Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/621fd33b-dd16-3453-bd6c-70e5ea38c926.roa
File:                     621fd33b-dd16-3453-bd6c-70e5ea38c926.roa (raw, json)
Hash identifier:          yJWBH04IENzoUqlqfCvhRkTrHQze081/wd19AeoHY5k=
Subject key identifier:   21:41:E2:52:45:DC:3F:42:D6:51:56:EA:42:42:15:48:77:FC:90:36
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DDA55DA156C6B2BF2377FCB80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/621fd33b-dd16-3453-bd6c-70e5ea38c926.roa
Signing time:             Sat 16 May 2026 13:00:31 +0000
ROA not before:           Sat 16 May 2026 13:00:31 +0000
ROA not after:            Fri 14 Aug 2026 13:00:31 +0000
asID:                     13737
IP address blocks:        74.1.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:da:55:da:15:6c:6b:2b:f2:37:7f:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 16 13:00:31 2026 GMT
            Not After : Aug 14 13:00:31 2026 GMT
        Subject: CN=1bae2089-1a8c-4f8f-8533-641f1e19d9e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a3:14:9e:bd:d2:0d:d9:de:fc:3e:f4:21:12:
                    76:84:a7:5a:83:5f:46:37:b8:d9:f6:19:d5:9c:b8:
                    ad:98:26:e9:b0:67:f9:b2:5e:50:26:81:a1:54:b3:
                    f2:15:bb:87:a0:99:f8:24:63:8d:43:e0:95:7f:cb:
                    b8:30:e8:e0:5a:a0:94:ba:88:bf:e5:10:71:02:1e:
                    d3:46:cf:dc:5b:08:c1:af:7e:b0:b6:36:99:e5:c2:
                    de:8c:35:a0:37:1a:43:85:20:79:46:1c:dc:e5:79:
                    33:65:04:df:4d:10:9f:4f:03:2f:3f:52:7e:e8:a7:
                    2c:fd:97:58:2b:cc:17:72:c7:b0:b4:af:7d:b5:10:
                    b1:da:66:5e:f9:85:8c:77:c0:32:61:5b:ed:7a:a8:
                    e6:f3:b8:9c:2c:82:4e:37:a2:ea:96:80:96:1f:c9:
                    77:a4:67:24:be:5b:d6:05:08:f0:82:91:9f:55:d3:
                    80:60:ae:c3:96:04:16:fd:0f:36:25:0f:76:bb:aa:
                    bc:02:df:eb:f7:e5:a8:85:80:b1:e8:e4:eb:2a:cb:
                    d7:65:90:d4:33:d7:4e:b6:e2:19:b8:dc:14:9a:13:
                    b9:e3:a4:19:2b:70:46:32:06:ad:7f:bd:31:86:fe:
                    d0:ef:c6:ef:73:91:da:94:40:7d:f1:f1:e5:d6:51:
                    f2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:41:E2:52:45:DC:3F:42:D6:51:56:EA:42:42:15:48:77:FC:90:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/621fd33b-dd16-3453-bd6c-70e5ea38c926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:6a:94:90:ad:1c:b5:b6:85:06:d2:b5:28:9a:37:22:d9:d5:
         6a:87:24:b7:52:7a:e3:c1:a6:c7:8d:fa:84:82:00:43:12:6f:
         8b:59:e1:90:d9:75:1f:7b:e6:68:93:f3:a1:ab:86:f2:5f:d4:
         14:69:ee:76:1f:69:bd:e3:34:51:6a:40:9a:7f:ae:13:0c:ed:
         84:4e:37:41:5d:2b:27:b6:c3:21:c0:b6:ac:18:ec:95:82:4c:
         4f:87:92:06:78:b5:24:24:11:1a:e2:c7:88:e9:12:6d:f7:76:
         0f:9d:05:e8:df:72:d0:fd:24:87:d9:9d:e9:58:1f:c2:81:e6:
         46:73:02:a8:0b:7a:69:f5:df:e7:e7:4e:1c:e2:1d:0c:01:51:
         b4:7f:ac:94:59:51:00:cd:65:a2:a2:a8:9a:4a:8c:f7:8f:9d:
         54:30:51:e3:73:92:7d:8a:79:b4:84:f5:c5:ad:df:fd:75:39:
         d9:c0:db:af:29:3a:25:04:05:76:9e:17:c8:42:1c:ea:12:60:
         f2:eb:d6:83:b5:cd:5f:91:31:5e:f1:7f:ff:79:26:69:60:eb:
         37:50:8c:af:6c:55:a5:1e:39:f5:2f:06:e5:47:74:07:77:43:
         db:6b:d9:72:93:ae:22:92:6d:15:88:ec:61:0d:c1:e6:79:a8:
         53:40:36:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:06:39 2026 by rpki-client