Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/253f8147-f173-3ab4-9a3f-f7ee0a26dff5.roa
File:                     253f8147-f173-3ab4-9a3f-f7ee0a26dff5.roa (raw, json)
Hash identifier:          lLcWpOetswzSAy8QMhzAfy4gAJwgnWhjzJmfly/AQO0=
Subject key identifier:   87:38:26:DD:69:A2:BF:E0:DE:26:D3:BF:AC:CA:2A:F7:B8:1C:D6:5C
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F81483C3B2167BBCC47EBA800
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/253f8147-f173-3ab4-9a3f-f7ee0a26dff5.roa
Signing time:             Thu 15 Oct 2026 01:00:12 +0000
ROA not before:           Thu 15 Oct 2026 01:00:12 +0000
ROA not after:            Wed 13 Jan 2027 02:00:12 +0000
asID:                     834
IP address blocks:        74.1.220.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:81:48:3c:3b:21:67:bb:cc:47:eb:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 15 01:00:12 2026 GMT
            Not After : Jan 13 02:00:12 2027 GMT
        Subject: CN=38be5c9a-748d-49ad-8d07-3f489982383f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ab:c4:9d:81:28:21:c8:23:66:a5:3f:e9:2a:
                    3b:9e:17:7c:4a:91:6d:e1:1e:9c:e6:45:57:dc:bf:
                    10:98:6a:1f:91:4d:cb:c7:7b:0d:c7:8a:78:09:d1:
                    c5:ae:b7:35:cb:e8:96:32:bc:c0:16:cf:63:cb:01:
                    c6:28:d9:25:f4:ca:5f:de:b8:23:48:02:78:48:05:
                    71:34:66:86:7d:a5:33:94:2b:f8:ac:2e:c2:c0:25:
                    86:54:4f:e8:80:3a:03:8b:e3:21:b9:fa:49:20:85:
                    8f:2f:ec:66:b6:f7:5b:1e:3c:7b:b5:2a:0f:d5:83:
                    46:6a:09:db:8b:7a:c5:5b:58:e1:c3:05:1e:ba:30:
                    32:cb:ae:9d:ea:0b:8e:85:eb:4c:a1:77:72:ff:46:
                    e7:b1:77:73:80:3c:2f:c1:49:5e:e4:b7:db:cb:ae:
                    62:69:3d:6f:c3:4d:e1:c6:09:66:54:d3:d3:15:8c:
                    f9:2d:53:66:e2:d5:fc:91:f4:a2:f3:79:de:1b:3c:
                    7f:10:ca:43:10:0f:94:a6:17:71:9e:92:39:4d:d5:
                    ad:a1:b8:48:88:94:fc:b3:12:73:07:2e:cf:2b:8c:
                    df:f7:47:69:ee:49:18:8b:1b:42:c8:28:ec:4d:77:
                    66:f8:f3:6f:25:f8:fe:db:d3:af:ee:8a:ea:e2:d6:
                    4e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:38:26:DD:69:A2:BF:E0:DE:26:D3:BF:AC:CA:2A:F7:B8:1C:D6:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/253f8147-f173-3ab4-9a3f-f7ee0a26dff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:5d:80:bc:1a:e4:69:38:bb:eb:6c:4f:9c:4b:15:81:2b:23:
         cc:fe:93:28:20:5f:1c:e8:73:61:89:84:88:cf:b4:12:99:eb:
         0b:71:8b:f2:a8:04:0a:8a:11:35:a3:da:78:64:18:f3:c0:20:
         f1:fb:d1:8d:59:b8:3b:cf:75:14:65:c2:37:23:8c:99:8b:22:
         1c:9a:6c:de:5b:e9:cd:23:20:5b:15:0f:12:bd:c6:01:c0:ee:
         5f:fb:d8:e7:8b:55:8e:f2:dd:4b:57:66:19:c2:dd:f2:39:d4:
         b4:19:0f:1e:65:3e:14:0a:d1:4d:8c:08:d3:14:f2:1e:94:97:
         96:18:b0:09:37:30:95:0e:55:7e:41:46:3d:a5:a6:e3:8d:e5:
         a4:82:d7:99:8f:bd:28:39:61:23:f2:ef:a3:bf:d2:5d:92:84:
         99:38:e0:f8:48:83:80:dc:fb:1a:10:33:69:51:ed:36:03:5d:
         7f:e0:92:5b:c5:9e:4a:3b:a3:13:97:92:34:01:0f:ec:59:f9:
         f0:96:c5:26:22:4b:24:8b:f6:be:22:0f:22:c6:68:05:32:1f:
         93:5a:9b:a4:23:2f:b1:32:ad:a6:c1:54:30:c2:4d:9f:7d:36:
         06:73:8a:49:a3:e4:0a:34:ca:2f:3f:78:6a:c4:8f:db:72:63:
         91:4e:bf:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:30:16 2026 by rpki-client