Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7f7dab65-fe19-3efb-a317-e5ed5ee78932.roa
File:                     7f7dab65-fe19-3efb-a317-e5ed5ee78932.roa (raw, json)
Hash identifier:          ar+qXsT6adMwbUE4qo61+UCIMluQH7fGm+gzdnBW2Cs=
Subject key identifier:   E7:B5:DE:5C:44:1B:2E:4C:16:16:26:BC:D6:5D:DB:CC:EC:95:11:45
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F146789D7A84922DD335427C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7f7dab65-fe19-3efb-a317-e5ed5ee78932.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     219329
IP address blocks:        74.1.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:89:d7:a8:49:22:dd:33:54:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=053afd7e-b9c2-4b5f-b480-17ffac27d2da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:10:bb:58:c1:de:67:f6:e7:14:68:79:88:5c:
                    5f:0f:21:43:67:da:90:b1:9c:2b:61:9e:6b:2b:ac:
                    fb:12:3b:e8:3e:6f:87:41:9f:bc:d8:58:9f:5c:64:
                    d2:bc:1c:62:f4:bd:46:cf:0c:b8:e0:4c:1c:b8:6d:
                    25:0e:91:bc:e3:35:cd:61:90:c2:08:7c:87:c3:99:
                    a4:b3:ce:50:68:75:df:2f:f3:29:f5:9f:51:66:b3:
                    dd:34:27:9f:e7:5c:21:5d:79:7b:2a:0a:2d:6e:de:
                    61:56:9d:d3:61:31:0a:08:60:70:20:88:1e:d9:39:
                    e8:1f:64:d5:73:53:a5:1f:ee:32:e4:16:e9:93:9f:
                    1b:34:93:f5:97:14:81:b9:79:8b:9a:f6:1b:90:2e:
                    e1:93:73:8a:cb:ab:fa:e1:b5:28:b9:de:cc:1d:d2:
                    6f:1b:a0:76:e0:1b:4b:97:75:04:0b:f5:51:42:e7:
                    2e:ed:ce:3e:e1:42:4b:31:ad:ac:b7:f7:34:77:db:
                    72:b3:f1:28:8e:8f:77:6d:7e:03:54:21:4e:57:77:
                    06:04:1d:f4:05:2a:2a:73:99:14:a4:5f:14:7d:e6:
                    a7:b0:c2:94:bd:ce:b3:a0:c2:e4:9a:71:e4:95:53:
                    3f:e0:7e:e2:12:a6:02:7e:ca:75:f6:18:56:fc:6c:
                    30:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B5:DE:5C:44:1B:2E:4C:16:16:26:BC:D6:5D:DB:CC:EC:95:11:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7f7dab65-fe19-3efb-a317-e5ed5ee78932.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:38:c1:c1:03:a5:b2:cf:62:16:53:4f:7c:34:e0:8d:15:99:
         42:11:17:79:c8:c3:f8:04:dd:09:5f:50:98:c3:85:f3:1d:b6:
         5d:58:0c:09:6d:b1:75:3d:dd:af:08:5d:dc:a7:fb:87:99:f1:
         08:67:1c:5c:11:55:be:94:8c:59:d2:aa:88:ec:89:b3:b9:96:
         23:ad:1e:b6:4d:d1:8a:90:c0:2d:fe:4a:88:69:69:0f:01:0b:
         07:f7:d6:62:fc:1b:a1:42:a8:e7:49:a0:3e:05:a3:ee:3f:eb:
         f8:6c:34:55:34:ea:96:14:af:3f:e7:0a:fe:4a:73:c4:e2:0e:
         e0:c0:60:eb:5b:02:73:ef:c9:2b:d7:ab:48:f4:83:1b:5e:02:
         69:69:e0:61:6b:95:7f:f1:3f:c7:86:2d:3a:3d:51:4a:26:dc:
         36:3f:7c:86:72:87:65:2b:d5:e8:31:49:40:01:7e:3a:94:4e:
         4f:86:8f:8c:8f:3b:4a:53:1d:8c:bf:ef:ae:86:34:5a:b5:27:
         f1:3e:32:aa:af:f4:32:1f:99:6f:aa:b0:d6:ef:30:a7:75:8f:
         05:90:d4:d1:6e:87:7a:d5:5f:1a:b8:53:d2:e8:af:4d:3b:8b:
         8d:48:41:85:30:7f:f3:58:e8:dc:ff:72:49:12:c5:6f:b3:0b:
         11:32:94:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:54:42 2026 by rpki-client