Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/16caca28-6609-366e-a901-77eae9f3c16b.roa
File:                     16caca28-6609-366e-a901-77eae9f3c16b.roa (raw, json)
Hash identifier:          8hUneVo7EHIUwNSnWZDqv5J2SUx1PO5eqbDeRBHTIcM=
Subject key identifier:   B3:54:5E:97:61:EC:23:B6:A7:93:1B:CC:2F:FA:69:67:B3:62:99:51
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E58E4967BF093D808D9A5C0C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/16caca28-6609-366e-a901-77eae9f3c16b.roa
Signing time:             Tue 30 Jun 2026 21:00:12 +0000
ROA not before:           Tue 30 Jun 2026 21:00:12 +0000
ROA not after:            Mon 28 Sep 2026 21:00:12 +0000
asID:                     29802
IP address blocks:        74.0.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:58:e4:96:7b:f0:93:d8:08:d9:a5:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun 30 21:00:12 2026 GMT
            Not After : Sep 28 21:00:12 2026 GMT
        Subject: CN=26cac874-9e47-4308-9ca0-9980cab965da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a1:40:f6:2a:60:73:3c:b7:80:4f:d3:35:dd:
                    1a:29:ec:60:45:af:2a:58:dc:36:25:64:94:3d:ad:
                    60:dd:46:b8:e4:7b:cd:bf:f9:b8:8f:8c:84:21:bc:
                    e7:f4:c3:58:73:4a:c1:13:7b:30:4b:04:c4:da:eb:
                    13:a7:c4:48:47:c8:34:e5:74:e5:03:e4:af:df:b8:
                    c1:90:6a:ae:cb:37:a9:2b:e7:4b:c4:3e:de:8c:1a:
                    8b:10:79:6d:dd:92:96:ed:55:f8:97:5e:98:4c:57:
                    eb:ec:aa:fa:b4:9d:4e:c6:a2:df:ca:82:94:62:12:
                    dc:f9:cd:ea:10:cd:a1:c7:bb:b0:18:9b:a6:f2:04:
                    65:ea:df:cf:a0:6d:3e:0e:db:2e:47:4d:73:a4:43:
                    60:17:11:d8:fb:58:3a:03:1d:7e:33:db:5e:d1:73:
                    f7:6e:83:3c:67:a8:5f:b2:58:22:1c:c4:2e:2d:f5:
                    29:f5:21:1b:91:c6:7c:e7:1e:2e:5c:f8:a0:65:83:
                    88:64:34:1d:84:e2:e4:99:9d:5d:db:eb:6d:ce:96:
                    9c:7b:dd:91:50:25:19:67:9f:48:ab:41:12:26:f0:
                    db:f1:64:64:62:8a:54:2c:6c:9f:61:21:3a:07:59:
                    51:fe:87:f8:76:07:90:1b:70:ae:a6:ce:a6:f4:46:
                    31:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:54:5E:97:61:EC:23:B6:A7:93:1B:CC:2F:FA:69:67:B3:62:99:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/16caca28-6609-366e-a901-77eae9f3c16b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.0.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:54:a4:56:ca:1a:fd:43:bd:93:ff:0b:8b:37:8c:eb:cc:0d:
         78:cf:95:92:e2:a5:b6:5a:1b:73:66:89:44:f4:a7:05:10:07:
         ad:97:eb:32:a6:d2:f7:de:08:c2:dc:bc:3a:cb:a7:24:7d:3d:
         d9:85:ea:54:ca:1a:1c:8d:4f:99:13:e6:69:1f:0e:80:be:90:
         67:c9:42:9f:d8:d6:07:c1:51:4b:a5:82:81:b2:56:bf:16:f7:
         44:2e:22:51:fa:41:0c:4a:75:07:ec:89:a1:2f:51:47:0a:8c:
         67:c5:3b:20:b2:07:66:3e:87:3f:ec:a3:1b:86:40:de:7b:77:
         16:0b:6e:f6:88:aa:52:0a:74:53:50:b2:d5:07:31:a2:1c:33:
         24:12:69:29:50:b1:d3:5f:55:d5:b9:08:83:85:97:73:6f:54:
         80:37:36:63:b5:f2:53:8e:f5:65:59:9a:7e:d5:91:21:bd:95:
         45:7f:b1:0c:67:e3:81:36:5b:1e:aa:ef:66:66:00:f9:17:01:
         1c:6d:96:b1:8c:fe:cd:62:9a:c8:3c:e9:48:1c:07:30:9c:1a:
         b0:a1:f7:1e:e4:06:d3:e9:89:1b:eb:4b:c3:88:4b:f1:4d:17:
         7e:53:90:d2:37:de:26:17:a2:4a:90:4e:9b:49:0d:1b:c2:ab:
         10:1f:06:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 13:56:58 2026 by rpki-client