Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/19855e62-e78b-3805-a362-3779a1cf28aa.roa
File:                     19855e62-e78b-3805-a362-3779a1cf28aa.roa (raw, json)
Hash identifier:          oqhhSHPhmdOhXpfEKFJWEJkO/2+/GSjwnZUh+g5MZV8=
Subject key identifier:   3C:3E:C4:4C:3D:76:85:21:EA:20:D9:4E:4A:2F:DF:21:99:DF:4E:FE
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EAE24BE67C1B27424EBE1667C
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/19855e62-e78b-3805-a362-3779a1cf28aa.roa
Signing time:             Fri 31 Jul 2026 09:53:12 +0000
ROA not before:           Fri 31 Jul 2026 09:53:12 +0000
ROA not after:            Thu 29 Oct 2026 09:53:12 +0000
asID:                     3257
IP address blocks:        74.0.6.0/24 maxlen: 24
                          74.0.15.0/24 maxlen: 24
                          74.0.25.0/24 maxlen: 24
                          74.0.28.0/22 maxlen: 24
                          74.0.43.0/24 maxlen: 24
                          74.0.49.0/24 maxlen: 24
                          74.0.50.0/23 maxlen: 24
                          74.0.52.0/23 maxlen: 24
                          74.0.54.0/24 maxlen: 24
                          74.0.56.0/24 maxlen: 24
                          74.0.58.0/23 maxlen: 24
                          74.0.61.0/24 maxlen: 24
                          74.0.62.0/23 maxlen: 24
                          74.0.88.0/22 maxlen: 24
                          74.0.99.0/24 maxlen: 24
                          74.0.105.0/24 maxlen: 24
                          74.0.107.0/24 maxlen: 24
                          74.0.109.0/24 maxlen: 24
                          74.0.111.0/24 maxlen: 24
                          74.0.113.0/24 maxlen: 24
                          74.0.114.0/23 maxlen: 24
                          74.0.116.0/22 maxlen: 24
                          74.0.130.0/23 maxlen: 24
                          74.0.144.0/22 maxlen: 24
                          74.0.152.0/21 maxlen: 24
                          74.0.164.0/22 maxlen: 24
                          74.0.168.0/22 maxlen: 24
                          74.0.176.0/20 maxlen: 24
                          74.1.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:24:be:67:c1:b2:74:24:eb:e1:66:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 31 09:53:12 2026 GMT
            Not After : Oct 29 09:53:12 2026 GMT
        Subject: CN=4c3a4001-5188-4b7d-a720-ae768b8b50b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e4:e7:6f:5a:06:02:42:d7:63:34:a9:4d:26:
                    8d:67:21:77:23:b2:8b:d2:c3:71:5a:e2:02:eb:bd:
                    33:37:25:65:13:aa:f9:f2:7b:ba:8c:c2:6a:53:7b:
                    e8:1b:93:a8:87:dc:f5:9e:15:bc:65:50:73:73:16:
                    64:d8:a4:c1:27:29:1c:ba:1b:53:26:6e:67:13:16:
                    99:8a:96:be:4c:4d:f1:df:41:33:4f:71:51:7a:e9:
                    d9:5e:3b:7b:e8:ab:13:96:82:9f:6f:c9:a4:e8:f5:
                    0b:3a:df:ef:38:eb:ee:80:fc:56:2d:0b:32:5b:3d:
                    8e:6e:55:94:85:26:80:15:2d:5f:8f:61:4d:d8:14:
                    1a:6f:3f:11:6f:f0:34:0d:32:29:90:6f:21:3d:63:
                    18:fe:b8:4b:01:86:56:93:4b:9a:b6:47:d3:30:c8:
                    5f:7e:88:41:98:45:1d:3c:bb:d7:fa:88:1d:e3:b8:
                    14:5b:8c:87:59:d4:6a:79:a1:bb:62:66:88:37:f2:
                    b5:73:b9:8f:17:29:0a:9b:96:4e:11:ae:2f:a9:df:
                    08:d9:83:c6:0f:16:43:ab:5a:fe:d2:23:d0:e1:ee:
                    90:ee:1f:dc:39:91:c2:34:f5:ee:a5:c4:51:7f:d4:
                    f0:1c:4a:01:e3:14:4c:39:a2:37:c2:fa:01:80:55:
                    4d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3E:C4:4C:3D:76:85:21:EA:20:D9:4E:4A:2F:DF:21:99:DF:4E:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/19855e62-e78b-3805-a362-3779a1cf28aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.0.6.0/24
                  74.0.15.0/24
                  74.0.25.0/24
                  74.0.28.0/22
                  74.0.43.0/24
                  74.0.49.0-74.0.54.255
                  74.0.56.0/24
                  74.0.58.0/23
                  74.0.61.0-74.0.63.255
                  74.0.88.0/22
                  74.0.99.0/24
                  74.0.105.0/24
                  74.0.107.0/24
                  74.0.109.0/24
                  74.0.111.0/24
                  74.0.113.0-74.0.119.255
                  74.0.130.0/23
                  74.0.144.0/22
                  74.0.152.0/21
                  74.0.164.0-74.0.171.255
                  74.0.176.0/20
                  74.1.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:ce:8e:be:e4:cd:03:4b:2a:e5:b9:84:b4:9a:5b:cb:d7:ab:
         86:d2:66:be:eb:0a:8d:52:0f:5e:01:3d:92:f1:f2:7c:f3:99:
         5c:e6:40:3e:19:ca:cf:c2:8d:52:a4:41:d7:97:5c:c4:97:06:
         4d:79:e3:bc:1b:63:5e:38:f4:ae:a4:79:9a:c8:82:e0:58:55:
         79:a6:b7:de:82:5b:32:18:89:79:38:fb:a9:b5:f1:42:c5:f8:
         2b:9b:a1:f4:31:9c:15:74:4b:7c:28:cf:82:c1:cb:09:f4:c8:
         51:f3:57:79:ce:1e:11:45:ea:1b:db:7f:6c:a5:6d:af:64:8c:
         4e:40:04:3b:63:08:66:ad:9f:67:4a:8a:4f:71:48:70:29:58:
         19:98:b5:6f:65:dd:ac:0c:a6:4b:a1:b5:62:14:3f:06:ba:ae:
         c5:ba:71:84:51:41:1e:39:60:b4:2c:d9:18:a2:7d:38:b3:31:
         24:98:0e:5d:6e:e8:93:a6:f9:61:65:d1:9f:8b:b5:fd:27:75:
         01:35:80:9e:6c:f7:4d:46:f1:45:25:5e:01:5e:c0:64:e0:c5:
         62:b2:1c:23:93:88:b7:90:3f:ea:ef:80:16:7f:2d:2b:48:69:
         da:65:c3:5a:5d:9e:17:96:ce:81:4c:59:4f:d9:4b:f7:20:a5:
         80:1b:84:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:57:27 2026 by rpki-client