Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da4526ba-98ac-389e-9476-984740142035.roa
File:                     da4526ba-98ac-389e-9476-984740142035.roa (raw, json)
Hash identifier:          BzLPTyYGzKMHoxO9ZG3isnR304h3f/3G7FmRiBYuk9w=
Subject key identifier:   D2:E2:47:E9:F8:42:B3:34:33:6E:49:71:27:B4:61:16:BD:E0:12:C7
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EAE27A0D6047518559CDAE240
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da4526ba-98ac-389e-9476-984740142035.roa
Signing time:             Fri 31 Jul 2026 09:59:01 +0000
ROA not before:           Fri 31 Jul 2026 09:59:01 +0000
ROA not after:            Thu 29 Oct 2026 09:59:01 +0000
asID:                     3257
IP address blocks:        74.0.192.0/21 maxlen: 24
                          74.0.204.0/22 maxlen: 24
                          74.0.208.0/21 maxlen: 24
                          87.87.144.0/20 maxlen: 24
                          87.87.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:27:a0:d6:04:75:18:55:9c:da:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 31 09:59:01 2026 GMT
            Not After : Oct 29 09:59:01 2026 GMT
        Subject: CN=9c810409-f479-4caa-ab97-d4b1a0bc93e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1e:f6:62:a9:cb:d6:d4:6a:a4:ff:e2:c4:51:
                    75:34:09:72:10:c8:7c:ce:83:de:b3:98:e8:01:14:
                    09:4b:52:61:3d:76:24:cc:92:53:d6:50:c6:56:ba:
                    54:2a:05:18:6e:59:e1:89:29:2e:5e:48:32:9a:2c:
                    ba:d1:63:a2:5f:fd:f8:49:84:6c:6c:ab:6e:f4:72:
                    6c:9d:6c:9c:b5:89:e7:b9:36:dd:8b:84:03:e6:1a:
                    c6:e3:b5:68:28:85:66:29:55:8c:11:0e:15:df:99:
                    a2:06:86:7b:68:39:84:dd:91:50:5f:4c:18:d2:db:
                    c4:3c:4f:6a:04:2b:89:ca:2e:a2:93:ff:49:d5:ab:
                    28:89:d9:da:a9:7a:96:7a:15:71:45:8d:7a:00:36:
                    1c:dc:fc:f6:db:d0:e2:4e:45:a7:29:4c:47:d1:59:
                    56:98:e7:fb:27:28:71:2e:dc:ff:9e:8f:b5:bd:56:
                    08:d2:2c:3b:53:91:2a:eb:56:ec:df:29:f1:79:2a:
                    2b:17:64:de:e8:08:11:13:c9:6a:41:46:dc:e2:68:
                    33:05:c8:d8:b7:7d:8e:d8:f1:90:86:0c:b9:c8:8b:
                    83:63:e8:68:3d:ee:5a:b6:80:54:cc:bf:d7:09:96:
                    14:dc:d9:a4:6d:f7:4c:ca:86:bc:43:10:81:3c:d3:
                    62:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E2:47:E9:F8:42:B3:34:33:6E:49:71:27:B4:61:16:BD:E0:12:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da4526ba-98ac-389e-9476-984740142035.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.0.192.0/21
                  74.0.204.0-74.0.215.255
                  87.87.144.0-87.87.191.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:c2:83:b1:a9:7d:e2:8c:96:70:c6:17:a6:64:72:39:10:3a:
         23:c6:56:2c:82:a5:21:75:8a:8e:e7:f2:3c:7f:c8:0b:4f:c2:
         5b:84:5b:b6:7f:e2:7f:5f:83:3b:35:16:ad:56:69:0f:7c:02:
         9d:79:c1:02:c3:83:c9:0c:fb:d3:ee:f8:74:65:9c:71:b7:e9:
         9b:35:30:0c:57:86:e2:9a:a6:67:dc:42:9e:5a:02:e8:2b:77:
         44:e9:ea:33:f7:c3:8d:49:2c:3b:ca:08:c9:64:da:cd:48:25:
         72:3f:7b:ff:c2:69:b7:af:91:d8:ed:28:f8:e6:2e:58:75:5f:
         55:d2:81:7c:ba:73:8d:b4:93:f7:fe:4d:72:e4:e2:1e:f6:d4:
         40:fa:d5:9a:2c:5d:72:02:1f:b3:48:26:1e:fc:17:4d:f5:4e:
         a0:fb:c4:63:fa:68:1f:52:f7:14:9d:c9:33:e0:5b:83:63:6a:
         06:d8:80:08:d7:df:de:0e:66:3d:9e:4d:1f:82:bb:aa:0d:86:
         69:55:b5:4b:02:f8:f9:7d:3e:5f:c2:83:1c:74:6c:71:85:20:
         a4:1b:1e:d3:80:48:3d:f5:3b:f6:68:6a:54:9d:51:6d:17:0a:
         aa:0c:ca:b2:a7:48:e8:a8:c5:9a:bd:8a:dc:88:e3:33:b5:f5:
         79:17:e7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 10:37:32 2026 by rpki-client