Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9692b81b-cb83-366b-ad87-29bd03e5218d.roa
File:                     9692b81b-cb83-366b-ad87-29bd03e5218d.roa (raw, json)
Hash identifier:          bOkzw8YkJ8CTJYhPZLDSHyvzyuMLGX6RDRtD2M3o4XE=
Subject key identifier:   8E:DC:01:F9:AC:0D:CB:66:70:6D:6B:7D:58:7E:FC:A6:0E:9D:9A:28
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DCCE5E4B96E0483DF49F58380
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9692b81b-cb83-366b-ad87-29bd03e5218d.roa
Signing time:             Mon 11 May 2026 17:29:41 +0000
ROA not before:           Mon 11 May 2026 17:29:41 +0000
ROA not after:            Sun 09 Aug 2026 17:29:41 +0000
asID:                     834
IP address blocks:        74.1.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:e5:e4:b9:6e:04:83:df:49:f5:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 11 17:29:41 2026 GMT
            Not After : Aug  9 17:29:41 2026 GMT
        Subject: CN=fd0eccb1-5bae-4946-9ec7-5badafce6e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f7:24:84:bf:89:40:5f:e9:e6:68:55:e7:91:
                    50:74:66:57:58:ca:0a:1c:4a:b0:27:1a:8d:3c:08:
                    20:75:dc:f3:06:95:9c:a3:f5:f9:e6:56:b9:bd:ce:
                    ab:04:b8:46:c7:23:7a:6a:e8:9d:8a:6f:94:bd:0c:
                    3c:53:47:a1:ca:9c:f2:89:ff:09:a2:0b:04:ef:eb:
                    41:3c:83:d1:19:53:8a:73:df:7b:60:d2:0e:0c:26:
                    80:d4:06:85:a0:49:46:79:ca:ca:57:a7:55:23:6d:
                    6e:2c:6a:97:e6:88:53:f7:62:b8:29:84:79:56:bf:
                    5a:1a:e1:e1:dd:3f:5a:6b:83:0f:f1:89:2b:77:f2:
                    b5:77:98:85:54:37:bd:77:31:96:5d:5e:40:4c:cc:
                    c5:c9:db:b7:0e:5c:33:dc:51:76:83:c8:ee:93:ee:
                    a7:67:53:b9:2c:3f:ae:22:29:19:23:21:47:cb:c3:
                    38:c7:a6:4f:8e:38:b9:f8:fa:ee:d3:a7:7e:39:41:
                    bd:b6:d6:f4:45:a1:90:a0:b1:58:eb:48:27:8e:a5:
                    07:13:73:49:51:ce:c5:0f:c0:6e:b9:e0:f4:39:bc:
                    a1:6c:62:bf:32:c4:47:a9:95:69:c1:15:ef:32:b4:
                    69:23:0d:73:20:eb:1c:d6:bb:13:67:0f:bd:db:ea:
                    2c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DC:01:F9:AC:0D:CB:66:70:6D:6B:7D:58:7E:FC:A6:0E:9D:9A:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9692b81b-cb83-366b-ad87-29bd03e5218d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:76:3c:3b:8b:23:60:59:16:58:ad:b5:b1:94:e6:8d:b9:06:
         71:51:35:6a:3d:6e:a6:c8:66:4e:0b:f8:2a:3a:30:3c:89:f6:
         96:c4:2b:21:3f:ee:8e:fe:45:f1:f8:b2:65:91:a6:d5:35:1d:
         bf:e7:7d:8c:29:f0:b9:4c:cf:34:90:30:87:56:5a:22:4b:af:
         cf:ef:0d:21:82:fa:c0:ab:5e:b3:e7:7c:83:d7:e3:56:40:f1:
         a7:a6:35:b9:de:f9:5b:28:3c:6f:a6:49:f2:c3:f9:c5:8e:9e:
         a1:b1:64:63:f8:46:6f:83:e2:e0:0e:af:0c:8e:bc:3e:c9:ea:
         d3:cd:67:50:ea:b7:8f:27:12:04:d8:c4:88:79:63:0f:71:a5:
         35:ba:d6:2f:5d:66:e4:55:f2:73:13:b9:98:c5:4f:9b:5b:50:
         2d:42:86:22:67:b0:45:bb:62:fa:48:fe:17:ce:c0:a4:24:ae:
         b5:13:b7:bd:d3:3c:f0:4f:12:53:c1:c5:78:6c:9a:6b:0e:bb:
         97:54:5d:cb:69:5a:0f:e9:d8:78:a7:81:18:15:aa:9b:e1:d0:
         03:39:1b:b9:0d:cf:e9:fa:65:44:ba:b4:40:cc:4f:02:ab:3d:
         f6:89:55:dc:6c:9d:37:c7:7a:d7:c6:01:61:ee:e7:b9:a1:ac:
         a3:de:aa:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:59:50 2026 by rpki-client