Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d94c5417-9574-301a-93c3-d1f347f6e9cb.roa
File:                     d94c5417-9574-301a-93c3-d1f347f6e9cb.roa (raw, json)
Hash identifier:          g5vsP1IlwTGYzM5qokzXGOGrOe0o4hxB/EHiv5+USho=
Subject key identifier:   37:F2:C5:7B:3E:8B:04:B6:02:D7:12:12:40:37:4E:B5:21:FB:AC:92
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B8A892932B8EC5D0B64DD9340
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d94c5417-9574-301a-93c3-d1f347f6e9cb.roa
Signing time:             Thu 16 Oct 2025 13:25:37 +0000
ROA not before:           Thu 16 Oct 2025 13:25:37 +0000
ROA not after:            Wed 14 Jan 2026 14:25:37 +0000
asID:                     834
IP address blocks:        74.0.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8a:89:29:32:b8:ec:5d:0b:64:dd:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 16 13:25:37 2025 GMT
            Not After : Jan 14 14:25:37 2026 GMT
        Subject: CN=a436ba89-2f1e-47cd-a217-3a33f6f59ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:b2:be:43:a2:26:f6:d5:04:39:77:b2:a5:
                    e4:3f:e4:a3:2e:60:67:c2:79:97:4d:7b:7e:25:08:
                    83:be:c2:1f:c7:f8:ae:a2:ec:46:4e:c3:09:00:27:
                    c7:0e:fa:a3:8b:2a:ce:ee:52:8f:2e:ee:23:39:ab:
                    d1:2d:4e:f8:5d:cf:5d:3d:d2:4b:60:00:b2:c5:96:
                    e7:a0:c6:11:a4:bd:4b:be:69:29:f3:a9:89:9c:fa:
                    18:25:57:e5:88:80:b0:c9:b5:ae:ca:09:32:fb:67:
                    58:36:5b:b2:89:c1:99:9e:8c:a4:3f:35:2f:c0:66:
                    c8:92:5f:62:b5:6f:e0:88:df:9f:fe:46:98:5c:9a:
                    8e:b5:4c:b9:9c:fe:9e:50:79:aa:df:13:78:57:a7:
                    57:8f:09:ed:d9:81:e0:5f:f9:d0:81:26:35:d0:b6:
                    12:84:3b:1c:17:3d:06:a7:2f:45:3e:09:bd:2e:10:
                    82:72:8f:ab:5a:6c:0b:28:ea:05:81:28:de:3e:c7:
                    35:88:66:62:d8:d4:7e:27:f1:5f:cd:8d:ec:a7:ad:
                    1b:46:37:c0:71:0c:24:4b:f3:4b:66:1b:83:ee:08:
                    0d:ad:91:70:b5:17:ae:19:71:2a:be:cc:99:71:19:
                    15:b8:00:8b:57:77:7e:33:56:15:c7:54:d9:94:21:
                    47:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F2:C5:7B:3E:8B:04:B6:02:D7:12:12:40:37:4E:B5:21:FB:AC:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d94c5417-9574-301a-93c3-d1f347f6e9cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.0.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:ea:b9:fa:7d:d5:af:93:67:76:48:f2:84:cc:7d:04:ff:1c:
         af:cb:f9:71:0a:cc:3c:9c:e6:1c:06:24:72:d4:0f:b3:55:53:
         62:05:ce:ea:53:4e:9b:09:79:ac:87:aa:e1:5b:fb:dd:56:87:
         f9:92:99:6e:5e:02:2a:0d:90:85:91:ee:d2:02:15:8b:74:d0:
         83:30:c0:0e:7b:1c:e4:21:70:eb:db:31:ae:23:9b:03:69:0f:
         84:6e:72:e5:5c:27:29:89:a3:2a:b7:05:bb:dc:50:98:3f:bf:
         2b:cb:44:96:fb:45:13:12:d8:23:d8:42:dd:4f:d0:06:b2:e1:
         cb:06:6b:75:a5:84:73:dc:ae:e8:0d:88:95:24:e8:4d:61:02:
         72:ce:c4:55:4f:73:6b:2c:2f:4b:5e:29:81:8c:9e:01:fb:36:
         ab:05:be:79:7d:e3:02:d5:50:00:94:49:af:22:d2:d9:7e:81:
         da:0a:19:67:53:7a:e3:17:91:fc:ba:65:32:c0:18:d7:0e:5c:
         5e:34:de:ea:55:fa:93:46:7f:fe:d4:92:86:7d:f7:12:73:45:
         5c:1d:8e:cc:41:6f:69:f5:f8:62:c9:bc:ec:56:50:4c:67:b5:
         a1:5f:29:4c:d6:c5:6f:d3:7e:be:8e:9e:a2:38:b3:11:0c:bd:
         61:a1:b7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:40 2025 by rpki-client