ=
Subject key identifier:   49:A1:05:D3:C4:EB:84:B2:3C:26:C8:20:3B:3C:68:BC:25:CB:59:62
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EA788B69262D05B12B5BC9000
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4cbae457-2168-350f-bd3e-e16e8633c02b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     834
IP address blocks:        74.1.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:b6:92:62:d0:5b:12:b5:bc:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=68403ddf-be4f-499b-92ad-e4f69b95f61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0b:59:b7:c5:4d:77:e4:4b:30:06:52:46:2e:
                    15:4c:ed:5a:9a:ed:23:d0:13:4c:60:fb:f7:e0:99:
                    9e:ed:79:7d:37:8d:54:53:d6:10:f1:e5:a2:c5:bc:
                    76:67:ba:38:7c:1b:ce:da:52:69:f7:44:6a:e4:19:
                    3a:70:05:54:f5:d8:78:eb:35:ef:fa:1a:5b:5b:c3:
                    f7:f2:7e:45:53:51:c7:b6:81:30:32:a6:e0:b9:a2:
                    cd:25:4a:cd:97:ec:86:00:7b:ac:15:2c:c0:35:ac:
                    ac:81:57:54:02:38:39:61:57:0c:74:74:be:29:79:
                    58:dc:c2:ed:1d:4d:20:0e:06:96:51:7b:b7:73:f6:
                    a6:43:21:d9:e0:6e:12:83:f7:40:b8:ad:79:3c:16:
                    62:79:fc:53:bd:ce:f1:a0:6c:77:d0:4c:82:0d:99:
                    7b:c4:ae:20:7d:23:b6:5a:c8:a7:f8:0f:c7:46:b6:
                    6e:be:0d:bb:67:e7:e2:3e:48:bc:93:69:4e:0c:5c:
                    20:4a:ca:ad:2c:0c:58:1e:99:42:e4:53:e8:0e:c7:
                    c6:30:94:6d:f4:32:fa:1b:5f:d3:92:a9:66:8a:6c:
                    28:27:0f:59:14:83:e9:71:46:73:fe:17:7e:37:a0:
                    37:42:74:1c:db:28:a0:2e:d5:fd:69:3f:9b:a1:b8:
                    ee:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A1:05:D3:C4:EB:84:B2:3C:26:C8:20:3B:3C:68:BC:25:CB:59:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4cbae457-2168-350f-bd3e-e16e8633c02b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:93:55:9f:53:fe:f8:54:96:00:f2:7a:b6:20:ff:37:b5:37:
         e8:06:16:6d:6c:8f:6f:df:6e:12:2a:ff:7d:87:e0:9c:b0:b3:
         04:8c:6b:ca:64:5c:48:af:7a:d0:a1:e2:5c:16:b6:9c:75:58:
         9a:e0:3e:b8:7a:02:4f:3b:fd:aa:4b:42:72:be:39:52:8c:70:
         fb:60:64:2f:4c:2a:26:b1:c5:4d:18:50:e1:53:0c:02:d9:2a:
         1a:1f:0f:e0:c4:0c:fd:d2:b0:15:33:2f:6d:6c:0e:97:93:1e:
         59:90:b1:34:6a:bf:fc:c4:63:73:b9:fd:d7:f7:93:e3:23:c9:
         03:4f:ac:8c:3a:65:85:7d:34:41:2e:08:ff:31:64:d3:10:05:
         aa:d6:a8:2e:bc:03:30:0d:21:ac:12:41:55:12:90:6f:e4:d9:
         b9:65:17:fd:cc:a4:68:5b:fb:0a:34:c9:77:02:22:5d:a8:67:
         38:46:05:da:59:9f:87:3c:a5:18:85:45:f0:93:fe:88:d3:f0:
         5f:13:d0:ec:58:98:00:a1:79:58:a6:dd:c8:d9:05:4b:12:95:
         bc:3a:ba:27:05:39:7b:ea:6c:d2:26:2a:59:7f:9b:03:d0:93:
         09:a8:e4:f5:06:7a:81:ba:39:ff:88:fa:7a:53:67:14:5e:6c:
         4a:bf:25:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:21:06 2026 by rpki-client