Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9d39f6ec-ea0d-3fe1-b3fa-60b0c35c2ddd.roa
File:                     9d39f6ec-ea0d-3fe1-b3fa-60b0c35c2ddd.roa (raw, json)
Hash identifier:          CACu9MtTLdkqc3k+7Zx2j/NlRG2JrqGvto41204Ml3c=
Subject key identifier:   D2:AD:99:4E:EF:66:FC:DD:D5:64:9E:1B:6D:F6:0B:E3:C9:BA:76:05
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F0B5047616A3B99C6F61A9A00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9d39f6ec-ea0d-3fe1-b3fa-60b0c35c2ddd.roa
Signing time:             Wed 02 Sep 2026 18:51:06 +0000
ROA not before:           Wed 02 Sep 2026 18:51:06 +0000
ROA not after:            Tue 01 Dec 2026 19:51:06 +0000
asID:                     6079
IP address blocks:        74.1.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0b:50:47:61:6a:3b:99:c6:f6:1a:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep  2 18:51:06 2026 GMT
            Not After : Dec  1 19:51:06 2026 GMT
        Subject: CN=0b958aa0-f900-4b1f-859d-bd94fc5503da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1c:74:2a:6d:f6:7a:5e:18:f7:51:35:55:33:
                    8e:f0:1b:e4:c8:aa:16:f0:19:04:54:c1:64:29:53:
                    10:a6:0d:84:f2:1c:ab:52:b4:8d:0d:3b:3d:40:9f:
                    9e:3b:81:60:53:2e:b5:e1:e0:ec:99:69:f6:5d:aa:
                    76:f1:b3:15:d4:77:49:83:8d:f7:fa:e2:f8:28:16:
                    e7:84:b6:3c:c8:c7:7d:1b:93:b0:14:15:19:7d:a0:
                    cd:d2:94:09:10:67:6f:c3:85:8b:81:d2:07:c4:b5:
                    82:47:88:19:71:4f:bf:8d:b9:b7:27:ad:d2:94:12:
                    3c:c6:ff:55:fb:4f:d8:c9:7d:b6:6a:23:63:e2:85:
                    f6:7d:91:f9:ca:b2:ed:06:1d:32:5e:4a:e6:a1:99:
                    af:7e:6e:a4:c4:37:9c:83:79:91:e6:8e:0f:38:be:
                    1f:75:fa:54:19:6d:5a:e0:b0:15:03:2d:24:64:b9:
                    c0:4c:27:1a:8d:99:57:86:b5:89:a4:7c:2f:b7:1d:
                    a9:7c:86:bb:6a:4b:20:8b:d0:06:97:76:b8:e9:f1:
                    70:be:90:ee:ec:56:b2:54:0e:80:50:64:05:ca:49:
                    8b:69:0a:0d:5f:4c:c4:2d:8d:5d:88:79:0e:55:4e:
                    2c:77:98:b2:68:97:ea:c7:c7:b1:14:ed:8e:48:25:
                    88:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AD:99:4E:EF:66:FC:DD:D5:64:9E:1B:6D:F6:0B:E3:C9:BA:76:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9d39f6ec-ea0d-3fe1-b3fa-60b0c35c2ddd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:f3:b3:3b:df:f0:42:09:51:7d:0a:02:e2:0e:86:76:79:ac:
         9d:0d:9d:e8:b0:1b:29:fe:40:9d:70:fe:e3:ed:38:83:4b:c6:
         31:02:01:07:be:6d:e3:98:71:77:3b:8d:2f:20:9d:69:57:ad:
         2b:58:69:ef:e7:75:67:b8:32:db:7f:9f:36:93:40:00:b0:d6:
         4d:f5:89:53:5d:41:66:ad:51:bd:1a:29:c9:c6:8d:16:e5:65:
         ae:86:3b:b8:3a:eb:da:09:80:81:13:d6:bd:e2:44:d8:8b:c8:
         52:ac:7c:ec:30:ac:ce:d6:b7:a5:c5:aa:64:36:6b:c2:ea:c5:
         a9:72:9e:5c:ab:b1:27:f2:e1:d3:3d:e9:af:d8:10:f6:33:2a:
         e7:99:e1:0b:2a:c2:c0:60:d6:f0:83:cb:95:2a:92:eb:47:1c:
         32:48:a0:ff:8a:1d:24:67:2d:62:a2:a3:4e:2a:64:60:71:57:
         1f:b0:49:2d:41:0a:a2:bd:6c:de:55:a4:81:32:99:b2:91:f2:
         45:13:8a:f2:3e:68:94:2a:43:2c:9a:0b:22:99:d2:97:94:57:
         4f:9a:c2:58:0c:27:5d:22:68:8d:cb:99:94:6a:4a:0b:6f:d4:
         03:ec:ef:c3:c0:74:21:b4:9d:ff:10:a9:56:65:dc:22:ee:ff:
         25:96:9b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:28:52 2026 by rpki-client