Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9e449d67-6490-3419-8d6f-eb7187dad389.roa
File:                     9e449d67-6490-3419-8d6f-eb7187dad389.roa (raw, json)
Hash identifier:          23YnUdtZnOE+o/9pcsn91dTrs+6NP3zuIMvgGO1CQSU=
Subject key identifier:   A5:01:03:7F:FC:45:BC:7B:9E:2B:DB:16:D2:E2:B9:54:5E:67:D7:54
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F3EC2608FCF11EEB00765B1E0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9e449d67-6490-3419-8d6f-eb7187dad389.roa
Signing time:             Mon 21 Sep 2026 05:07:13 +0000
ROA not before:           Mon 21 Sep 2026 05:07:13 +0000
ROA not after:            Sun 20 Dec 2026 06:07:13 +0000
asID:                     834
IP address blocks:        74.1.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:c2:60:8f:cf:11:ee:b0:07:65:b1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 21 05:07:13 2026 GMT
            Not After : Dec 20 06:07:13 2026 GMT
        Subject: CN=5ee22552-09e0-4484-8d53-1aef07caf226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:47:54:22:58:a5:ac:02:2d:b6:ea:ec:fb:0a:
                    89:90:2f:49:82:5d:37:83:cc:2c:db:a4:98:ec:35:
                    ec:aa:0c:b4:f8:db:43:e1:88:32:4b:96:c2:03:b4:
                    1c:c2:ae:37:44:56:9e:d2:4c:bc:77:8c:95:b0:1b:
                    ae:2a:6b:61:67:0f:05:85:52:9f:62:d0:f7:ae:ae:
                    76:68:ae:a4:ea:0c:38:c4:d1:c8:73:f3:60:ab:ec:
                    3a:c4:9f:2f:0c:26:ab:7b:0c:af:c6:8b:61:02:4f:
                    66:3f:72:8d:37:a9:fe:9b:61:2a:83:3f:92:c8:38:
                    1b:30:7c:0d:05:c4:a5:88:6d:47:dd:35:39:8d:a4:
                    56:c2:61:6b:22:67:1c:b0:3c:17:d6:d2:71:ad:c4:
                    bb:e1:f6:eb:05:43:10:fa:88:fc:bd:b5:91:1f:e3:
                    f0:0d:de:9a:1a:38:9b:44:ba:a9:eb:04:e3:d8:a6:
                    c3:57:12:cf:3a:80:6e:3e:26:90:8b:32:3f:2b:dd:
                    80:14:77:90:3c:c9:af:5d:da:0b:26:45:96:0c:3a:
                    6d:ff:bf:b3:12:dd:8a:80:db:fb:50:b7:d6:4e:ee:
                    7f:bd:eb:65:16:14:6d:5d:61:c8:66:87:e2:4e:9b:
                    28:35:3f:07:ac:c7:1b:43:59:f5:78:5d:b1:05:b0:
                    19:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:01:03:7F:FC:45:BC:7B:9E:2B:DB:16:D2:E2:B9:54:5E:67:D7:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9e449d67-6490-3419-8d6f-eb7187dad389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:e4:a4:50:56:6e:bd:f5:e4:31:f1:0d:c4:64:63:ae:e6:9b:
         10:4d:61:03:ac:de:92:e9:0e:55:52:1c:d7:56:45:89:e0:a0:
         c9:64:8c:1e:20:b6:43:a3:07:e3:fd:82:3e:96:22:66:10:e9:
         ea:a9:d6:b5:f1:8b:32:f6:87:eb:ee:da:4e:03:e0:fe:8c:06:
         b0:8b:3d:ac:66:3b:98:3d:0e:60:bb:14:d0:33:79:da:ea:ce:
         90:d0:3b:88:83:e4:29:65:0c:6e:8e:b8:c5:0a:0d:f1:f2:2c:
         74:61:d4:a0:66:2b:69:6e:ab:75:29:49:69:6f:4e:4f:7a:fd:
         cf:d3:1d:53:4f:3d:d6:4f:cc:2d:06:a9:cf:bc:b6:9b:b5:ed:
         cf:89:ad:34:46:cf:73:76:b0:fc:68:78:db:4a:21:36:3c:33:
         7b:2d:f9:89:85:05:14:2d:f7:c3:61:f6:1d:67:79:f6:ed:b5:
         74:30:d1:3a:20:99:e8:45:b6:a2:48:e4:6d:d1:95:8d:67:db:
         01:b9:f6:81:05:c3:ba:12:1c:34:ed:4e:d4:a0:04:64:cf:f1:
         c8:ec:1f:a6:1f:58:a5:24:9f:b5:f5:3f:dd:35:dd:e7:c2:9e:
         10:8f:08:50:07:bd:e3:b8:eb:5b:62:dc:47:32:15:c0:ad:61:
         6f:e7:ed:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:04:16 2026 by rpki-client