Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6296a297-fb27-39e8-8fbb-94486440b8a9.roa
File:                     6296a297-fb27-39e8-8fbb-94486440b8a9.roa (raw, json)
Hash identifier:          0Pc09TkYUkgGKmzor1Odh9JNqFf7rDClQFViYBlPpYc=
Subject key identifier:   4A:52:F7:DC:7F:AB:AF:8C:DF:5E:57:97:CA:FE:98:EE:AA:C5:3B:5C
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F00DCCEF8D55031190A4FA340
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6296a297-fb27-39e8-8fbb-94486440b8a9.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     26666
IP address blocks:        74.1.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:ce:f8:d5:50:31:19:0a:4f:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=86862588-2185-4ad8-8705-ef3314befa77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7a:ce:d6:a0:94:0a:62:d8:46:c2:00:7f:5f:
                    3a:78:7b:a9:31:9c:1f:dc:65:6f:ed:e8:23:ed:22:
                    80:7b:c0:9a:08:89:68:87:c6:89:b5:53:4a:b0:90:
                    4d:c6:05:a8:c9:4d:6f:95:19:44:e2:75:37:f5:ce:
                    16:bf:1c:9d:10:1d:1f:36:98:af:76:d1:8e:2b:db:
                    e8:55:86:2a:b2:7e:04:0c:30:40:ed:05:e6:27:69:
                    29:7f:b6:da:d8:cc:0c:67:53:9f:f6:ce:42:60:37:
                    d9:8d:81:84:e6:06:d2:13:13:af:3e:33:0b:8c:53:
                    17:cd:ff:42:26:72:af:09:a0:72:65:5d:8c:86:6c:
                    5d:25:76:14:0a:1e:66:b9:83:77:f4:c9:55:a3:c4:
                    b5:f6:3b:2b:11:87:b4:0f:1c:de:19:e6:90:58:6d:
                    17:d4:8e:e2:88:96:f8:ca:07:ed:c5:c0:d6:56:7e:
                    74:72:77:8e:37:86:db:62:41:03:1d:e9:e7:f4:46:
                    a3:26:06:08:47:00:fd:c1:0f:a0:7e:bf:2e:a3:28:
                    21:b1:f9:bf:a0:68:b4:6e:07:84:42:a1:73:b2:a7:
                    87:1a:f0:14:35:01:04:e4:5e:90:98:86:f5:a0:dd:
                    5e:53:eb:43:bb:ab:12:85:8c:03:dc:0c:df:54:d9:
                    0e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:52:F7:DC:7F:AB:AF:8C:DF:5E:57:97:CA:FE:98:EE:AA:C5:3B:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6296a297-fb27-39e8-8fbb-94486440b8a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:3c:44:98:fe:9a:a8:ab:ca:75:80:62:7e:72:d5:79:43:76:
         cf:79:dd:07:a0:17:74:e6:e6:9e:ee:f9:f3:a5:1f:a6:5c:e0:
         8c:0e:20:d8:cc:79:a9:73:5e:ea:07:00:a9:de:d8:54:a4:92:
         a3:07:ef:e8:27:26:d9:44:6d:c7:4b:38:d9:13:b3:81:d6:53:
         10:9a:ec:97:e8:a2:f5:52:fe:9e:19:61:cb:d9:0b:ed:20:43:
         5b:bb:8c:07:72:7e:28:c0:9d:1d:5c:81:e0:34:16:9b:02:d2:
         72:e7:d7:79:77:ca:8a:7e:f2:1f:58:a7:09:63:16:95:19:89:
         35:d1:8a:78:95:33:dd:7c:37:2c:6a:2c:87:6e:7f:ab:8a:ff:
         41:84:e7:cd:dc:f3:93:e7:0f:73:c9:ba:47:f5:64:7c:43:59:
         ba:1e:18:1c:87:95:0d:a3:c6:e5:be:f7:81:3b:5f:27:a6:51:
         d9:75:7c:df:29:cb:a5:7e:ca:0b:2c:6c:b6:a7:a3:2e:72:53:
         6d:09:ac:85:24:4b:80:39:f3:d9:5a:f7:9e:0a:f7:5e:b3:24:
         17:71:05:1f:72:15:6f:24:6d:1c:a8:54:16:92:c1:f3:2e:46:
         66:35:f4:e2:bd:86:e1:63:b5:64:bd:c0:97:e1:77:40:ac:c4:
         e8:d5:d7:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8A3M741VAxGQpPo0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk
ODY4NjI1ODgtMjE4NS00YWQ4LTg3MDUtZWYzMzE0YmVmYTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnrO1qCUCmLYRsIAf186eHupMZwf3GVv7egj
7SKAe8CaCIloh8aJtVNKsJBNxgWoyU1vlRlE4nU39c4WvxydEB0fNpivdtGOK9vo
VYYqsn4EDDBA7QXmJ2kpf7ba2MwMZ1Of9s5CYDfZjYGE5gbSExOvPjMLjFMXzf9C
JnKvCaByZV2MhmxdJXYUCh5muYN39MlVo8S19jsrEYe0DxzeGeaQWG0X1I7iiJb4
ygftxcDWVn50cneON4bbYkEDHenn9EajJgYIRwD9wQ+gfr8uoyghsfm/oGi0bgeE
QqFzsqeHGvAUNQEE5F6QmIb1oN1eU+tDu6sShYwD3AzfVNkOzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEpS99x/q6+M315Xl8r+mO6qxTtcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjI5NmEyOTctZmIyNy0z
OWU4LThmYmItOTQ0ODY0NDBiOGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgHqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKM8RJj+mqirynWAYn5y1XlDds953QegF3Tm5p7u+fOlH6Zc4IwOINjM
ealzXuoHAKne2FSkkqMH7+gnJtlEbcdLONkTs4HWUxCa7JfoovVS/p4ZYcvZC+0g
Q1u7jAdyfijAnR1cgeA0FpsC0nLn13l3yop+8h9YpwljFpUZiTXRiniVM918Nyxq
LIduf6uK/0GE583c85PnD3PJukf1ZHxDWboeGByHlQ2jxuW+94E7XyemUdl1fN8p
y6V+ygssbLanoy5yU20JrIUkS4A589la954K916zJBdxBR9yFW8kbRyoVBaSwfMu
RmY19OK9huFjtWS9wJfhd0CsxOjV170=
-----END CERTIFICATE-----
Generated at Tue Oct 6 19:47:15 2026 by rpki-client