Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/954ffdb3-17ed-3f39-bb7a-d1d14c343959.roa
File:                     954ffdb3-17ed-3f39-bb7a-d1d14c343959.roa (raw, json)
Hash identifier:          1gnFk6CkLRxha6RTUgxbZp8S6s8x6LP6zL2dw/wTUbw=
Subject key identifier:   33:47:12:8D:A2:8E:30:99:FA:99:77:E1:BC:54:5C:18:8B:E4:5A:4E
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F70881B5A23B9A9306EA6BF00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/954ffdb3-17ed-3f39-bb7a-d1d14c343959.roa
Signing time:             Fri 09 Oct 2026 01:00:12 +0000
ROA not before:           Fri 09 Oct 2026 01:00:12 +0000
ROA not after:            Thu 07 Jan 2027 02:00:12 +0000
asID:                     137409
IP address blocks:        74.0.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:70:88:1b:5a:23:b9:a9:30:6e:a6:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct  9 01:00:12 2026 GMT
            Not After : Jan  7 02:00:12 2027 GMT
        Subject: CN=b333f13e-e1ce-44ed-b1d6-40c29f42897d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5d:e5:04:8b:44:bd:47:0a:13:4d:31:c2:90:
                    22:63:7c:d1:1b:1a:3f:3e:a5:6f:26:42:ca:f4:74:
                    72:ad:51:9a:a4:6f:0c:ad:8c:91:9a:34:d8:e9:1d:
                    b5:4f:11:a1:1d:9d:d8:5a:57:d7:d9:0b:7c:ab:87:
                    26:61:55:3c:97:16:fa:93:7c:be:bf:64:27:31:26:
                    84:32:86:fd:c1:7a:20:2f:ee:e5:f0:11:40:58:ed:
                    72:b0:9a:d8:6d:cb:2a:21:90:be:53:ae:b2:88:dd:
                    a1:c7:97:ae:bf:1d:bd:59:c6:57:ab:4d:aa:75:ba:
                    79:13:fd:1f:81:dd:aa:fb:98:80:31:40:75:f7:e6:
                    0a:52:cf:9f:57:7c:1b:b3:6d:67:ce:cc:87:da:86:
                    70:be:3c:54:44:b6:01:13:61:97:63:6e:da:44:d9:
                    8d:0e:32:b6:b9:a8:4b:a1:18:15:5b:86:4e:55:66:
                    1a:35:eb:8f:72:5c:56:d5:94:c4:f9:67:66:62:5f:
                    18:fd:09:52:be:c1:7f:90:67:e8:66:44:bb:b9:b7:
                    07:ab:f1:80:00:48:09:57:26:ad:59:03:93:fd:d2:
                    af:9f:3c:42:d7:90:d5:b4:25:6d:ac:8e:27:80:83:
                    86:92:bd:5f:d6:2a:b1:e2:44:e2:46:8b:8a:80:a1:
                    93:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:47:12:8D:A2:8E:30:99:FA:99:77:E1:BC:54:5C:18:8B:E4:5A:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/954ffdb3-17ed-3f39-bb7a-d1d14c343959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.0.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ab:36:7a:80:d2:69:76:ee:fe:d8:b8:ed:8b:12:6d:43:af:
         78:2f:1f:3e:b0:e4:cb:3d:56:f6:8e:05:e0:da:df:08:96:e0:
         21:2a:a2:bb:1a:0d:0f:40:44:57:bc:38:82:0c:13:d3:27:88:
         c0:5b:09:3b:49:e4:51:3d:5f:39:b4:79:c2:c1:d5:c5:e3:4d:
         18:4f:14:c6:ad:c8:09:e5:f8:8c:3e:86:de:1d:a3:3e:23:c7:
         f0:90:0e:2f:89:e6:69:95:10:1e:50:cb:b1:eb:15:bc:6b:48:
         b4:91:e0:df:41:fa:60:c4:e2:95:38:c2:b5:7a:64:97:c0:cb:
         c5:43:6c:0e:9b:29:2d:29:ba:c4:45:1a:31:ee:7e:4e:7c:fa:
         4a:a5:ab:72:d7:fa:a7:2d:49:1c:2e:8b:12:e1:90:3e:32:dc:
         4b:b5:58:2f:92:59:6d:5b:95:6d:23:e1:49:53:6e:f4:c0:41:
         10:68:d9:b0:68:2b:1f:75:94:22:f4:10:bd:2e:b4:30:70:26:
         2d:5f:61:47:e4:9c:81:bc:5b:b4:78:6c:24:76:6d:77:ef:11:
         86:d0:40:23:a0:9d:28:7f:04:a2:09:66:0d:b9:51:e9:61:ab:
         1b:f1:93:72:89:69:d2:da:9b:5f:ae:6f:f7:38:13:bf:2d:cd:
         bf:0f:0d:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9wiBtaI7mpMG6mvwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MTAwOTAxMDAxMloXDTI3MDEwNzAyMDAxMlowLzEtMCsGA1UEAxMk
YjMzM2YxM2UtZTFjZS00NGVkLWIxZDYtNDBjMjlmNDI4OTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF3lBItEvUcKE00xwpAiY3zRGxo/PqVvJkLK
9HRyrVGapG8MrYyRmjTY6R21TxGhHZ3YWlfX2Qt8q4cmYVU8lxb6k3y+v2QnMSaE
Mob9wXogL+7l8BFAWO1ysJrYbcsqIZC+U66yiN2hx5euvx29WcZXq02qdbp5E/0f
gd2q+5iAMUB19+YKUs+fV3wbs21nzsyH2oZwvjxURLYBE2GXY27aRNmNDjK2uahL
oRgVW4ZOVWYaNeuPclxW1ZTE+WdmYl8Y/QlSvsF/kGfoZkS7ubcHq/GAAEgJVyat
WQOT/dKvnzxC15DVtCVtrI4ngIOGkr1f1iqx4kTiRouKgKGTYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDNHEo2ijjCZ+pl34bxUXBiL5FpOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTU0ZmZkYjMtMTdlZC0z
ZjM5LWJiN2EtZDFkMTRjMzQzOTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgAQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC+rNnqA0ml27v7YuO2LEm1Dr3gvHz6w5Ms9VvaOBeDa3wiW4CEqorsa
DQ9ARFe8OIIME9MniMBbCTtJ5FE9Xzm0ecLB1cXjTRhPFMatyAnl+Iw+ht4doz4j
x/CQDi+J5mmVEB5Qy7HrFbxrSLSR4N9B+mDE4pU4wrV6ZJfAy8VDbA6bKS0pusRF
GjHufk58+kqlq3LX+qctSRwuixLhkD4y3Eu1WC+SWW1blW0j4UlTbvTAQRBo2bBo
Kx91lCL0EL0utDBwJi1fYUfknIG8W7R4bCR2bXfvEYbQQCOgnSh/BKIJZg25Uelh
qxvxk3KJadLam1+ub/c4E78tzb8PDWQ=
-----END CERTIFICATE-----
Generated at Mon Oct 19 07:53:44 2026 by rpki-client