Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f8161709-b3d3-3ce5-8158-dec7a465901d.roa
File:                     f8161709-b3d3-3ce5-8158-dec7a465901d.roa (raw, json)
Hash identifier:          vwd40f1fFVWdEkq/9Q3PE70q83htPy3boX/RgAHr9Kg=
Subject key identifier:   22:E3:1B:C7:5A:07:99:F6:41:7A:7E:EB:69:40:60:40:C8:0F:BC:2F
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E6C6F7393A862E112380EB880
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f8161709-b3d3-3ce5-8158-dec7a465901d.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     39521
IP address blocks:        74.0.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:73:93:a8:62:e1:12:38:0e:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=efd8dd3b-c65b-4b9c-982a-2c96194efe86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b9:93:b3:ca:19:f4:a5:1e:65:44:77:69:e9:
                    ae:ef:aa:5d:e8:28:25:b3:95:60:73:76:ce:b6:86:
                    3f:f7:a8:80:a3:f8:ce:6a:d3:39:fe:10:8a:a3:47:
                    2d:86:d6:0b:e4:7a:c6:cd:e0:9e:7e:75:5a:27:6c:
                    7d:92:de:27:6b:65:fd:0c:a8:78:d4:4f:7a:90:01:
                    88:90:2d:3d:c6:75:42:22:3c:2a:b3:2e:a6:f7:26:
                    b9:f1:4d:9c:5f:1b:f0:1f:aa:d7:56:11:d4:8c:b3:
                    ac:d8:62:1f:a0:63:2a:66:03:b4:4d:df:9d:6c:96:
                    71:76:cf:fc:78:4f:64:29:ba:77:8b:07:2c:95:56:
                    2c:d9:bf:b9:82:cb:32:b3:83:f5:40:2e:91:4b:58:
                    ec:4a:e2:b7:04:69:34:85:e6:6a:40:01:48:b7:2b:
                    eb:8c:b9:c5:6b:03:02:94:aa:70:a5:f1:1c:23:ce:
                    c0:5e:ae:e7:db:b5:ac:3b:2e:db:e5:01:5f:01:8b:
                    59:78:66:d9:93:a2:49:8c:72:b6:23:35:8f:02:37:
                    92:f4:48:06:c2:18:6c:5b:83:36:d6:45:7d:d3:5a:
                    ee:02:b9:0a:35:00:9f:b0:b0:ca:e7:af:21:ff:7c:
                    55:a3:22:ae:eb:ae:c1:76:7b:01:64:91:e9:3e:ee:
                    fb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E3:1B:C7:5A:07:99:F6:41:7A:7E:EB:69:40:60:40:C8:0F:BC:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f8161709-b3d3-3ce5-8158-dec7a465901d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.0.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:17:f4:f5:9e:16:87:e3:4f:b2:5e:67:3d:3c:fa:45:ef:c9:
         53:83:bb:fe:9c:20:0b:bb:89:b0:fb:e1:4f:ae:9d:25:ad:dc:
         1a:a8:e2:ca:cf:72:63:c8:d8:6a:7e:bb:1d:31:60:70:3b:58:
         0d:90:c4:6f:5e:b7:ce:64:8d:6f:9c:d8:33:82:00:55:ec:a5:
         11:d4:e1:2b:09:d5:0f:b8:49:23:a1:51:e5:03:dd:4d:e7:61:
         2e:0e:c5:4b:0c:10:7f:ce:5c:5e:56:44:31:28:7c:6a:9f:2f:
         b3:a1:32:a9:d2:f3:b1:70:78:ec:4d:16:83:11:57:bf:5b:c7:
         de:0e:6f:e1:f5:ff:4a:f0:45:0b:d3:5b:5c:ba:79:08:fe:3e:
         a6:0b:e3:a9:9b:ed:32:ab:9e:38:5f:40:7f:6a:16:09:64:2f:
         e5:5b:20:ab:8d:9b:a6:3f:eb:f4:bd:af:5f:b7:71:29:a4:01:
         50:97:02:a7:97:10:99:49:ef:cb:7a:c8:61:96:94:37:76:cf:
         bb:0d:0d:0d:74:dd:a8:5d:7a:38:8e:21:b2:60:72:d4:c3:28:
         e0:4f:db:19:56:94:05:fa:0a:c3:e8:a2:c7:0e:e7:a5:1f:86:
         1f:73:a1:15:1e:d1:02:00:2b:92:f6:91:bf:74:ab:fe:4d:f9:
         a2:67:c3:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5sb3OTqGLhEjgOuIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk
ZWZkOGRkM2ItYzY1Yi00YjljLTk4MmEtMmM5NjE5NGVmZTg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7mTs8oZ9KUeZUR3aemu76pd6Cgls5Vgc3bO
toY/96iAo/jOatM5/hCKo0cthtYL5HrGzeCefnVaJ2x9kt4na2X9DKh41E96kAGI
kC09xnVCIjwqsy6m9ya58U2cXxvwH6rXVhHUjLOs2GIfoGMqZgO0Td+dbJZxds/8
eE9kKbp3iwcslVYs2b+5gssys4P1QC6RS1jsSuK3BGk0heZqQAFItyvrjLnFawMC
lKpwpfEcI87AXq7n27WsOy7b5QFfAYtZeGbZk6JJjHK2IzWPAjeS9EgGwhhsW4M2
1kV901ruArkKNQCfsLDK568h/3xVoyKu667BdnsBZJHpPu77gQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCLjG8daB5n2QXp+62lAYEDID7wvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZjgxNjE3MDktYjNkMy0z
Y2U1LTgxNTgtZGVjN2E0NjU5MDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSgD4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKEX9PWeFofjT7JeZz08+kXvyVODu/6cIAu7ibD74U+unSWt3Bqo4srP
cmPI2Gp+ux0xYHA7WA2QxG9et85kjW+c2DOCAFXspRHU4SsJ1Q+4SSOhUeUD3U3n
YS4OxUsMEH/OXF5WRDEofGqfL7OhMqnS87FweOxNFoMRV79bx94Ob+H1/0rwRQvT
W1y6eQj+PqYL46mb7TKrnjhfQH9qFglkL+VbIKuNm6Y/6/S9r1+3cSmkAVCXAqeX
EJlJ78t6yGGWlDd2z7sNDQ103ahdejiOIbJgctTDKOBP2xlWlAX6CsPooscO56Uf
hh9zoRUe0QIAK5L2kb90q/5N+aJnw2w=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:36 2026 by rpki-client