Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6a9f8716-a797-3fb9-af7c-44ececbaf37b.roa
File:                     6a9f8716-a797-3fb9-af7c-44ececbaf37b.roa (raw, json)
Hash identifier:          IozmjRUafezevSNV0c7FBAwJmR8VPIBRc6dgK0/juHw=
Subject key identifier:   76:8D:3B:39:42:2C:57:AF:C5:16:65:AB:14:B8:D6:9A:81:09:87:CD
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D15C8D28E898CBB007C9E1D00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6a9f8716-a797-3fb9-af7c-44ececbaf37b.roa
Signing time:             Sat 07 Mar 2026 03:18:11 +0000
ROA not before:           Sat 07 Mar 2026 03:18:11 +0000
ROA not after:            Fri 05 Jun 2026 02:18:11 +0000
asID:                     834
IP address blocks:        74.1.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:15:c8:d2:8e:89:8c:bb:00:7c:9e:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar  7 03:18:11 2026 GMT
            Not After : Jun  5 02:18:11 2026 GMT
        Subject: CN=af8718ae-2a4b-4fd5-b6a1-fc8bbe5e11f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4e:4c:30:d2:b3:ff:e0:88:c5:13:0a:a5:34:
                    5c:48:19:9a:61:e9:d3:ea:9d:39:1d:2f:26:5e:9b:
                    0f:79:f1:84:1c:87:40:95:50:17:3c:0a:73:26:7e:
                    9e:50:f2:d7:e0:36:1a:10:c5:fd:5a:3f:c3:fe:0a:
                    88:af:73:1f:ff:92:6d:a4:0c:ee:e3:0b:bf:53:fa:
                    18:ed:ef:05:1a:82:f6:9a:70:8c:6d:11:0b:cc:1e:
                    88:9a:c8:bb:bf:08:11:91:f7:dc:75:14:c8:e0:08:
                    07:bb:74:86:5f:d4:83:63:6a:ac:44:98:fa:68:0b:
                    ce:33:28:83:9b:db:9f:74:26:ee:7d:19:b2:27:56:
                    12:43:29:35:e4:7f:b4:64:1d:42:06:22:8f:c7:67:
                    42:0c:e6:c9:66:d1:98:c6:19:46:8c:e1:6a:ed:6d:
                    ef:37:5b:df:02:90:24:28:1b:dd:b9:e2:33:da:d5:
                    c0:26:27:6f:f5:35:87:aa:54:01:0c:c1:89:f5:11:
                    24:f7:27:0f:84:fe:aa:70:46:a0:f2:26:f0:46:70:
                    5a:93:75:3a:b8:02:9f:e1:79:58:c1:2d:ef:b3:8d:
                    05:5b:d0:61:28:24:c3:9a:6e:af:2b:46:34:90:08:
                    40:3f:3e:0d:6d:00:8e:06:08:b4:bc:1b:e3:93:da:
                    0d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8D:3B:39:42:2C:57:AF:C5:16:65:AB:14:B8:D6:9A:81:09:87:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6a9f8716-a797-3fb9-af7c-44ececbaf37b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:8e:a6:8e:05:0f:70:e6:40:f3:26:27:1c:0f:b3:5a:ab:a7:
         32:c4:3c:e4:8e:d2:7b:2a:7b:52:b3:2c:e3:12:60:d1:f8:1d:
         76:d6:e9:ce:6c:ba:a8:0b:c2:e4:a2:ef:f1:a9:9d:38:89:d0:
         c6:e7:ee:6e:c5:72:35:72:89:f6:64:a6:62:07:15:8b:1f:7a:
         f7:49:b7:f8:38:a5:2c:89:26:55:ab:6c:ae:5c:1b:7b:f5:9a:
         26:5b:fe:68:ff:42:1a:3e:d8:82:0f:9b:26:ac:ce:89:8e:3c:
         fb:01:fb:e9:5d:dd:e1:7d:29:f4:bd:47:76:bf:18:e1:3a:eb:
         ee:76:38:59:13:2f:e3:07:99:1d:2f:54:d1:c5:7a:cb:06:07:
         b0:51:3b:c5:ca:ad:e3:98:86:b6:40:62:ce:10:c0:a2:12:a5:
         24:90:01:8f:60:40:79:f5:9a:89:bf:c4:9b:ab:90:a3:58:1c:
         f8:6f:1f:1a:3c:2a:9f:30:3f:fd:c1:02:0b:ad:54:69:ad:79:
         25:55:7a:10:01:43:ce:9b:ef:12:c8:fc:5e:4c:46:a2:fa:df:
         a8:ec:7f:1e:cd:84:23:8a:5f:b8:eb:df:24:99:dc:3b:a0:8d:
         31:a3:88:60:bd:d2:0c:cf:cb:24:24:2e:78:14:5a:5d:89:6f:
         6a:df:1e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:24:48 2026 by rpki-client