Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7e096d8b-1c6b-3d2e-82f2-a9fa1821e0bc.roa
File:                     7e096d8b-1c6b-3d2e-82f2-a9fa1821e0bc.roa (raw, json)
Hash identifier:          KcLRumgcwUG7TXHSimUbQqNvC8/do/FCMq8YYczLrHA=
Subject key identifier:   8D:1A:C2:F7:E5:52:71:14:BD:A2:F9:45:13:47:1C:41:34:F0:18:28
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EF48C8BC7153D5C64D43F7940
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7e096d8b-1c6b-3d2e-82f2-a9fa1821e0bc.roa
Signing time:             Tue 25 Aug 2026 15:08:56 +0000
ROA not before:           Tue 25 Aug 2026 15:08:56 +0000
ROA not after:            Mon 23 Nov 2026 16:08:56 +0000
asID:                     219427
IP address blocks:        74.0.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:8c:8b:c7:15:3d:5c:64:d4:3f:79:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 25 15:08:56 2026 GMT
            Not After : Nov 23 16:08:56 2026 GMT
        Subject: CN=871ceb07-c1b6-4828-8b62-b7b5be11b29c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fd:80:b0:81:ed:78:8c:b2:c7:e1:11:fa:d5:
                    ab:2c:9d:67:f1:f5:a7:c1:28:13:f6:a9:05:1c:e1:
                    44:48:f7:69:73:02:df:75:a4:e3:a0:51:ab:ed:e8:
                    37:dd:26:d4:83:c9:9a:8b:02:7c:40:01:b7:1a:bc:
                    69:1a:c5:b6:e4:4a:66:db:fc:a4:87:95:7c:4a:98:
                    6d:af:88:48:11:f3:7e:e7:c8:d7:f6:7a:5e:d8:47:
                    d6:ac:4a:65:4e:04:0a:35:85:73:b9:0f:8e:de:c3:
                    13:7f:ca:1b:d5:38:e7:1e:3d:2f:2c:65:5d:ed:35:
                    0a:2b:f6:8e:5b:52:32:e0:0e:c4:6e:8b:95:fe:08:
                    cd:3b:50:af:cc:4a:bd:9c:e7:4d:2a:b7:35:c0:28:
                    9c:3a:27:2e:e5:1c:f6:d3:6e:1b:bc:33:e1:01:b1:
                    45:90:88:44:2a:ed:ec:60:7c:69:58:7b:2d:d9:eb:
                    e7:ba:99:37:d5:89:c3:55:2e:1f:19:4c:f0:f8:fc:
                    66:4c:72:b9:d0:4a:3d:9c:52:ab:4b:65:71:5e:e5:
                    9d:f2:d8:92:53:c5:86:4f:05:75:06:31:67:77:78:
                    24:d6:10:e5:c4:ac:41:f9:66:4a:51:93:76:f4:3b:
                    e4:e7:ed:f7:27:ae:25:a6:88:49:9f:54:14:5a:c8:
                    83:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1A:C2:F7:E5:52:71:14:BD:A2:F9:45:13:47:1C:41:34:F0:18:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7e096d8b-1c6b-3d2e-82f2-a9fa1821e0bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.0.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:1f:90:3d:1d:82:44:51:4f:a7:d0:d4:08:fb:59:60:d7:cf:
         bb:1f:39:dd:22:25:50:8e:57:24:9e:ee:35:98:a2:e6:e9:fe:
         b2:29:45:e5:86:8c:29:9c:28:10:32:d6:49:31:cb:7a:88:24:
         4b:df:74:0d:62:8c:ce:f2:db:71:b5:4f:62:f5:12:58:a5:a3:
         a0:53:5a:be:e6:ca:97:79:b4:8e:95:d1:bf:73:d5:aa:1f:33:
         50:f8:22:b1:6d:03:b4:e1:a8:c7:73:eb:8b:3b:fd:e7:46:2b:
         8b:b1:9e:bc:ba:34:79:52:72:a9:8c:dc:7c:83:9e:15:38:b3:
         23:f8:e3:b2:65:88:1a:be:cd:57:c3:e9:95:62:4d:01:9c:bf:
         32:4f:8c:df:18:96:4a:19:02:82:22:a7:72:ca:16:b9:d7:4a:
         bd:82:7b:5d:95:41:81:07:3c:98:64:f6:d3:3d:e5:29:fa:a8:
         43:53:f7:58:2b:35:60:1b:75:eb:7e:4d:25:4f:5a:48:60:20:
         fe:ca:ec:ec:62:d8:d8:09:4e:89:18:67:98:39:40:28:a2:eb:
         42:3c:f4:dd:5e:e2:f3:a9:9d:04:8c:bf:f9:e7:95:98:61:dd:
         41:52:b6:a6:b2:b0:bd:e7:c1:51:2e:9b:1e:2a:a3:0f:6d:97:
         85:9b:ad:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:56:18 2026 by rpki-client