Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7f4dde34-e167-3b3e-abf8-c9f0f9a4ffe5.roa
File:                     7f4dde34-e167-3b3e-abf8-c9f0f9a4ffe5.roa (raw, json)
Hash identifier:          5h9dnc/pL7rgJddlz1p9oov4MXtKHLvu8YjgejLCpZc=
Subject key identifier:   ED:BF:1E:87:76:13:F1:86:51:03:26:88:83:A3:26:6E:7F:9D:CE:BF
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E94EA4A10EB8BBEDA174C8B00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7f4dde34-e167-3b3e-abf8-c9f0f9a4ffe5.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     174
IP address blocks:        69.33.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:4a:10:eb:8b:be:da:17:4c:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=c6ab98c2-2b56-4bf0-9b05-00601b4891b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c9:42:eb:c9:eb:d2:68:04:58:21:01:69:e6:
                    97:aa:12:37:55:6d:fb:c8:f3:d3:2c:cc:26:c4:26:
                    ab:fb:41:b3:18:63:43:88:ed:0c:b9:54:82:1d:38:
                    50:0c:b1:4b:73:43:dd:10:62:f5:2a:53:b0:03:47:
                    56:3b:4c:05:6f:6d:b0:23:0a:34:bf:1e:5b:91:94:
                    94:51:57:0c:12:ed:3a:72:6d:cc:81:8b:47:56:fa:
                    6d:98:cd:e0:ad:34:d7:70:9e:8c:9f:38:ce:ab:a9:
                    ac:56:a3:ac:39:89:3c:b4:31:df:95:ee:79:12:c2:
                    cd:08:7d:f7:02:3f:47:a9:be:f7:82:9e:92:ed:a5:
                    af:14:84:ae:85:2e:28:d0:46:29:e3:20:aa:33:9c:
                    34:67:67:c5:14:6b:22:d1:0e:61:7e:58:8a:60:5a:
                    82:9a:92:2a:b0:0e:b3:7d:23:65:47:7d:8c:bd:5f:
                    92:5b:93:19:79:33:b6:ba:02:62:35:23:87:3a:2d:
                    59:b2:f8:2c:87:32:1f:17:29:2e:9d:7f:f9:f2:9f:
                    dc:0c:c3:b3:fd:72:f1:fa:38:a5:e3:bb:46:ee:85:
                    58:e2:46:a6:68:12:52:f4:0c:28:af:04:1e:52:74:
                    c0:3b:21:58:7f:78:f2:de:1d:46:c7:c6:49:e5:6b:
                    4a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:BF:1E:87:76:13:F1:86:51:03:26:88:83:A3:26:6E:7F:9D:CE:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7f4dde34-e167-3b3e-abf8-c9f0f9a4ffe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.33.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:d5:75:69:bd:63:98:dc:53:4e:8b:c4:e5:ab:8b:eb:db:40:
         0b:c5:9f:f1:4b:95:61:06:fc:52:7b:9a:11:b2:d9:5b:0f:51:
         1a:be:36:34:dd:9f:60:80:c3:0c:3e:59:97:2d:09:d8:01:06:
         b7:91:7d:c9:bb:c1:7b:19:b9:03:49:2e:09:cb:46:2f:ad:4e:
         33:51:1a:fa:35:4b:bf:cc:80:3b:e1:12:7a:13:16:b9:06:1f:
         9f:47:3e:db:c6:3a:90:1a:17:a4:69:3e:a9:30:c4:61:f3:93:
         01:a8:51:1d:5c:a1:4f:61:34:dc:64:bc:78:e8:cb:8a:1b:ca:
         88:0f:5d:e2:e8:00:1c:f0:ae:1f:ed:9c:c0:e3:94:ff:23:e9:
         ed:5f:d6:bd:76:1e:0f:17:80:b3:2f:60:15:2d:04:dc:d8:73:
         99:28:77:c3:98:3b:0f:50:a1:ff:5d:bb:18:52:fd:79:64:af:
         7e:cb:cb:bd:e4:4f:cd:5f:6a:91:3e:21:51:6d:15:1a:c1:b2:
         94:81:39:b6:6e:be:45:80:b4:fa:cf:a8:fe:e3:c0:fa:e3:91:
         b8:5f:62:55:8a:a5:b5:dc:8a:1a:41:87:47:46:a8:97:96:79:
         dd:77:6f:2a:81:9d:2f:47:de:f2:cc:df:bf:46:25:cf:05:9d:
         a9:0c:01:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:10:21 2026 by rpki-client