Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4fabe6b6-4c96-3fd3-8258-98eecd3c18dc.roa
File:                     4fabe6b6-4c96-3fd3-8258-98eecd3c18dc.roa (raw, json)
Hash identifier:          hd61R0IX/RYUXamNIhEn9zFAgtUEY3UH2rCJnMWT80E=
Subject key identifier:   12:80:F2:97:5A:CD:A0:B3:B6:48:C5:79:16:66:78:2A:9A:87:81:E2
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CF2BCD40557B4DCBAFA8DEC00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4fabe6b6-4c96-3fd3-8258-98eecd3c18dc.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     32693
IP address blocks:        74.1.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bc:d4:05:57:b4:dc:ba:fa:8d:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=2263cb16-35e3-44d2-89c4-d1cc364247c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6b:85:61:13:54:de:e5:e0:c7:8a:db:97:97:
                    98:34:ee:6f:81:6c:f3:be:b2:71:30:6a:80:bc:d9:
                    ed:bd:ff:70:70:cf:da:a3:96:b3:d6:0f:c2:0a:87:
                    a9:b2:97:96:ef:01:45:a7:ef:c9:9d:b0:b4:4d:f5:
                    a3:9e:23:98:02:eb:0a:3c:36:f3:b4:1b:68:f8:f2:
                    81:fc:45:62:cb:95:5a:09:08:27:f7:80:a1:9d:b9:
                    43:82:07:77:57:22:9a:49:71:2c:27:20:a4:ae:1f:
                    a0:9b:d3:3d:1b:04:af:72:2b:f0:17:4a:43:7e:cc:
                    40:92:44:21:e5:3d:a9:72:48:9b:71:28:a6:6c:08:
                    b7:d1:d0:65:b0:f4:cc:0c:3d:f2:88:a0:a6:5a:70:
                    e3:cd:8a:63:c9:3c:eb:86:78:4d:6e:55:60:7d:3e:
                    e7:41:96:d7:f9:de:34:80:47:bd:cc:cd:77:d7:66:
                    c2:9e:e7:e9:c4:4e:2d:d7:f6:46:6e:8a:e5:5b:7d:
                    23:38:a4:06:99:a9:ab:b1:d4:b7:77:48:d4:bb:1e:
                    34:f9:49:5a:17:6b:5f:a1:15:58:09:86:c7:73:81:
                    e6:c7:7a:f1:a6:42:85:8b:13:a9:74:1a:59:f9:02:
                    66:4c:8e:db:54:3d:5f:d9:b5:e9:ec:87:e4:38:0b:
                    21:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:80:F2:97:5A:CD:A0:B3:B6:48:C5:79:16:66:78:2A:9A:87:81:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4fabe6b6-4c96-3fd3-8258-98eecd3c18dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:af:df:2a:57:83:e1:96:4d:f8:db:91:f7:58:91:8d:d1:00:
         73:a2:93:6d:ec:3e:54:1b:b6:8f:25:97:90:91:ee:9f:d7:07:
         a8:a8:1a:9c:d8:52:d4:68:03:2f:05:bc:af:6f:78:9f:ff:28:
         5a:5f:97:0a:e9:d9:ff:62:2f:e9:e1:2d:d3:51:38:b9:ce:1b:
         1e:44:82:c6:71:dc:5e:5c:9a:55:f7:c3:b7:ed:c2:02:b2:2c:
         89:da:33:40:b7:99:cc:04:80:72:f3:b2:8c:bc:50:67:f1:63:
         43:7d:74:d5:6f:0c:de:69:8f:f3:0e:54:ef:3f:e6:99:48:5b:
         a7:5c:b4:bf:76:ce:ff:79:59:d9:3c:a2:61:02:63:d6:7a:a3:
         82:96:86:1a:0e:a5:b0:37:a2:22:7d:20:35:96:47:05:c2:49:
         ba:47:67:d5:0b:bf:4f:6e:5d:d6:8c:d4:fd:6d:d1:73:ad:1f:
         f1:f2:0d:f0:e1:f8:ff:de:f8:05:e5:d8:80:28:cd:9c:86:02:
         a5:d3:f0:84:5f:9a:a4:29:e6:6b:ce:08:22:1d:0b:4a:c7:82:
         6c:ea:49:e5:7b:c3:99:01:ff:96:ec:ff:8b:f7:b6:f9:ae:2e:
         3e:f4:a3:f6:b1:20:02:34:38:19:9c:a9:c0:86:72:61:f8:5f:
         76:eb:ca:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:25:14 2026 by rpki-client