Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9f9cb273-ee6c-3eca-a98c-9a36e32ca4c3.roa
File:                     9f9cb273-ee6c-3eca-a98c-9a36e32ca4c3.roa (raw, json)
Hash identifier:          EqU8SEbJD88LSSoIm+xzh2HQUOUoLlwGxibZY2PtjOw=
Subject key identifier:   DC:2C:65:E5:6A:5E:84:44:D0:39:FD:5B:38:87:F1:9E:F4:6C:1E:09
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E74BD6B5C25B3FB35A4BC1E80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9f9cb273-ee6c-3eca-a98c-9a36e32ca4c3.roa
Signing time:             Fri 10 Jul 2026 20:23:56 +0000
ROA not before:           Fri 10 Jul 2026 20:23:56 +0000
ROA not after:            Thu 08 Oct 2026 20:23:56 +0000
asID:                     12083
IP address blocks:        74.2.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:74:bd:6b:5c:25:b3:fb:35:a4:bc:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 10 20:23:56 2026 GMT
            Not After : Oct  8 20:23:56 2026 GMT
        Subject: CN=7c8f30b1-7adb-4e53-8017-034677cb25f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:aa:a3:50:58:6c:27:75:5a:9c:15:d7:55:b9:
                    f1:07:a3:da:63:a0:17:21:26:70:5f:5a:e5:20:0e:
                    e5:92:f4:c0:f5:b1:5b:e1:fb:80:43:95:60:75:23:
                    22:11:5a:3e:0d:45:a0:84:e9:5e:86:5a:21:18:96:
                    c3:0a:a2:3d:3e:28:a1:e6:1b:1c:06:8b:7f:c1:35:
                    28:01:13:55:aa:05:bf:03:64:28:d1:85:6b:7f:c0:
                    a4:e2:f7:6e:ae:e5:43:41:4a:6d:a1:9c:1b:75:21:
                    47:55:bc:c9:9d:4c:2e:fe:81:ba:ed:ec:e6:ab:fe:
                    4f:7c:61:fb:9e:74:b8:02:00:6f:a9:f0:02:98:60:
                    f2:48:db:07:88:d5:e3:e4:98:71:e0:cd:fb:03:42:
                    ca:b2:f0:e7:88:9f:5a:b8:1b:c3:41:f8:cf:03:bc:
                    56:76:01:d0:8a:cc:40:74:54:b2:39:22:f2:01:40:
                    91:96:23:42:90:6f:41:3b:a8:92:69:0a:f7:14:26:
                    71:c2:3b:54:23:9e:46:9c:5f:b8:d1:5c:56:08:da:
                    17:45:9b:e5:9e:20:29:6c:e7:73:1b:40:66:44:33:
                    8d:73:fa:f4:b1:e2:9b:ca:2c:2c:17:b5:0b:ad:ab:
                    50:be:8b:8e:6a:9f:ce:a7:56:67:49:d0:4a:07:9f:
                    d1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2C:65:E5:6A:5E:84:44:D0:39:FD:5B:38:87:F1:9E:F4:6C:1E:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9f9cb273-ee6c-3eca-a98c-9a36e32ca4c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.2.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:cc:3a:cf:ce:6d:1f:e2:65:c7:42:88:f5:b9:49:3e:33:1d:
         d8:39:28:9f:8f:f0:a5:ba:6f:3d:68:6a:b1:75:f2:6f:a3:a7:
         c7:ca:02:98:37:b0:93:8d:c8:0b:0c:db:a5:6e:b9:6d:e8:80:
         b8:06:6d:90:a2:db:1c:ff:ae:2a:23:96:6a:88:91:c4:bc:4f:
         5e:e0:f9:bd:93:df:29:00:c4:6d:51:24:b9:26:f6:e6:6e:2c:
         be:e2:20:a3:28:af:da:31:00:37:0a:8a:31:40:93:1b:c6:27:
         89:ed:a5:c0:69:25:24:30:8f:e4:89:e4:2e:61:82:55:08:08:
         60:e4:bf:c2:7a:3e:b7:6b:c7:ad:a5:16:8d:bd:d3:3a:44:fb:
         81:8b:ed:de:88:af:b0:56:99:7d:a6:9a:78:1b:e4:2a:32:ff:
         eb:5c:eb:91:11:8e:34:9c:5d:ad:a8:f3:0e:1d:1a:aa:70:d1:
         3b:cf:a9:00:40:dc:c9:4f:c9:75:ad:36:81:cc:cf:8a:07:dd:
         7b:4b:3d:a4:b7:cb:4f:c9:42:01:04:ba:33:21:ec:9c:32:af:
         65:b4:4c:bf:e0:be:bb:04:57:e8:17:61:55:a8:5a:fb:40:2e:
         0b:2d:cc:07:c0:8e:f8:08:59:6f:2f:e0:60:c7:00:1f:27:2b:
         ba:9d:57:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:10 2026 by rpki-client