Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/28e325d4-32f6-370c-ab3b-d0afb31d4e36.roa
File:                     28e325d4-32f6-370c-ab3b-d0afb31d4e36.roa (raw, json)
Hash identifier:          +dVYQA3R/q/svg3g+fh/XRKdZz+kGIbi6es1SghsGgM=
Subject key identifier:   29:20:0F:0F:21:7E:40:00:9E:D9:6B:FA:EA:36:8D:C6:34:C1:50:71
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DC62EF86D6189482C4A69F980
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/28e325d4-32f6-370c-ab3b-d0afb31d4e36.roa
Signing time:             Sat 09 May 2026 07:46:16 +0000
ROA not before:           Sat 09 May 2026 07:46:16 +0000
ROA not after:            Fri 07 Aug 2026 07:46:16 +0000
asID:                     402215
IP address blocks:        74.1.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:2e:f8:6d:61:89:48:2c:4a:69:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May  9 07:46:16 2026 GMT
            Not After : Aug  7 07:46:16 2026 GMT
        Subject: CN=8ccfc611-663b-40a9-b84d-5a43b1648433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:60:17:ca:e5:71:85:12:23:ba:3a:ac:e4:71:
                    2a:7d:1a:55:80:3d:af:a6:3e:4a:0d:b0:e7:39:7c:
                    c2:d1:0a:a5:1b:7c:e3:e5:f5:03:65:1c:37:e6:47:
                    d3:03:29:0f:b2:25:5c:50:8d:5b:1c:ad:7d:d6:72:
                    fa:fd:50:3f:e7:f8:18:53:7f:82:69:20:8b:c6:e8:
                    99:0e:8f:fa:18:a0:e2:64:a1:fe:ce:b0:87:0a:69:
                    54:e8:52:14:0f:7c:e1:d1:af:d9:94:20:32:81:03:
                    c2:fc:e0:99:ac:9b:53:3f:74:04:ad:6e:1b:b5:d5:
                    b4:c6:bb:72:dc:09:07:dc:a8:72:e6:4e:f2:c2:26:
                    31:78:ad:3e:67:89:78:0c:97:43:c2:43:db:fc:19:
                    01:01:5b:02:5c:01:d6:f8:8d:71:9c:99:6f:b0:1d:
                    cf:85:40:5d:51:e8:ed:db:57:57:c5:a1:71:37:dd:
                    3d:a8:45:e4:26:66:de:a8:fa:84:4f:65:a1:f1:40:
                    f2:26:b5:a7:a2:0f:ea:49:e4:65:1d:64:b8:2e:ec:
                    6c:1c:63:5f:32:8b:20:04:ee:94:df:b2:50:c1:95:
                    1e:d9:f8:4a:c8:af:f9:d4:a1:4f:b4:7d:6e:19:68:
                    9d:d1:1e:90:c1:7b:40:ac:64:7a:d4:ff:a0:73:3b:
                    f6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:20:0F:0F:21:7E:40:00:9E:D9:6B:FA:EA:36:8D:C6:34:C1:50:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/28e325d4-32f6-370c-ab3b-d0afb31d4e36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:0f:4c:d7:21:b0:b4:f9:40:89:0f:2c:8b:00:89:9b:fb:69:
         c3:d1:17:80:e5:d2:87:da:63:31:1f:2a:a9:70:bb:bd:e1:42:
         7c:b5:b4:63:1e:bb:2d:44:e0:e4:f5:09:37:27:f7:76:f2:17:
         23:75:d0:c3:48:00:f6:f9:28:07:c0:0f:71:d3:42:6a:49:62:
         a5:6d:43:1d:c0:11:5f:1e:08:99:e9:92:40:7e:78:58:65:bb:
         4d:77:ee:88:b0:c6:d1:1a:de:eb:81:28:38:5c:d9:6d:a7:24:
         75:29:22:b2:51:40:2d:f4:bf:49:fb:ee:19:58:9c:bb:61:00:
         20:3d:ff:69:82:0d:c0:41:e5:79:53:57:cd:09:d0:a0:e9:cc:
         72:5e:a3:6e:b6:ba:f6:43:c0:5e:f6:6c:f5:3a:8c:b2:10:14:
         3d:83:39:71:15:55:3a:fe:1b:0d:0f:e6:02:79:4f:4b:d1:67:
         1a:ad:18:53:77:07:74:b3:22:2b:8c:69:ae:68:49:0c:fe:3f:
         2f:a6:c5:82:cb:80:21:29:8e:b5:e1:f8:c6:97:b0:4c:53:5e:
         28:bc:e3:a2:53:c1:76:4a:e1:ed:75:71:a4:57:34:91:32:17:
         c0:05:fe:0f:58:e6:d5:4a:2c:92:a0:df:bb:23:44:8e:26:0f:
         e1:1f:7a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:05 2026 by rpki-client