Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ae38257e-f77a-3bc4-8f6d-bf9236a724ef.roa
File:                     ae38257e-f77a-3bc4-8f6d-bf9236a724ef.roa (raw, json)
Hash identifier:          MOLklZo3+LjB+bQcfHiXCPiOQLOv3UN04SFw+8IhZnk=
Subject key identifier:   C6:E8:17:A9:5B:75:52:28:DE:67:EA:71:E3:3D:05:E8:05:96:F3:74
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D500902B882147EADE1732A40
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ae38257e-f77a-3bc4-8f6d-bf9236a724ef.roa
Signing time:             Sat 28 Mar 2026 00:04:24 +0000
ROA not before:           Sat 28 Mar 2026 00:04:24 +0000
ROA not after:            Fri 26 Jun 2026 00:04:24 +0000
asID:                     834
IP address blocks:        74.2.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:50:09:02:b8:82:14:7e:ad:e1:73:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar 28 00:04:24 2026 GMT
            Not After : Jun 26 00:04:24 2026 GMT
        Subject: CN=6687eeb0-2230-4b98-be99-a64eba5c2dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8e:42:db:aa:50:0c:38:ca:e8:5d:5a:45:98:
                    10:d8:2b:d7:c7:60:b5:f1:06:6f:65:77:21:20:a6:
                    6e:76:e2:2d:83:af:67:52:1f:04:f2:bd:7a:69:c7:
                    d2:30:1c:bf:7a:01:b9:9c:35:24:9c:f9:77:37:30:
                    84:b8:d0:71:b1:0e:e1:77:9f:d0:f8:2e:14:e2:c9:
                    5a:80:a7:92:65:2b:1b:5c:0b:3d:01:06:74:b2:75:
                    b7:5f:96:74:e9:be:68:84:37:3e:b2:52:99:7e:91:
                    c3:8f:21:ec:50:36:74:d7:50:88:5a:29:52:41:10:
                    50:7b:3c:af:49:39:89:ea:95:bb:f0:e6:25:be:39:
                    65:c1:9b:0f:44:bb:1f:7f:9c:ed:ee:89:f7:bc:f7:
                    55:3f:7f:83:c2:97:9e:3a:9a:85:b7:91:66:bf:4b:
                    14:84:94:0e:13:8e:2c:ea:e4:e9:aa:bf:11:62:11:
                    91:bb:d6:bd:4b:ba:5b:45:c4:d7:88:c6:70:b5:41:
                    b0:70:f8:35:11:00:a6:ed:fe:7a:00:06:c2:d1:8c:
                    f5:69:53:50:ee:21:39:0c:59:12:5f:49:7f:27:6e:
                    9f:a4:b7:6f:b4:2a:ed:af:11:53:63:b9:f7:1f:1c:
                    1d:a0:89:e8:c7:2e:c7:37:6b:dd:ce:42:2a:b6:16:
                    25:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E8:17:A9:5B:75:52:28:DE:67:EA:71:E3:3D:05:E8:05:96:F3:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ae38257e-f77a-3bc4-8f6d-bf9236a724ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.2.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:e9:c5:6d:88:d8:f4:65:51:25:4f:63:6a:ac:1d:1e:4a:4d:
         f9:c5:5b:df:79:c8:9c:45:6c:a9:1d:17:fa:79:b1:29:ae:ff:
         45:ae:ce:cd:ac:bc:5b:6b:9a:1e:67:0e:84:86:39:ea:b4:d2:
         15:08:20:11:e6:83:9e:fb:5c:8b:7a:37:c9:a8:5e:d8:fd:45:
         4b:1e:1e:42:27:b9:3b:0d:1e:7e:19:94:13:09:a9:91:ae:1c:
         46:8e:6f:ea:89:79:96:88:38:95:b3:5d:9b:1c:9a:ad:c7:61:
         66:dc:fd:a9:01:f8:81:b5:33:e6:d6:6e:37:e0:78:c5:e8:20:
         51:94:f5:14:c6:79:f2:7c:57:26:3c:9b:be:f3:1d:90:9d:a2:
         42:6b:5e:9d:bb:ed:47:fc:f2:3a:05:d7:ea:dc:1d:61:4a:50:
         e0:12:22:83:8a:67:60:8b:2f:c2:b7:13:45:71:b6:9d:99:ab:
         d3:90:49:1e:5f:e4:cd:d5:1d:eb:e5:b2:ff:21:ac:0e:00:da:
         d2:bf:51:da:a2:77:8a:78:73:dd:06:6b:2a:e5:11:6f:4d:24:
         94:dc:68:e3:47:61:f3:3f:9f:45:c7:9a:84:aa:c1:33:55:00:
         c4:f6:17:8e:0d:27:ee:a7:9b:e0:3d:88:11:fb:0e:cc:b8:d7:
         34:0a:ff:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1QCQK4ghR+reFzKkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDMyODAwMDQyNFoXDTI2MDYyNjAwMDQyNFowLzEtMCsGA1UEAxMk
NjY4N2VlYjAtMjIzMC00Yjk4LWJlOTktYTY0ZWJhNWMyZGQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI5C26pQDDjK6F1aRZgQ2CvXx2C18QZvZXch
IKZuduItg69nUh8E8r16acfSMBy/egG5nDUknPl3NzCEuNBxsQ7hd5/Q+C4U4sla
gKeSZSsbXAs9AQZ0snW3X5Z06b5ohDc+slKZfpHDjyHsUDZ011CIWilSQRBQezyv
STmJ6pW78OYlvjllwZsPRLsff5zt7on3vPdVP3+DwpeeOpqFt5Fmv0sUhJQOE44s
6uTpqr8RYhGRu9a9S7pbRcTXiMZwtUGwcPg1EQCm7f56AAbC0Yz1aVNQ7iE5DFkS
X0l/J26fpLdvtCrtrxFTY7n3HxwdoInoxy7HN2vdzkIqthYl8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMboF6lbdVIo3mfqceM9BegFlvN0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWUzODI1N2UtZjc3YS0z
YmM0LThmNmQtYmY5MjM2YTcyNGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSgL0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHHpxW2I2PRlUSVPY2qsHR5KTfnFW995yJxFbKkdF/p5sSmu/0Wuzs2s
vFtrmh5nDoSGOeq00hUIIBHmg577XIt6N8moXtj9RUseHkInuTsNHn4ZlBMJqZGu
HEaOb+qJeZaIOJWzXZscmq3HYWbc/akB+IG1M+bWbjfgeMXoIFGU9RTGefJ8VyY8
m77zHZCdokJrXp277Uf88joF1+rcHWFKUOASIoOKZ2CLL8K3E0Vxtp2Zq9OQSR5f
5M3VHevlsv8hrA4A2tK/Udqid4p4c90GayrlEW9NJJTcaONHYfM/n0XHmoSqwTNV
AMT2F44NJ+6nm+A9iBH7Dsy41zQK//M=
-----END CERTIFICATE-----
Generated at Mon Mar 30 23:19:24 2026 by rpki-client