Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/599417d8-a931-3b91-b3e7-76c66d4da229.roa
File:                     599417d8-a931-3b91-b3e7-76c66d4da229.roa (raw, json)
Hash identifier:          moARbgmhWylphkcRCjcVsPeE0pL2uHia2/738RjuZcE=
Subject key identifier:   D8:04:A6:2A:AD:85:AB:0A:DC:20:FE:FC:1B:40:3B:48:1D:41:8E:28
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E812B9B1DC1938574BF547200
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/599417d8-a931-3b91-b3e7-76c66d4da229.roa
Signing time:             Wed 15 Jul 2026 07:15:39 +0000
ROA not before:           Wed 15 Jul 2026 07:15:39 +0000
ROA not after:            Tue 13 Oct 2026 07:15:39 +0000
asID:                     212669
IP address blocks:        74.2.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:2b:9b:1d:c1:93:85:74:bf:54:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 15 07:15:39 2026 GMT
            Not After : Oct 13 07:15:39 2026 GMT
        Subject: CN=35d263c6-7c18-4d7a-a489-3a6479f9a324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:90:28:d6:b1:c1:f7:32:ac:fe:39:63:c6:0b:
                    c5:62:a8:db:2b:19:21:2e:5c:1f:c2:80:cd:96:dc:
                    b8:14:46:e2:05:09:0b:9d:5e:7f:1d:7d:6a:d1:8f:
                    ea:bf:68:6b:69:52:04:35:87:1a:6d:d2:25:eb:62:
                    33:9b:a7:70:4f:ed:37:f8:97:ef:a3:a0:18:4f:94:
                    9f:61:52:5b:2f:1b:e9:5d:f2:28:d9:02:f4:a1:08:
                    54:2a:d6:f1:51:64:e1:97:d6:85:d8:59:97:c2:dc:
                    d2:ac:ec:94:5f:a8:33:98:c5:b6:88:05:c4:8b:66:
                    54:ef:60:08:9b:9c:b1:72:31:60:fc:d4:df:c1:94:
                    7e:66:d8:20:ab:3c:02:11:4d:ba:cd:69:4d:7c:35:
                    31:e3:65:3c:a1:3a:a0:fb:13:6c:95:f0:81:d5:23:
                    f5:28:e1:bf:b9:e4:00:11:02:a5:d5:e6:1c:12:db:
                    3c:dd:35:a4:d0:d8:07:b4:8a:50:e7:eb:6e:56:df:
                    eb:2e:99:a6:58:a6:e6:d5:6a:9b:60:51:fd:c9:35:
                    06:3e:28:19:0e:fd:1c:00:e3:e1:34:dc:53:84:60:
                    3a:83:f6:e3:2c:4b:92:54:ee:69:54:5e:e6:73:50:
                    81:e3:0a:d5:67:45:34:fa:06:04:63:af:5b:14:66:
                    b8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:04:A6:2A:AD:85:AB:0A:DC:20:FE:FC:1B:40:3B:48:1D:41:8E:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/599417d8-a931-3b91-b3e7-76c66d4da229.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.2.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:bc:cf:9d:8b:8c:7f:60:50:5d:8c:72:b8:93:c7:ca:94:00:
         f1:55:6a:37:e1:88:a1:97:68:af:2b:2d:ff:2d:ad:df:5d:45:
         4c:55:5c:0f:2a:2b:4d:7f:9b:d9:be:d1:1d:a6:f9:b3:85:ba:
         c4:1b:18:a0:5b:c9:0e:2e:a1:c1:50:59:d2:1e:6b:c4:f6:51:
         3b:94:c8:44:ec:54:92:9f:34:3e:3e:84:10:d2:99:cd:df:11:
         89:84:22:3a:2c:9f:5f:0b:5c:0d:50:e9:53:16:0b:1c:6c:39:
         82:7c:79:c4:ae:62:b1:05:3c:d7:1a:9f:9b:a9:1c:7e:c6:d0:
         27:d0:1c:00:63:d6:ad:8c:db:a1:eb:e9:52:2f:39:e4:c5:35:
         41:de:77:7b:86:4a:25:a2:0b:40:6d:71:4c:de:70:9f:19:91:
         67:f4:19:c4:2e:2e:88:39:2a:b6:9a:74:41:7d:12:ab:7d:8c:
         bb:ef:16:eb:a3:32:6b:94:dc:66:bc:b3:e8:2d:98:7b:93:18:
         b9:62:f0:1f:28:3f:a6:f2:bf:36:2a:ef:60:ea:3a:4b:f2:6b:
         6f:c4:d6:4a:3b:86:78:30:a5:46:fa:e0:98:33:ba:6d:70:f2:
         7e:68:9b:91:83:0d:f0:1b:c3:82:ba:21:6e:ba:1d:ad:b6:e5:
         ba:e0:c3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:35:06 2026 by rpki-client