Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/d83a634c-cf8c-3798-9d00-adb74555e51e.roa
File:                     d83a634c-cf8c-3798-9d00-adb74555e51e.roa (raw, json)
Hash identifier:          4TBgYOCJT4NTPu0OHPky6vc0zbVSQesb7T6wWsDiM2g=
Subject key identifier:   54:48:B7:F2:DF:C8:BF:31:42:11:94:18:C1:90:67:42:BE:0A:48:A2
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584EABB6EEFB958DF04D43A2E800
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/d83a634c-cf8c-3798-9d00-adb74555e51e.roa
Signing time:             Thu 30 Jul 2026 13:00:12 +0000
ROA not before:           Thu 30 Jul 2026 13:00:12 +0000
ROA not after:            Wed 28 Oct 2026 13:00:12 +0000
asID:                     16740
IP address blocks:        74.188.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ab:b6:ee:fb:95:8d:f0:4d:43:a2:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Jul 30 13:00:12 2026 GMT
            Not After : Oct 28 13:00:12 2026 GMT
        Subject: CN=8b0becee-fc77-433e-adf2-d631e23392d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:07:76:68:5f:d4:18:c9:0b:9c:fb:8c:e7:ae:
                    31:bd:eb:07:f9:94:d1:26:b6:3b:d1:56:34:1a:5d:
                    31:d8:2e:05:4e:a0:a1:85:f8:d6:86:f6:b3:19:a0:
                    8f:e8:81:bf:90:db:01:ab:e2:ca:df:6b:5a:2e:a2:
                    cf:d8:7d:06:3b:66:a3:d7:57:1b:0f:d3:64:07:14:
                    af:6c:8a:e6:2b:91:7b:a7:ad:d4:21:18:6b:3e:7a:
                    86:32:ba:87:1d:51:9f:c0:fe:90:9f:33:68:77:e1:
                    97:8b:3c:2b:78:39:e8:36:23:0f:84:a7:c1:fd:d6:
                    09:fe:0f:38:7a:3d:81:61:50:f0:d9:f3:da:01:63:
                    97:54:d8:82:5d:25:53:50:e1:7d:bb:24:ac:4c:cc:
                    42:e1:47:8b:4b:19:f7:bb:f8:19:a2:46:42:a3:22:
                    79:0b:63:f3:35:39:75:4b:64:91:36:a1:e9:c4:58:
                    b5:dd:80:d7:31:66:d2:1c:af:a1:ed:de:a6:f3:87:
                    c7:8c:29:ed:72:18:1b:dd:8d:3a:48:b0:7b:99:69:
                    5d:47:98:f0:5c:f0:c5:59:06:d0:30:20:4d:60:78:
                    c8:f2:17:0a:0a:16:3f:2b:02:1c:ce:00:ff:71:84:
                    9f:39:9d:62:f7:69:6e:03:aa:79:22:00:a4:52:00:
                    8e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:48:B7:F2:DF:C8:BF:31:42:11:94:18:C1:90:67:42:BE:0A:48:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/d83a634c-cf8c-3798-9d00-adb74555e51e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.188.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:8c:ce:03:8b:0d:f6:57:a3:bc:00:cd:ea:6d:df:fa:1a:6b:
         dd:af:62:5d:ac:1b:4f:4b:9f:d5:3f:65:4b:af:b2:f9:41:47:
         47:41:79:4e:cc:88:55:76:a5:06:ef:8b:b4:b4:6d:39:8a:c6:
         48:33:a5:b9:cb:8d:07:1f:f2:c7:6d:6b:dd:aa:72:7c:52:bb:
         81:31:37:b4:8e:35:bf:08:a4:e0:9c:6d:93:04:e0:69:d9:33:
         c7:36:cb:99:96:a7:d7:63:25:22:e2:47:f3:1a:ea:2d:67:63:
         c1:df:77:60:c6:68:7b:63:67:2c:91:20:4a:25:5b:76:16:97:
         d2:b0:8e:5b:36:93:cc:00:30:5c:a4:0a:a3:c1:8c:96:24:54:
         06:5c:92:77:de:8f:5f:45:ce:08:5d:c7:eb:94:b3:0a:e8:81:
         a2:86:06:cb:4e:ee:a0:a7:16:d9:60:8d:7d:03:22:fa:19:3d:
         50:18:39:0f:cf:ae:72:2b:b9:d9:c7:af:95:b0:4d:38:9b:8e:
         61:c8:4b:9b:12:a6:9f:d9:91:25:cc:52:f1:d4:6f:76:23:fe:
         7b:46:df:4c:ef:ea:1f:95:e9:47:92:1e:1e:1c:0d:c8:e6:88:
         ed:6b:dd:3f:43:9b:3a:97:85:f9:c2:32:f4:b2:60:08:01:0c:
         4c:55:65:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:43:44 2026 by rpki-client