Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/747cac7d-2780-3dd5-8063-65ca9ac0442a.roa
File:                     747cac7d-2780-3dd5-8063-65ca9ac0442a.roa (raw, json)
Hash identifier:          h4wp/dOSC/9hRQF50lhTna+FkK3m1B8FBKFeTo41gNo=
Subject key identifier:   3F:4C:63:E0:27:25:26:7C:4A:1F:40:92:B7:34:A0:BF:78:D9:4C:85
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D70F7EF5C5837811F96D8D1A0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/747cac7d-2780-3dd5-8063-65ca9ac0442a.roa
Signing time:             Wed 08 Apr 2026 19:11:40 +0000
ROA not before:           Wed 08 Apr 2026 19:11:40 +0000
ROA not after:            Tue 07 Jul 2026 19:11:40 +0000
asID:                     7029
IP address blocks:        74.2.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:f7:ef:5c:58:37:81:1f:96:d8:d1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr  8 19:11:40 2026 GMT
            Not After : Jul  7 19:11:40 2026 GMT
        Subject: CN=f5e5bf74-aa2d-4304-9e81-f2687891a0c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c8:99:40:c8:f5:b3:eb:71:ed:20:c0:5d:8a:
                    0b:a4:fb:06:75:78:ec:89:67:55:8c:de:ef:2e:42:
                    8b:0b:35:98:b3:3f:88:00:5e:e9:00:ce:1f:69:a9:
                    05:22:6c:71:9c:80:e8:30:22:dc:87:b8:3b:3b:99:
                    ca:0d:0f:0d:a6:57:d1:fd:67:f4:5f:3b:e7:cc:48:
                    43:4d:f7:06:49:ed:da:0b:d6:d0:19:ca:c5:f5:84:
                    53:56:1e:23:6b:c9:46:a7:20:21:f8:0b:39:e2:65:
                    bd:65:d9:c6:fd:c9:f9:db:1a:0b:57:2a:07:77:b0:
                    92:2d:e9:53:fc:a9:03:21:1e:cb:eb:c8:4a:b0:a1:
                    99:19:a9:0a:a0:1c:7c:47:6f:0a:de:31:28:9a:47:
                    20:fd:fb:e3:14:4c:1c:95:11:ff:1f:5a:61:3d:a3:
                    4e:75:9f:9d:b5:61:72:cc:3a:97:15:f7:2f:bb:55:
                    5b:54:2d:62:3a:20:31:37:af:37:b3:0b:b4:e7:3c:
                    33:1e:38:9a:26:0b:0a:d5:35:e9:07:e9:79:e6:3f:
                    ae:67:ff:82:b3:8c:1c:45:85:ee:ea:af:e6:28:bc:
                    c2:4a:af:7b:7c:1b:00:9c:b5:c3:79:2a:98:91:fe:
                    d8:ea:f4:d1:7a:51:e5:3a:1d:cf:9b:d4:06:2d:62:
                    e3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4C:63:E0:27:25:26:7C:4A:1F:40:92:B7:34:A0:BF:78:D9:4C:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/747cac7d-2780-3dd5-8063-65ca9ac0442a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.2.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:b8:1c:76:8f:2d:e3:06:63:74:85:e8:ed:e9:e9:1e:12:51:
         3f:22:45:d0:25:3d:5b:33:dd:2c:a2:d9:24:36:51:98:c1:a0:
         f5:c7:7e:64:ff:ed:bd:bd:f9:92:7b:29:74:52:59:f2:b7:65:
         42:25:6f:1d:d4:f9:f0:d1:6d:84:59:3b:d4:e2:ca:b3:09:b0:
         61:66:2e:9b:d9:6c:3c:14:19:5f:8a:b9:e7:af:2d:40:61:14:
         6b:11:60:61:09:59:e5:c3:ba:ce:35:9d:bb:dd:16:65:56:8a:
         45:21:ab:62:6b:85:bd:05:19:6e:70:e6:85:8f:cc:40:da:18:
         7d:d5:43:b3:5e:59:24:c6:c9:7c:40:f5:1b:e3:00:cc:97:aa:
         33:87:35:14:60:3f:62:05:6e:8b:54:ae:18:9d:16:94:b2:c1:
         a9:2a:2f:32:d6:23:84:51:8f:27:88:bf:8f:c7:03:bd:2e:d3:
         72:a1:67:c6:a5:fa:d0:8a:bd:37:b3:b7:bb:96:6b:87:f8:ca:
         43:7c:4c:bf:00:52:1c:d5:e4:8d:19:3b:ad:70:83:7f:55:6c:
         d8:88:9d:92:26:e1:62:dc:77:e1:85:a7:0c:38:0e:ac:79:3f:
         75:03:0f:a8:ca:7b:e9:ca:85:79:e9:5b:a3:4b:a2:71:29:71:
         69:9b:55:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 23:14:06 2026 by rpki-client