Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e057b89a-9ff1-30c1-a96d-41e42c0c3020.roa
File:                     e057b89a-9ff1-30c1-a96d-41e42c0c3020.roa (raw, json)
Hash identifier:          L0vjMGYeHWwHyYR+2dhqZIoykuICiFBn+e5Zh/K7waQ=
Subject key identifier:   8B:31:A1:AE:3C:1D:5F:61:61:7B:4A:61:F7:F7:A9:12:88:83:47:69
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CED7E217E6ABFEB4E417F0580
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e057b89a-9ff1-30c1-a96d-41e42c0c3020.roa
Signing time:             Fri 20 Feb 2026 16:55:21 +0000
ROA not before:           Fri 20 Feb 2026 16:55:21 +0000
ROA not after:            Thu 21 May 2026 15:55:21 +0000
asID:                     834
IP address blocks:        74.1.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:7e:21:7e:6a:bf:eb:4e:41:7f:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb 20 16:55:21 2026 GMT
            Not After : May 21 15:55:21 2026 GMT
        Subject: CN=1f2f3e58-5048-4313-bc6d-7ab8e707779b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:79:4e:8f:99:40:68:dc:79:94:e6:f8:c6:43:
                    72:49:b2:98:8c:ce:5f:5c:71:62:bc:a4:e8:77:e6:
                    2d:4d:8e:13:ae:c0:b7:8a:ad:72:68:ea:97:51:28:
                    46:d2:52:b4:db:b1:8e:a7:03:2f:2e:fc:f1:48:07:
                    1c:25:e7:08:12:f4:f1:c6:5d:4c:ab:d7:ee:32:fe:
                    fc:13:ff:1f:e9:d1:f3:52:4d:39:15:1f:39:2c:35:
                    88:e4:77:6c:bd:1e:f6:f0:62:18:69:5d:f9:01:33:
                    ab:91:34:36:b7:42:1b:37:24:bd:10:32:d1:5e:b1:
                    5e:9c:84:7a:98:02:08:3f:7a:3f:48:9c:43:c7:ae:
                    a2:e6:65:64:fc:a6:c4:3c:29:68:23:c8:44:03:30:
                    64:ed:a8:84:07:d2:58:8a:24:42:8e:1d:98:52:4d:
                    a1:bf:46:a4:42:4b:c8:9f:7b:59:90:ac:f8:64:fe:
                    b0:0c:9d:df:f6:dc:17:2b:5c:60:bd:47:d8:37:0e:
                    a0:cf:c0:8d:9d:b1:4c:be:fb:1e:b4:50:67:bb:1c:
                    86:7f:a4:e3:6b:88:6d:59:3a:24:ac:3e:10:27:24:
                    92:6b:7b:23:e4:8c:8f:13:15:22:f1:12:55:80:ae:
                    1c:68:1e:62:5d:ed:11:b3:00:be:dd:38:a0:2e:36:
                    47:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:31:A1:AE:3C:1D:5F:61:61:7B:4A:61:F7:F7:A9:12:88:83:47:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e057b89a-9ff1-30c1-a96d-41e42c0c3020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:c5:f5:41:5b:0a:bd:05:f0:fd:05:55:a9:1b:7f:dd:56:97:
         2d:5c:0d:0b:64:26:2f:98:28:58:ef:1a:1a:57:63:c2:1a:0a:
         6d:05:8c:01:d8:df:d0:ee:d3:d5:b2:19:95:67:5a:6a:76:f8:
         28:ea:d4:e8:15:79:b1:19:9c:cc:09:65:8e:0c:9d:00:71:8e:
         ee:72:0d:09:e5:8a:73:47:45:58:ca:3b:a5:24:7d:60:95:3c:
         e2:38:06:e0:40:b7:1a:4c:d5:9a:5a:6e:c6:5e:3a:d9:bb:89:
         d2:52:f6:cb:f7:2a:97:01:dc:c4:37:96:6e:9e:fb:f8:76:59:
         f2:f3:1d:29:b5:b0:79:e1:47:e9:cb:22:b5:0f:5a:46:75:49:
         ad:8c:a0:84:77:67:af:17:fb:68:c2:1f:9b:34:8f:1b:5c:b7:
         06:d0:a3:bd:f0:a9:35:45:4c:57:92:37:e4:e4:30:c9:da:ed:
         cc:73:fb:e0:20:f1:d1:45:90:56:84:d9:52:a5:0c:66:91:7b:
         8f:f7:5d:00:f6:44:b3:6f:f9:ac:75:93:d1:71:7f:44:f2:60:
         d9:0c:cb:40:ce:51:d4:07:85:a8:b6:bc:47:60:9f:27:d2:08:
         ab:2b:38:e5:df:6b:29:20:0d:99:fc:93:e1:81:48:ce:a3:0f:
         9c:65:b9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 22:27:41 2026 by rpki-client