Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/994a79b5-1d61-35e3-8261-886049f7fedf.roa
File:                     994a79b5-1d61-35e3-8261-886049f7fedf.roa (raw, json)
Hash identifier:          yvyNFD5Z7Uj/iuxOHQktEWwKsKi5hjVuVraSaCH4DLI=
Subject key identifier:   49:B0:85:C2:2C:5F:BA:C3:E2:AD:CF:DC:3B:B1:80:13:62:F6:8C:E6
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D91C022015940E82A3A101700
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/994a79b5-1d61-35e3-8261-886049f7fedf.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     13737
IP address blocks:        74.1.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:22:01:59:40:e8:2a:3a:10:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=dcc38d1f-b403-40c9-b979-0a7bb6236c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cc:ec:37:03:6e:fb:c7:00:69:99:15:d5:4b:
                    9d:cc:5e:c1:c9:16:55:d2:98:26:46:d5:90:1a:18:
                    1a:6a:13:4a:be:53:b8:3b:3c:81:6f:2e:31:73:8d:
                    0d:59:e3:b2:8a:85:34:9a:29:84:2c:0b:e3:45:6a:
                    3e:70:23:2b:49:0d:aa:31:70:e5:0b:50:cd:88:b8:
                    c7:8b:a7:54:e5:0b:af:85:37:0c:fd:0e:b1:91:d9:
                    5f:86:8e:f6:8b:ac:bb:5a:e7:99:ce:47:c8:67:05:
                    75:45:cc:df:9d:20:9d:61:30:62:dc:d6:b5:4c:dc:
                    06:0d:8d:aa:eb:da:f1:66:b7:48:13:f7:dd:a1:6a:
                    39:1e:79:7d:58:85:a7:fa:50:70:fa:e6:28:77:dd:
                    bb:57:c3:1f:95:7f:cb:b5:33:89:ab:18:3d:7d:24:
                    79:2c:0e:ff:2c:ca:05:9b:fb:14:46:87:95:9f:71:
                    37:fc:78:7f:11:db:6d:c0:51:07:44:0e:90:98:cb:
                    5d:e0:c3:b7:f5:4b:7a:66:a8:d2:21:c4:94:8e:78:
                    65:fd:7e:0e:63:a3:1d:d9:ba:1d:9a:3e:6a:ee:a8:
                    2c:11:cc:fa:40:08:f7:c9:8c:74:87:35:06:66:fc:
                    ff:85:d8:a3:f5:aa:03:40:4a:d1:19:2d:de:56:3f:
                    4e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B0:85:C2:2C:5F:BA:C3:E2:AD:CF:DC:3B:B1:80:13:62:F6:8C:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/994a79b5-1d61-35e3-8261-886049f7fedf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:d1:a9:d3:b1:81:d5:c4:32:6a:e8:03:3e:1f:35:5d:67:56:
         02:9a:ed:7b:eb:40:db:d7:dd:29:64:02:76:a3:ec:1f:1f:0c:
         4c:02:4f:94:7c:51:72:57:55:33:4e:c0:3a:77:f3:e8:d4:f3:
         01:63:51:48:7d:52:4e:81:92:a1:94:27:05:66:97:6d:96:fb:
         ff:64:e4:fa:27:84:ef:0b:60:b6:d8:0c:34:0e:f1:8e:de:e4:
         e5:7d:95:51:42:99:53:0b:d3:27:23:25:6e:53:22:5a:4f:96:
         c8:65:2c:7f:09:ec:d2:e6:e6:0e:dd:86:a5:7c:02:e7:4e:04:
         4b:ea:49:15:69:29:47:0b:28:51:64:62:ec:e1:5f:58:fe:68:
         5d:be:08:cd:a6:81:ad:13:86:e2:5f:5f:aa:a6:3a:43:b0:6d:
         88:0d:bf:bf:ed:8d:a9:95:8e:e6:75:df:1c:b1:6f:46:da:32:
         d9:76:2d:db:e7:59:38:c9:ab:8d:e1:df:8f:b0:e9:cb:a0:c8:
         73:9b:c7:ec:8c:58:6a:ab:b0:c9:a2:63:c9:49:a8:1e:31:f5:
         4b:b6:94:79:d5:1c:09:32:e8:ea:43:f8:71:e6:7b:b7:de:69:
         b1:7c:f7:88:40:e9:a1:80:02:e2:49:47:cf:7c:a1:d4:63:8c:
         ce:b3:51:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwCIBWUDoKjoQFwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk
ZGNjMzhkMWYtYjQwMy00MGM5LWI5NzktMGE3YmI2MjM2YzZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMzsNwNu+8cAaZkV1UudzF7ByRZV0pgmRtWQ
GhgaahNKvlO4OzyBby4xc40NWeOyioU0mimELAvjRWo+cCMrSQ2qMXDlC1DNiLjH
i6dU5QuvhTcM/Q6xkdlfho72i6y7WueZzkfIZwV1RczfnSCdYTBi3Na1TNwGDY2q
69rxZrdIE/fdoWo5Hnl9WIWn+lBw+uYod927V8MflX/LtTOJqxg9fSR5LA7/LMoF
m/sURoeVn3E3/Hh/EdttwFEHRA6QmMtd4MO39Ut6ZqjSIcSUjnhl/X4OY6Md2bod
mj5q7qgsEcz6QAj3yYx0hzUGZvz/hdij9aoDQErRGS3eVj9OGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEmwhcIsX7rD4q3P3DuxgBNi9ozmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTk0YTc5YjUtMWQ2MS0z
NWUzLTgyNjEtODg2MDQ5ZjdmZWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgHoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKHRqdOxgdXEMmroAz4fNV1nVgKa7XvrQNvX3SlkAnaj7B8fDEwCT5R8
UXJXVTNOwDp38+jU8wFjUUh9Uk6BkqGUJwVml22W+/9k5PonhO8LYLbYDDQO8Y7e
5OV9lVFCmVML0ycjJW5TIlpPlshlLH8J7NLm5g7dhqV8AudOBEvqSRVpKUcLKFFk
YuzhX1j+aF2+CM2mga0ThuJfX6qmOkOwbYgNv7/tjamVjuZ13xyxb0baMtl2Ldvn
WTjJq43h34+w6cugyHObx+yMWGqrsMmiY8lJqB4x9Uu2lHnVHAky6OpD+HHme7fe
abF894hA6aGAAuJJR898odRjjM6zURA=
-----END CERTIFICATE-----
Generated at Wed May 13 15:22:12 2026 by rpki-client