Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d5b2da11-e143-31fc-86ef-f90fbba4d87a.roa
File:                     d5b2da11-e143-31fc-86ef-f90fbba4d87a.roa (raw, json)
Hash identifier:          xH9OHaPcKV+P00soYkiW4aJk805D/0E8NCreQCLfV8s=
Subject key identifier:   17:43:D3:D0:88:93:5F:FE:E0:6D:34:6A:FB:D2:12:14:4C:4A:35:71
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E885A38E3BC6EE20D08F3E480
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d5b2da11-e143-31fc-86ef-f90fbba4d87a.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     834
IP address blocks:        74.0.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:38:e3:bc:6e:e2:0d:08:f3:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=7fa0f4a2-3ffc-40b5-989b-4bb98914a20e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:39:de:fc:c8:13:b1:ce:11:28:19:0a:46:d2:
                    f0:ab:e4:ae:83:19:a0:ee:ee:9b:b8:47:79:67:ef:
                    82:c3:76:0c:7c:d0:8f:40:e7:a4:c5:2b:bf:0c:6b:
                    3e:8d:58:81:09:da:74:e5:12:0e:5d:c7:c2:56:51:
                    dc:16:3f:bd:aa:7b:3a:14:1d:fd:a9:a0:a4:4b:65:
                    83:b4:d8:76:c8:6e:73:40:2c:00:b2:d2:5a:8e:52:
                    75:cf:63:23:2f:58:4a:4a:77:90:01:26:1d:0a:41:
                    a9:7a:f6:90:ff:b8:b7:bc:37:18:3f:19:98:28:8d:
                    5a:1e:f0:a6:37:66:fc:33:84:c6:3d:d7:03:cb:da:
                    45:e7:5f:c2:46:c9:7f:1c:9c:14:e1:09:77:2b:ec:
                    a7:a0:7d:ba:f0:8a:80:b9:bd:20:0b:bc:d3:8b:40:
                    10:70:01:cd:0a:d2:a0:90:f8:c5:fd:56:b7:d6:34:
                    88:3a:1f:29:e1:a5:0b:8d:a0:c2:69:4e:80:5b:ef:
                    53:db:fc:a7:be:e4:6a:7a:45:63:d7:f1:ca:1b:53:
                    a6:a5:d7:f7:b6:36:ed:58:68:29:e0:a6:d7:e7:84:
                    b4:5b:d8:3f:31:74:aa:8e:87:84:ec:e2:7d:11:cb:
                    12:e0:77:44:6f:c1:7f:31:99:61:14:60:15:68:c7:
                    bf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:43:D3:D0:88:93:5F:FE:E0:6D:34:6A:FB:D2:12:14:4C:4A:35:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d5b2da11-e143-31fc-86ef-f90fbba4d87a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.0.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:d1:b0:de:4e:f7:2a:28:4c:11:91:e6:55:41:a4:e2:e6:08:
         49:25:8d:18:82:ed:21:36:66:73:d7:dc:e6:3e:45:26:7c:68:
         7b:e8:b4:f0:ff:5a:a3:70:ae:86:2e:38:86:d8:94:7c:52:67:
         cb:3f:92:50:4e:e0:5f:7b:57:bb:4b:ab:b4:fe:46:9f:21:75:
         33:77:1f:7a:bf:55:8b:b9:cc:a2:1d:96:ae:ab:32:09:5f:fc:
         f4:c5:36:36:a8:ad:7f:b5:f3:69:8e:80:86:7e:09:4f:c9:5b:
         04:59:d0:9c:59:25:e2:3c:b9:ff:0b:06:72:23:61:a7:81:61:
         5d:a6:c3:9a:22:18:df:b4:35:97:d3:c2:8e:2f:91:bb:3f:5d:
         27:6e:8f:3e:27:bb:20:e4:58:4c:40:e0:63:17:f1:cf:52:41:
         ce:07:f4:7a:ff:0a:f1:10:2e:bd:3c:08:73:e0:a9:78:42:ba:
         ad:d7:96:6e:57:d3:1c:02:a2:37:d1:64:51:aa:31:de:9f:ef:
         bb:f1:79:97:40:93:76:42:59:51:e7:23:90:20:f4:1e:2d:16:
         7c:81:d0:6f:ad:15:76:3b:1a:7a:7f:77:a3:da:65:72:0f:bd:
         0e:de:68:41:71:9c:5f:0d:9c:41:e1:4c:91:e5:2f:51:d6:ff:
         f2:46:91:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:17:56 2026 by rpki-client