Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fdd68490-8929-3005-8f2d-0787166b0121.roa
File:                     fdd68490-8929-3005-8f2d-0787166b0121.roa (raw, json)
Hash identifier:          PZxRk3nvDazDkKYXVzh3S9eBM3qp3qCwDyEebvPcLm4=
Subject key identifier:   FF:D0:04:3E:F2:DD:40:5F:C7:18:18:5C:F1:63:22:85:20:FB:F3:32
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E74CF71F2EE89F812B5F90900
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fdd68490-8929-3005-8f2d-0787166b0121.roa
Signing time:             Fri 10 Jul 2026 21:00:12 +0000
ROA not before:           Fri 10 Jul 2026 21:00:12 +0000
ROA not after:            Thu 08 Oct 2026 21:00:12 +0000
asID:                     152672
IP address blocks:        74.2.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:74:cf:71:f2:ee:89:f8:12:b5:f9:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 10 21:00:12 2026 GMT
            Not After : Oct  8 21:00:12 2026 GMT
        Subject: CN=a8905bf5-74cd-4fc0-b8ae-01dc688232ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a0:47:da:9e:0d:12:02:81:c6:ea:86:db:38:
                    02:1a:be:bb:45:62:f2:c9:42:2d:a4:06:44:96:06:
                    6b:09:c6:f6:8a:e7:7e:73:45:2f:4d:aa:31:02:cd:
                    5c:7c:52:05:6c:15:54:91:ab:dd:c5:24:d9:5a:f2:
                    12:0b:f6:e5:17:1a:d7:ac:a9:7d:ee:e6:29:74:41:
                    52:06:56:fb:69:8d:9f:a3:3b:32:38:e9:1c:88:c7:
                    20:e8:75:30:d8:90:66:71:59:d6:0c:e4:92:ca:b4:
                    42:7f:44:af:a3:94:bf:cd:a9:6e:de:b2:4a:bd:5e:
                    d6:ee:68:66:fb:b1:2b:99:21:71:ee:c4:03:76:5c:
                    3c:95:d1:1b:27:36:a2:ad:69:ba:b7:12:f3:ff:5a:
                    10:9e:04:4f:d5:16:2e:59:d7:82:a7:a1:bb:00:3f:
                    d4:c2:58:6e:3d:d6:45:98:18:70:f2:2e:bc:41:39:
                    af:16:9d:a7:c1:c6:74:27:7c:12:7c:91:cf:36:93:
                    21:01:59:38:4e:f0:f1:cc:d2:92:c1:86:18:97:c2:
                    b2:bc:c8:88:e2:1f:64:a0:d2:e0:b2:70:19:a9:c9:
                    c0:d0:a9:61:96:b4:04:98:9a:34:4d:e8:24:fd:a3:
                    6d:b3:e6:a3:e4:13:8f:f5:1c:c9:ad:bd:2c:07:73:
                    c0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D0:04:3E:F2:DD:40:5F:C7:18:18:5C:F1:63:22:85:20:FB:F3:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fdd68490-8929-3005-8f2d-0787166b0121.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.2.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:81:9c:15:42:1b:2d:e9:96:3c:ad:f2:f6:50:b7:4b:a2:3b:
         6b:12:b1:6d:6c:59:a4:d3:f5:4b:52:d2:c2:f7:0e:a9:1b:c1:
         87:a2:ec:7d:c5:12:8e:a9:29:a9:28:52:fb:58:00:c7:ec:46:
         53:9d:09:42:d0:ef:2c:be:40:df:43:84:4f:23:67:2a:e4:bd:
         d2:57:d1:23:bc:18:5e:d7:9d:59:ed:ed:b5:4a:cd:c7:38:0b:
         76:9f:54:56:44:09:41:82:ca:71:f0:b4:f5:61:ac:85:6d:16:
         94:5d:41:09:73:ed:e7:ce:c4:92:dd:f0:47:d5:26:e2:d9:4d:
         dc:ad:b9:5e:67:f5:ee:65:d7:08:e9:c4:55:e2:d4:c3:7b:7b:
         f0:db:a0:dd:44:4f:89:1a:b9:4c:b4:4d:ff:7c:fc:b9:ec:6a:
         e3:9d:b7:34:af:d4:34:ed:ea:2f:b6:14:df:eb:79:c0:f4:8d:
         61:68:b5:0d:e8:54:4b:24:4f:60:2d:ce:8c:ea:25:ca:fb:2b:
         f9:d1:04:be:7b:ee:63:e7:21:ac:ce:c2:d3:36:13:38:d7:f2:
         22:2e:99:45:b4:de:65:76:22:0c:2f:d6:1d:8e:70:89:ae:c8:
         9c:fc:0f:26:42:50:55:86:dd:98:a7:c5:6d:d6:db:07:43:1f:
         da:a4:3f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:33:23 2026 by rpki-client