Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/696b4824-8ad3-3f97-8130-2c2c8b642e65.roa
File:                     696b4824-8ad3-3f97-8130-2c2c8b642e65.roa (raw, json)
Hash identifier:          +7SzggzbStqWgosnSdX1gVpYHHiNv9fVdWWFKBb9vYs=
Subject key identifier:   AA:82:B8:9D:08:43:59:68:48:31:CB:9A:30:81:B1:60:57:98:E0:AE
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EFB476396B2FAEE2D666EFC00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/696b4824-8ad3-3f97-8130-2c2c8b642e65.roa
Signing time:             Fri 28 Aug 2026 01:00:12 +0000
ROA not before:           Fri 28 Aug 2026 01:00:12 +0000
ROA not after:            Thu 26 Nov 2026 02:00:12 +0000
asID:                     137830
IP address blocks:        74.2.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fb:47:63:96:b2:fa:ee:2d:66:6e:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 28 01:00:12 2026 GMT
            Not After : Nov 26 02:00:12 2026 GMT
        Subject: CN=de676b68-bd49-4a22-801a-6c2c9c5d7c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b7:f2:cc:45:da:d2:d4:72:f5:9c:2b:bb:8e:
                    c6:13:96:1d:2b:c3:fc:71:63:dc:9a:ac:63:89:c6:
                    a0:cb:5c:19:85:e1:bf:e5:65:d4:c6:31:bd:48:51:
                    d7:2e:07:97:b4:e3:f9:56:80:ff:8c:b6:1d:c9:71:
                    cd:6a:96:7a:c3:0b:18:56:23:ce:e2:80:c7:26:1f:
                    8f:79:d1:d7:5d:12:bc:1e:15:1a:65:8b:3c:e3:6d:
                    29:ed:94:6f:d1:f7:d4:cc:eb:8d:4c:3a:e1:55:b7:
                    a5:ce:3c:58:47:6d:15:f2:96:e7:bd:31:72:c5:1a:
                    74:7e:8a:05:f9:b1:97:d1:57:09:da:d1:25:1b:6d:
                    98:f8:0b:9b:09:9d:fc:45:3e:19:85:7e:eb:93:a7:
                    d0:90:3b:7a:7d:3c:bb:b7:58:c2:f7:b7:62:66:a8:
                    73:fd:b4:12:35:b1:b0:8e:12:56:75:d9:a4:ea:39:
                    23:05:b3:95:b0:0a:c1:a8:74:10:55:1e:44:64:b8:
                    30:5b:a8:3f:65:90:55:a6:b1:65:d6:06:c8:54:a1:
                    41:d1:4c:a4:d9:e7:4c:0d:c6:85:23:ed:fe:af:0c:
                    df:40:be:b0:50:83:9d:5b:fb:07:04:8c:04:4f:73:
                    fb:82:7b:a3:28:11:09:2b:2f:47:c7:f4:26:c4:94:
                    10:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:82:B8:9D:08:43:59:68:48:31:CB:9A:30:81:B1:60:57:98:E0:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/696b4824-8ad3-3f97-8130-2c2c8b642e65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.2.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:10:8f:71:e6:c2:7c:8c:d8:33:88:74:95:fb:2e:53:07:ee:
         7a:c8:d2:ef:13:e7:53:14:b7:0f:c4:95:c0:0c:f4:37:a7:7f:
         45:b4:4d:e1:79:97:db:ee:26:7b:f1:15:21:b8:af:fe:f6:fe:
         d6:55:e8:40:85:35:05:92:8e:1d:cf:45:0e:4a:af:42:2c:74:
         32:7f:2b:8a:d2:b2:9f:45:54:39:1f:ac:e2:48:bc:f5:52:59:
         e6:c7:ac:55:57:8d:b2:03:55:39:7e:16:f5:d8:2a:1d:aa:b8:
         db:d1:c4:f7:31:9a:88:88:3f:be:ce:68:63:5c:06:09:39:16:
         01:ef:cc:d7:f0:c6:58:42:6b:cd:45:83:cf:37:ba:78:80:88:
         78:c7:63:1f:b5:13:63:59:9f:f2:49:c2:b8:34:41:de:61:2f:
         7f:6a:f4:4b:b3:cc:e5:39:22:4d:b2:79:62:40:c3:77:17:27:
         30:3b:8d:ac:c7:3d:73:e7:ac:79:e7:0c:50:4f:59:44:e3:ac:
         72:63:63:ed:c5:ef:ba:b7:fb:af:07:e5:31:1f:cb:e3:d8:94:
         c8:66:06:b6:ee:9b:7c:1d:ab:a8:2c:13:b0:10:96:dd:17:6e:
         a9:02:6d:fe:79:8f:6e:04:c7:6d:b0:e1:69:42:e9:2e:a6:77:
         84:65:b4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 09:27:53 2026 by rpki-client