Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6fd3ced5-e56f-3f35-90bf-2ce86f7dd018.roa
File:                     6fd3ced5-e56f-3f35-90bf-2ce86f7dd018.roa (raw, json)
Hash identifier:          cIqXP3X2V2UzDM8lKq6xXCGntETvSv0kX/b3FYkDsWQ=
Subject key identifier:   12:80:E3:2C:9D:DC:BD:B2:7E:0E:CC:82:29:ED:40:6F:8C:16:B2:7B
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F497391F60E20978EFAA3A180
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6fd3ced5-e56f-3f35-90bf-2ce86f7dd018.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     834
IP address blocks:        74.0.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:91:f6:0e:20:97:8e:fa:a3:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5c68b6ca-ddd7-4a53-b701-ae948a9299ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:13:6c:f2:9a:28:d6:0f:46:cd:f4:fa:b3:5a:
                    ea:e3:41:68:ab:dc:fe:66:dc:c2:55:91:61:11:a7:
                    e7:7b:98:b4:c3:0d:4d:a3:6d:5c:49:72:1f:70:7e:
                    19:70:63:20:a1:28:a0:35:21:69:4d:76:c7:80:d8:
                    21:05:4c:77:67:8f:5e:9d:a4:5f:84:6d:b3:03:ba:
                    ad:55:d1:b0:bf:f6:1d:dd:3c:8f:12:88:8c:8a:51:
                    67:d9:63:03:14:40:c2:ba:16:bb:65:65:22:24:73:
                    af:6d:a9:87:7b:ba:7b:24:2a:bd:e6:9c:0f:34:4b:
                    8f:85:ff:94:26:51:4b:da:75:c9:a7:02:cb:5f:fa:
                    51:03:da:e8:7f:a6:3f:c7:06:5a:82:ee:9c:ef:56:
                    f8:58:42:f3:17:b5:40:cf:fb:10:8e:f7:ba:6c:29:
                    3a:fc:58:76:92:2b:43:1f:dd:58:c4:bc:2c:4e:e8:
                    64:4d:df:bb:a5:49:49:9f:bd:44:f8:a8:b2:38:81:
                    17:5e:f3:82:b3:60:bf:e3:9d:e6:86:90:da:59:e1:
                    d1:68:71:18:83:06:06:1d:14:31:82:ec:ff:7e:a2:
                    01:fc:5b:34:68:5f:26:e9:de:47:c5:e7:b3:45:8b:
                    37:b6:c5:7a:f8:e0:db:b7:0f:27:64:9a:4f:3e:af:
                    b5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:80:E3:2C:9D:DC:BD:B2:7E:0E:CC:82:29:ED:40:6F:8C:16:B2:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6fd3ced5-e56f-3f35-90bf-2ce86f7dd018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.0.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:a6:98:1d:d8:be:31:d3:7f:24:b9:78:2b:c5:cd:56:b9:7e:
         ac:18:44:40:ea:1d:01:4d:09:e2:83:4c:4d:36:d3:eb:d3:27:
         a1:9c:a9:76:63:d0:69:d7:35:6f:4c:a2:b8:1a:ba:69:3d:ca:
         17:c5:58:ce:33:61:72:89:c9:89:e1:c9:98:2c:3e:4f:83:43:
         8b:7a:ee:0f:12:22:7a:68:bf:19:4e:45:21:21:97:05:93:92:
         83:fc:13:03:81:dc:d5:7a:d6:39:4d:4f:c6:12:f1:3f:4e:d0:
         cf:60:cb:fc:85:48:59:fa:68:8e:d1:00:13:73:ff:b6:1f:c2:
         0f:fd:20:71:61:83:dd:7f:59:d7:46:3c:eb:4f:19:17:bb:6b:
         e7:90:1b:d9:f7:37:a8:a8:01:35:71:27:72:6e:f8:1d:ed:21:
         01:e8:f3:84:2f:3a:43:ae:0d:bf:61:2e:c0:0f:64:12:ff:fc:
         74:4d:42:db:fd:d6:23:a5:d1:af:28:ae:b7:1c:ed:3d:d2:db:
         93:ad:35:88:39:f4:84:d1:ed:4e:b9:bb:d9:1a:fa:a9:49:50:
         4b:4c:4a:5c:0c:c8:e2:78:c9:09:63:40:22:c0:05:6c:d1:04:
         0c:0b:2d:41:d9:a9:c6:28:a4:2a:34:4c:fe:73:d4:8a:7f:4a:
         e3:2a:2d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:18:24 2026 by rpki-client