Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/98570182-c146-3b72-9bbd-05e7c6b0bada.roa
File:                     98570182-c146-3b72-9bbd-05e7c6b0bada.roa (raw, json)
Hash identifier:          9J4CTFDb55Bw+2pi0VslIbCFRVmBtsBcS1LEuzn855s=
Subject key identifier:   80:4B:61:37:07:35:DD:C4:93:72:0B:2F:B8:D2:7A:F5:4C:9C:4D:01
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B970365C85880E055C7DF59C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/98570182-c146-3b72-9bbd-05e7c6b0bada.roa
Signing time:             Tue 21 Oct 2025 00:41:36 +0000
ROA not before:           Tue 21 Oct 2025 00:41:36 +0000
ROA not after:            Mon 19 Jan 2026 01:41:36 +0000
asID:                     174
IP address blocks:        74.1.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:03:65:c8:58:80:e0:55:c7:df:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 21 00:41:36 2025 GMT
            Not After : Jan 19 01:41:36 2026 GMT
        Subject: CN=62704958-20ff-4fc0-aecc-02c27e5d22a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ec:77:9e:02:94:6a:da:7a:1b:21:7f:1b:57:
                    3d:80:93:e4:5e:01:77:9b:eb:6f:e6:c7:ad:54:44:
                    2d:38:cb:56:db:83:41:dc:a1:d2:3d:32:77:2e:6f:
                    51:98:30:63:ad:87:0d:0c:76:6c:42:fa:89:66:0a:
                    14:95:0f:17:e4:ec:d9:38:93:30:1a:78:45:7a:52:
                    93:34:70:c2:85:1a:fb:06:c7:06:7c:28:c6:d1:83:
                    53:a6:9e:99:a5:8d:8f:67:1c:91:6e:2f:58:93:10:
                    29:c8:11:59:68:a5:2d:e7:95:d7:23:0e:eb:41:52:
                    e3:39:7c:55:5c:bd:46:14:b2:ec:35:40:19:58:ba:
                    12:69:a0:71:7f:4d:b5:b7:97:3f:ed:f6:58:f8:7f:
                    2d:11:7f:7c:eb:86:3f:20:87:51:b7:b8:fe:94:b3:
                    a3:3d:f5:d5:67:3e:94:74:00:84:f1:35:0e:9b:2f:
                    65:c8:dd:c2:c5:1c:3c:19:08:e9:1a:07:60:d7:9a:
                    d5:97:e6:cd:da:13:04:a7:4b:54:d1:2e:cf:20:01:
                    d4:b6:61:c6:ee:ed:7b:4b:71:55:52:28:1f:d8:68:
                    e7:d6:25:11:c0:67:2d:fd:87:4e:39:cd:90:ca:40:
                    db:3b:a2:60:38:77:e0:21:cf:fe:fd:18:fd:fc:69:
                    b7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4B:61:37:07:35:DD:C4:93:72:0B:2F:B8:D2:7A:F5:4C:9C:4D:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/98570182-c146-3b72-9bbd-05e7c6b0bada.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:0b:72:43:7f:73:c2:8a:ea:98:3b:0c:f7:61:af:f9:9a:5a:
         12:21:63:78:b6:d4:8c:79:17:e9:56:42:3b:96:5e:71:11:fa:
         0e:26:0c:e1:a0:c7:55:b0:63:2a:36:05:76:ea:43:f1:f6:45:
         bc:f1:6a:cb:cd:7a:42:fa:6f:cb:c4:56:6d:6e:b4:0c:20:bf:
         3d:ab:41:cf:bd:02:6d:11:dc:80:43:b9:52:b9:2c:82:4b:b4:
         88:a3:e7:74:35:19:03:3e:f7:7e:0e:c1:22:e2:0e:c6:db:2f:
         15:cf:24:86:75:60:ba:b6:42:06:f9:e6:00:3b:e6:96:13:a2:
         b7:f2:10:75:a4:48:db:80:a8:6d:3f:3f:c9:39:83:c9:2c:7d:
         0c:0b:6c:b2:01:a3:30:a9:fb:30:54:2d:13:63:10:c1:ab:57:
         af:db:f0:33:a8:ee:d7:0c:06:8d:25:8d:bc:5c:e7:8b:84:50:
         1a:c1:bc:33:b2:a0:75:f3:a2:20:6a:41:ca:50:42:9c:d4:dc:
         92:42:de:47:68:b3:c1:12:a2:97:3a:0d:d2:27:12:d0:3c:0c:
         4d:e9:26:e4:cc:63:00:aa:49:b0:0f:27:8d:a5:89:bc:d3:93:
         4b:64:b9:5f:d5:2e:50:20:e9:5f:bc:58:72:74:fe:44:d8:2e:
         dd:dc:0e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:23:55 2025 by rpki-client