Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c26b8f56-630c-37b3-b555-32bd7cc9b216.roa
File:                     c26b8f56-630c-37b3-b555-32bd7cc9b216.roa (raw, json)
Hash identifier:          QaJQcCB0RZ5V2x2jBj08rqdqtwwTCJdeTVJvW4JC6QE=
Subject key identifier:   B5:60:BC:10:A7:F0:B7:27:DD:D9:45:8D:6C:69:14:7F:BD:B3:9E:F1
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CCBA740A3F30454424460C500
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c26b8f56-630c-37b3-b555-32bd7cc9b216.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     174
IP address blocks:        74.0.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:40:a3:f3:04:54:42:44:60:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=92819609-e95d-47a6-976a-b3d8ff767b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fe:9e:39:d3:d1:ec:01:35:85:c7:43:d5:3e:
                    d6:c2:d2:0e:14:d8:72:f8:91:03:07:75:17:74:3c:
                    d7:ca:c8:d1:11:53:84:fc:e7:77:9a:9b:52:32:d7:
                    c5:4b:f2:7b:64:04:93:ff:63:7c:02:45:e9:2d:6e:
                    7f:dd:df:d8:d9:dc:da:98:f4:2a:32:21:2e:be:cd:
                    81:03:b2:47:b1:7e:43:68:5c:b8:25:79:14:95:d7:
                    67:07:51:12:55:83:9a:a4:79:de:d6:e6:4c:1f:cf:
                    fa:c5:15:91:c7:6e:0c:1c:f0:82:2e:d8:d3:3b:17:
                    67:dd:0c:8f:07:dd:30:60:1b:86:96:8d:b6:bb:f1:
                    4d:85:60:8e:b8:64:82:7e:f6:e8:73:90:73:15:78:
                    6f:82:35:bd:7d:65:ea:8d:6c:4d:d4:d2:d8:c0:19:
                    ad:e9:ea:61:50:55:00:c0:ff:3e:a3:12:da:11:3e:
                    7d:20:25:61:1f:9e:17:e6:1a:f9:1c:1f:1e:d2:4b:
                    b4:ee:62:08:1f:fe:54:ec:6e:0b:d2:26:96:f1:dd:
                    5a:a8:10:ae:73:ac:18:76:f5:b3:f5:03:03:9a:bd:
                    c3:99:7c:02:a6:78:2e:aa:66:5d:98:02:0f:37:9f:
                    1b:19:6e:a4:94:74:84:ae:6f:88:a3:a3:2c:91:1f:
                    5b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:60:BC:10:A7:F0:B7:27:DD:D9:45:8D:6C:69:14:7F:BD:B3:9E:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c26b8f56-630c-37b3-b555-32bd7cc9b216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.0.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e0:ee:86:16:8a:bd:8b:8b:cf:76:8a:2c:08:06:0c:d2:c4:
         17:c8:8e:04:3d:35:0b:3c:6b:9c:16:c6:5b:4e:cf:8d:74:f4:
         81:c9:f1:3a:89:d1:c5:b9:39:e5:da:65:7c:c3:9e:0b:b0:a0:
         0b:d7:29:3a:ca:70:c0:43:f3:aa:e7:1f:db:65:71:bc:12:a5:
         f8:68:36:9b:1b:5f:5c:23:c2:d0:79:f9:80:a7:f3:24:f4:86:
         0d:84:5c:e3:46:31:bc:19:71:2a:fb:f6:38:c6:96:df:28:a6:
         de:ad:7b:f9:b0:16:d5:f7:25:26:96:e9:a3:8f:be:91:c2:10:
         05:aa:46:c0:21:81:4b:0c:23:08:e1:1c:ba:82:46:81:ef:7f:
         3b:97:99:d7:7e:87:76:c9:05:c2:35:a5:23:eb:f1:c8:19:81:
         a8:89:2f:2b:83:32:dc:5f:3a:a0:4e:bb:8f:0e:02:10:ee:c0:
         12:fc:86:d3:c1:9c:1d:8b:66:b0:6b:8a:ff:2a:70:d4:54:d1:
         d4:cd:a5:2a:57:8d:1f:e3:b4:1a:48:c4:58:4e:e4:fc:df:39:
         4a:c2:2e:69:2b:4e:f2:90:76:3c:d8:03:11:c0:e1:3f:88:69:
         a6:6e:cd:d0:70:ad:12:03:26:37:37:4b:13:ea:65:63:70:bf:
         c0:7c:a5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:28:57 2026 by rpki-client