Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1138fbbb-d055-3996-a97b-85a54b671601.roa
File:                     1138fbbb-d055-3996-a97b-85a54b671601.roa (raw, json)
Hash identifier:          SR2tcplPoiqdCLE4sNy0DK3a5sRqvTax5Jy0YBO4D+I=
Subject key identifier:   0B:95:DD:5F:F0:15:DE:AC:37:46:16:7F:A7:7D:5E:DF:46:BB:FC:4C
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584ECE9C7A202599C03B2B714880
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1138fbbb-d055-3996-a97b-85a54b671601.roa
Signing time:             Wed 12 Aug 2026 01:00:11 +0000
ROA not before:           Wed 12 Aug 2026 01:00:11 +0000
ROA not after:            Tue 10 Nov 2026 02:00:11 +0000
asID:                     834
IP address blocks:        74.2.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ce:9c:7a:20:25:99:c0:3b:2b:71:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 12 01:00:11 2026 GMT
            Not After : Nov 10 02:00:11 2026 GMT
        Subject: CN=3dc73d53-524d-440d-9d27-77f2b1f64f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d6:35:e8:4b:c0:b1:79:25:44:8f:8c:02:36:
                    e8:5f:e4:8f:35:b6:6c:f5:f9:15:72:09:24:4a:f6:
                    e1:5d:4b:41:1d:ce:36:e2:dc:2c:93:39:c1:c8:f6:
                    4d:84:79:e4:6d:e3:2e:38:8c:ad:05:57:47:d4:be:
                    94:89:96:c2:68:1d:9e:56:7c:a5:6f:01:05:14:66:
                    db:13:af:83:6f:7e:b3:85:ec:b8:fb:90:84:71:01:
                    03:2f:9f:20:c6:12:70:58:93:9c:58:53:6b:93:d7:
                    1f:2f:bc:2e:a9:11:08:f5:8f:5f:be:9d:00:e2:37:
                    e8:bb:75:61:4b:5e:e7:de:bd:bf:98:60:83:57:4c:
                    2f:9b:9e:fe:59:a7:0d:77:70:1d:27:05:33:6c:66:
                    5b:5f:c6:60:67:63:bf:48:45:5a:88:30:b4:6d:22:
                    fe:0c:f5:6c:d6:ed:a5:c9:2d:b2:0b:f1:83:d3:d9:
                    8b:ab:88:a2:f0:6b:a5:4b:49:c3:87:74:2d:5f:6e:
                    01:ce:e5:ed:6a:e8:65:fb:6f:f8:94:46:93:d6:02:
                    31:7c:d5:1f:82:bd:0b:44:ac:25:dd:03:27:a1:ab:
                    26:f1:97:d3:ce:74:28:89:d4:cc:e9:95:ff:6c:6e:
                    b0:32:bd:0f:9e:e9:3f:1a:4b:08:a1:19:49:05:4f:
                    9b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:95:DD:5F:F0:15:DE:AC:37:46:16:7F:A7:7D:5E:DF:46:BB:FC:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1138fbbb-d055-3996-a97b-85a54b671601.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.2.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:e4:75:66:a9:38:f1:9c:0d:fc:f6:47:eb:67:4c:6c:cb:75:
         5b:9c:11:ab:de:6f:c9:65:df:3c:65:be:58:99:6a:14:24:6c:
         ec:a0:11:fc:cc:c2:0a:7f:3a:c9:a0:17:3c:be:e1:b9:44:2b:
         9b:6b:22:70:f0:29:ff:44:ac:42:ab:f6:3a:36:2d:4e:8f:bc:
         9f:09:90:54:71:5d:fb:17:09:8a:5f:aa:b2:a3:44:98:cc:8e:
         3a:85:0b:87:78:b7:e4:b3:44:ef:81:a4:cf:b3:c9:45:d3:32:
         57:e2:b0:00:e4:7f:54:97:64:72:19:36:7d:f8:88:b3:a0:dd:
         41:ae:80:17:cb:bc:60:f2:bd:2c:c9:27:24:a5:7b:cc:a1:3d:
         c1:9b:46:7d:23:a4:33:d6:9f:7d:1d:f7:9b:2b:11:ec:ce:ad:
         d2:99:ce:da:ce:0f:e3:11:d1:d5:52:ef:aa:0f:d6:ec:71:eb:
         cb:e2:25:55:ed:66:5a:d8:f1:ba:4e:67:c0:4a:ff:c9:49:5a:
         90:b8:17:8b:58:dc:06:22:37:52:20:93:42:5e:ca:7c:48:24:
         ba:10:5d:7d:84:85:70:0e:59:18:4f:e0:00:41:ca:57:12:31:
         59:28:d7:5f:37:b3:dc:6e:c1:2f:cf:b4:eb:a5:fc:f1:6e:b1:
         e3:2f:49:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:21:56 2026 by rpki-client