Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b48f4426-9037-363d-b0e2-c2a1bfbeb711.roa
File:                     b48f4426-9037-363d-b0e2-c2a1bfbeb711.roa (raw, json)
Hash identifier:          4bbBUBU4DiYwLl/ZILif/Sbac6F9IiOgQpkcBKOjmLU=
Subject key identifier:   EA:10:BA:59:20:36:24:01:C5:56:36:DE:12:8D:F7:4C:34:D5:C5:0D
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E86F4E3B84C88B7FCEF054400
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b48f4426-9037-363d-b0e2-c2a1bfbeb711.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     834
IP address blocks:        74.0.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:e3:b8:4c:88:b7:fc:ef:05:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=c2dbdbfa-d1ab-43e1-b80f-5eb543a0d5be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3e:d0:5e:c0:48:f5:76:49:d2:b5:d1:16:57:
                    89:ad:2d:5b:07:37:bb:9a:39:89:e6:87:62:cc:f1:
                    02:f6:07:34:a4:55:3b:9f:aa:48:16:6d:86:2e:30:
                    b6:e7:e3:8b:d9:90:80:c9:c1:ca:ca:f7:e7:6d:cd:
                    3c:c2:ef:cf:8f:84:03:aa:24:e7:cd:dd:6d:4e:28:
                    6f:37:00:33:6a:f5:ba:39:35:ff:b8:dc:ce:66:3b:
                    c1:92:c2:06:f3:72:65:b1:fa:27:3a:0f:ef:20:bf:
                    b4:8b:59:d5:6b:37:23:3f:2e:f1:e1:a2:cb:dc:fb:
                    e5:6b:21:4f:7f:ec:c0:47:b4:f4:43:6f:6d:20:a2:
                    85:ef:6f:73:08:d0:59:aa:0e:53:4b:9a:75:18:5f:
                    4e:e0:a8:36:fa:60:f3:ac:b1:8d:e3:fd:ff:83:a1:
                    96:50:31:16:98:49:0e:1f:56:92:97:17:ff:c1:0c:
                    0f:11:cf:d4:34:56:08:57:4c:cc:38:b4:f1:bd:f8:
                    8d:28:af:d5:ac:a5:de:04:31:e0:71:76:9c:32:0c:
                    94:ef:3e:43:76:6b:9c:fe:1d:6e:21:ac:94:6b:c6:
                    04:94:de:9a:87:c8:d1:d3:02:53:84:be:ba:04:49:
                    2c:cc:5f:7f:97:30:a8:11:49:71:d3:1b:16:89:0f:
                    4d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:10:BA:59:20:36:24:01:C5:56:36:DE:12:8D:F7:4C:34:D5:C5:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b48f4426-9037-363d-b0e2-c2a1bfbeb711.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.0.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:2d:61:7d:c7:f5:48:fd:0e:4f:4b:6d:77:b0:cd:78:50:4d:
         4d:ad:06:dc:07:7d:36:34:17:b1:c5:69:c2:54:4b:0c:cb:74:
         aa:c0:38:d0:91:1e:8a:0f:83:fa:2c:3b:be:dc:36:00:e4:4c:
         62:c4:8e:27:74:6b:77:ff:d1:2a:03:f1:58:e5:a0:47:a5:a0:
         68:27:80:bd:e4:4f:59:12:54:2c:e2:6c:ce:2f:72:67:e4:66:
         00:b2:8d:73:12:f2:f3:91:48:b5:cb:17:a6:88:56:b4:92:b6:
         93:7f:8a:df:ed:03:46:2c:48:34:5d:82:7a:0a:e6:2a:b5:8e:
         6d:99:f9:6e:9a:22:3a:50:ea:a6:f6:bc:2f:20:cf:4e:82:9b:
         e6:64:97:de:9b:7d:5c:6f:f4:78:9f:22:12:69:d5:0d:de:fa:
         e9:59:df:d8:f5:ef:91:f6:e2:44:d8:d1:48:59:4e:03:da:dd:
         c4:b1:8a:24:63:3a:ad:cd:0f:46:30:bf:d5:e6:f0:64:bd:25:
         92:58:81:d2:0a:22:df:45:94:f1:b1:c7:c4:41:5e:0d:2c:eb:
         ea:9c:67:15:2b:64:5c:a4:76:95:76:7a:a1:7e:f7:89:90:47:
         66:bf:92:59:85:37:51:b2:92:01:ad:16:c9:11:3a:11:02:29:
         b6:b1:d9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:27:09 2026 by rpki-client