Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/61977b73-1b7e-3998-abb3-01ce8577abb6.roa
File:                     61977b73-1b7e-3998-abb3-01ce8577abb6.roa (raw, json)
Hash identifier:          0ZkhntVW3yEA/DbinI5BhDsFyLq5BoSK/DwTiLjFnnA=
Subject key identifier:   98:51:6F:CD:0D:C0:A4:8E:7A:17:4D:66:1A:43:B4:74:CA:23:74:AC
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EA7875D58B8A7A735647211C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/61977b73-1b7e-3998-abb3-01ce8577abb6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     834
IP address blocks:        74.0.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:5d:58:b8:a7:a7:35:64:72:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fdbf44c5-2e1a-4d45-ba0d-7e47a4670a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b7:92:c5:77:cd:23:1b:86:7f:0e:35:01:2a:
                    74:30:e9:0b:22:70:34:8a:fd:e0:9d:60:57:be:75:
                    b5:b5:ec:66:18:a5:63:af:30:25:11:8d:fb:94:5e:
                    2e:d7:11:e6:2b:b3:7b:83:d5:7d:5b:7b:bc:1e:b9:
                    aa:5d:06:a0:13:43:80:67:db:54:57:d6:cb:1c:a6:
                    f1:0d:74:2f:4f:bb:2a:3b:c1:be:6c:61:83:a6:cc:
                    90:ce:91:99:bc:24:67:2d:d5:6d:2b:6c:e7:f9:9d:
                    6a:b4:90:14:13:fe:ab:39:dd:e6:ee:d2:8f:b2:5c:
                    e9:06:a6:c1:06:c3:46:2c:19:ce:a2:1e:87:0b:bd:
                    43:55:8e:57:e6:cb:55:0e:7a:b3:00:30:f1:70:16:
                    3e:28:0f:1e:15:b3:33:b1:61:5e:d4:17:ca:3d:1b:
                    40:5b:5d:47:b0:c9:07:f4:6d:04:f6:08:65:6c:fb:
                    ae:21:99:8d:30:d4:f0:d2:39:34:3f:db:5d:a0:1c:
                    36:94:c1:27:87:1b:a0:3a:89:85:12:80:1a:e3:03:
                    a6:5b:4e:98:5b:82:b9:0c:fd:c2:c6:47:ab:25:79:
                    50:d8:9c:13:dc:4e:19:4c:30:c8:6a:09:14:16:10:
                    2a:2f:21:ea:e2:6a:93:78:f3:5f:fa:e2:f1:20:f3:
                    02:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:51:6F:CD:0D:C0:A4:8E:7A:17:4D:66:1A:43:B4:74:CA:23:74:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/61977b73-1b7e-3998-abb3-01ce8577abb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.0.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ae:e6:31:5b:6e:c1:1c:0a:76:dc:df:7f:95:09:e4:63:eb:
         af:0d:a0:c3:dd:65:54:7b:7f:3f:ed:a1:2a:5d:0f:9a:7d:c4:
         f3:23:85:6f:d8:aa:25:80:97:59:0c:4f:4d:35:1f:6d:80:70:
         36:42:af:7d:be:76:7c:86:6c:fb:7f:f2:f4:6b:92:b3:30:33:
         92:c8:92:b7:17:82:71:50:44:d1:97:0f:2c:26:34:ac:23:06:
         b4:a4:11:40:82:f0:2e:6a:e2:bb:c3:88:94:88:51:c9:49:f9:
         d7:3b:d3:9e:52:20:40:5b:20:9d:7c:9c:ef:1c:cc:d6:3f:85:
         0f:a2:e5:aa:e7:f4:5d:b0:9c:ca:31:c6:a4:6d:38:72:0e:f7:
         34:c3:f9:d1:da:6d:a9:a2:ea:84:9e:95:66:c3:53:ad:d0:19:
         c4:9d:8e:e1:fd:cf:1d:a6:58:6f:a5:4d:00:c5:19:9e:d9:aa:
         4d:4d:c9:0e:18:ea:d4:8c:a1:2d:ca:af:60:fa:08:24:3d:20:
         2c:de:e3:ab:b5:53:0f:91:56:8b:3f:32:09:50:19:d8:7a:d7:
         63:00:a6:e8:77:c1:f9:10:50:1d:84:64:89:5a:8a:9f:a0:a0:
         f9:a3:95:95:8a:83:86:6e:5d:4f:5b:d4:30:22:e0:60:56:0f:
         f4:b0:82:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 05:00:49 2026 by rpki-client