Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d35cc4cd-0e3c-38de-bfa0-0bbb80a8b545.roa
File:                     d35cc4cd-0e3c-38de-bfa0-0bbb80a8b545.roa (raw, json)
Hash identifier:          o9e+kg4iZQouR0O8JHnigMyHFC0ieP1eRNGcjldWfYU=
Subject key identifier:   D3:1B:44:C7:19:03:F7:87:8F:41:BB:00:7C:AF:80:D7:A0:85:84:AC
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EF3FCCF5039C3DB90E31B1D00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d35cc4cd-0e3c-38de-bfa0-0bbb80a8b545.roa
Signing time:             Tue 25 Aug 2026 10:19:19 +0000
ROA not before:           Tue 25 Aug 2026 10:19:19 +0000
ROA not after:            Mon 23 Nov 2026 11:19:19 +0000
asID:                     33667
IP address blocks:        74.1.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f3:fc:cf:50:39:c3:db:90:e3:1b:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 25 10:19:19 2026 GMT
            Not After : Nov 23 11:19:19 2026 GMT
        Subject: CN=fda06485-3f10-4cfd-b4b4-a7cba47631ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4c:f2:b8:b9:95:53:13:a3:56:dd:bb:c4:da:
                    11:ef:e9:b2:88:22:9b:2c:21:46:a5:1b:c2:5f:ae:
                    3c:b9:98:7b:2e:29:9d:1c:be:79:95:06:97:8a:36:
                    21:8a:f6:51:81:f3:00:a8:a0:b5:1d:58:8d:1f:65:
                    6f:d1:ef:ba:c3:f1:0b:46:a0:9c:8f:8d:82:b0:77:
                    2e:67:9b:e3:07:3c:11:87:14:d0:5a:77:a6:f2:e2:
                    84:c2:8e:d2:8c:04:43:81:fc:f6:a7:e0:7b:64:39:
                    83:73:78:4a:cd:8d:2d:37:57:fc:b5:30:b7:a4:76:
                    db:b4:98:5c:d9:ca:54:f6:44:46:a9:2f:3e:0b:c1:
                    47:5c:9b:01:7d:45:b4:0e:5a:3f:2b:44:a7:e8:88:
                    30:64:4e:30:30:13:9d:70:0d:5b:13:4d:0f:88:af:
                    2e:fa:a0:e5:6c:a5:5a:80:7c:2e:eb:32:8a:6d:03:
                    9c:b1:52:1d:d6:11:f1:2a:8a:b3:d7:1c:e4:07:05:
                    43:c1:1c:f9:ab:d8:95:55:97:cb:09:4a:44:fc:2b:
                    09:23:70:6d:39:a2:cc:f9:c5:88:87:ab:3c:3d:68:
                    f9:2c:36:19:94:2d:5f:26:4d:5a:9f:12:91:92:f7:
                    28:8c:4a:66:12:04:51:a3:be:55:81:36:ee:de:94:
                    1c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1B:44:C7:19:03:F7:87:8F:41:BB:00:7C:AF:80:D7:A0:85:84:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d35cc4cd-0e3c-38de-bfa0-0bbb80a8b545.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:a2:51:d6:a2:e5:1f:74:d0:e9:71:7c:cc:c3:eb:f0:cd:a5:
         1c:9c:f6:c5:24:07:2e:a3:d9:78:36:fb:75:89:b4:0e:4b:3e:
         df:d9:c9:6f:00:34:d2:3f:d3:4c:95:95:54:77:32:75:c4:6e:
         bf:f0:44:30:3b:3f:c5:5d:1e:99:eb:08:5b:e0:04:2d:9e:4a:
         98:7c:c8:a7:ef:aa:09:87:9d:8d:17:a8:06:3f:49:21:e8:fd:
         ba:92:3e:7d:9d:6e:11:34:dd:9d:81:ad:8e:f3:92:d3:94:0d:
         fa:17:c9:e8:92:4f:d4:98:1a:03:86:87:1e:ac:eb:4d:40:51:
         b4:8d:23:6c:7d:a1:55:71:97:70:84:1c:06:c4:dd:6f:0f:af:
         1b:66:52:af:69:ee:16:d4:74:70:09:6d:9b:9e:9e:26:d2:23:
         4b:67:71:46:03:bc:8b:1a:95:d5:d0:6b:5f:17:e3:b4:75:05:
         19:61:33:70:f3:c0:1f:26:ac:ff:1f:cd:a5:a0:83:c0:bd:a6:
         ba:b2:e6:9f:fb:98:0f:1d:cb:61:86:3d:22:ef:32:26:10:9c:
         b8:d2:a9:f4:b4:4f:5d:9b:bf:df:bb:f8:eb:53:05:74:b8:40:
         65:36:1b:00:31:27:84:ed:66:fc:0b:e5:44:08:d8:92:78:4a:
         9a:ff:ba:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7z/M9QOcPbkOMbHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDgyNTEwMTkxOVoXDTI2MTEyMzExMTkxOVowLzEtMCsGA1UEAxMk
ZmRhMDY0ODUtM2YxMC00Y2ZkLWI0YjQtYTdjYmE0NzYzMWVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkzyuLmVUxOjVt27xNoR7+myiCKbLCFGpRvC
X648uZh7LimdHL55lQaXijYhivZRgfMAqKC1HViNH2Vv0e+6w/ELRqCcj42CsHcu
Z5vjBzwRhxTQWnem8uKEwo7SjARDgfz2p+B7ZDmDc3hKzY0tN1f8tTC3pHbbtJhc
2cpU9kRGqS8+C8FHXJsBfUW0Dlo/K0Sn6IgwZE4wMBOdcA1bE00PiK8u+qDlbKVa
gHwu6zKKbQOcsVId1hHxKoqz1xzkBwVDwRz5q9iVVZfLCUpE/CsJI3BtOaLM+cWI
h6s8PWj5LDYZlC1fJk1anxKRkvcojEpmEgRRo75VgTbu3pQc3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNMbRMcZA/eHj0G7AHyvgNeghYSsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDM1Y2M0Y2QtMGUzYy0z
OGRlLWJmYTAtMGJiYjgwYThiNTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSgEYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH6iUdai5R900OlxfMzD6/DNpRyc9sUkBy6j2Xg2+3WJtA5LPt/ZyW8A
NNI/00yVlVR3MnXEbr/wRDA7P8VdHpnrCFvgBC2eSph8yKfvqgmHnY0XqAY/SSHo
/bqSPn2dbhE03Z2BrY7zktOUDfoXyeiST9SYGgOGhx6s601AUbSNI2x9oVVxl3CE
HAbE3W8PrxtmUq9p7hbUdHAJbZuenibSI0tncUYDvIsaldXQa18X47R1BRlhM3Dz
wB8mrP8fzaWgg8C9prqy5p/7mA8dy2GGPSLvMiYQnLjSqfS0T12bv9+7+OtTBXS4
QGU2GwAxJ4TtZvwL5UQI2JJ4Spr/umI=
-----END CERTIFICATE-----
Generated at Wed Aug 26 13:53:03 2026 by rpki-client