Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/beff196d-154a-3caa-9c66-d302cb8c90d6.roa
File:                     beff196d-154a-3caa-9c66-d302cb8c90d6.roa (raw, json)
Hash identifier:          swlNCPwh/97yR6RJ5zs/4567Dx8AGKRelN46c6hm/Ew=
Subject key identifier:   77:04:53:A7:62:A8:07:2D:34:A9:B0:55:14:CC:1F:B5:0B:85:9C:0C
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CFCC0C8C1D914FCC8F1A9BA00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/beff196d-154a-3caa-9c66-d302cb8c90d6.roa
Signing time:             Thu 26 Feb 2026 04:06:47 +0000
ROA not before:           Thu 26 Feb 2026 04:06:47 +0000
ROA not after:            Wed 27 May 2026 03:06:47 +0000
asID:                     13737
IP address blocks:        74.1.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fc:c0:c8:c1:d9:14:fc:c8:f1:a9:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb 26 04:06:47 2026 GMT
            Not After : May 27 03:06:47 2026 GMT
        Subject: CN=3f861ed0-5af2-4fd9-bf23-f35e6e282314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ba:ae:b8:74:9f:e2:22:f0:75:5c:bb:8e:31:
                    04:f1:a3:10:66:66:2d:9c:ef:75:47:63:63:b5:1a:
                    f6:f2:7e:a0:3e:0e:8c:5d:2a:7d:46:ba:bc:d7:28:
                    71:27:46:de:8a:50:71:03:8d:86:4e:bc:8c:ab:40:
                    d9:4e:18:e5:2b:54:06:c9:c0:49:1d:d4:89:f2:18:
                    21:3d:9b:d9:fc:c4:4a:85:9a:08:85:ca:93:3f:3d:
                    8c:ad:4b:1e:90:15:f6:91:4b:ad:a2:f0:3d:a2:40:
                    78:de:1e:83:6a:3c:37:a4:b7:aa:72:cf:5a:6b:78:
                    08:a1:db:65:15:2d:4f:00:91:91:64:2d:a9:d2:d5:
                    d1:d9:b3:16:fd:02:fb:db:0e:ba:e0:16:ac:ef:e9:
                    98:f1:08:f2:ae:f0:cc:e9:27:ac:e4:07:d8:07:65:
                    88:ab:f2:38:ee:f4:1a:74:a3:d3:99:3a:73:3f:4b:
                    b7:3f:58:da:e6:4a:fe:fc:30:60:87:eb:70:42:7c:
                    d6:97:20:18:5d:46:6c:9d:68:e5:82:fa:a6:0a:94:
                    ab:f7:77:e8:e3:6a:38:64:a1:21:2e:44:ea:15:b6:
                    13:98:8a:a4:d4:2f:c8:f5:d5:91:d7:a9:d0:c7:c2:
                    9a:0f:76:e2:ee:7f:2d:1e:9d:21:1a:c0:be:6c:6e:
                    3f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:04:53:A7:62:A8:07:2D:34:A9:B0:55:14:CC:1F:B5:0B:85:9C:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/beff196d-154a-3caa-9c66-d302cb8c90d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:04:60:26:81:f2:fa:58:28:90:a1:02:55:20:a8:e0:b5:7b:
         88:55:76:03:01:cc:0c:bd:2d:d7:a4:dd:c0:20:dc:53:79:46:
         0f:9d:94:fc:1a:00:a6:4a:bf:b1:34:31:9f:5e:92:6b:ba:be:
         1a:35:8a:9e:ae:43:d1:bd:bc:3e:3c:d3:c8:af:3a:9d:44:5f:
         ea:7a:30:35:bf:7e:1a:cf:3f:9d:f6:6c:c5:46:67:09:c7:3a:
         ed:98:9a:b0:d9:83:51:a6:ff:e3:ba:36:21:67:e5:92:02:55:
         c5:fd:d3:81:2a:88:b4:74:67:d4:0f:ff:35:49:52:0d:75:b9:
         66:58:72:60:88:eb:78:de:3a:60:87:53:6f:06:a7:be:3b:84:
         57:8b:92:b7:d4:10:0b:72:e4:0c:25:09:e0:3d:f6:21:f9:a3:
         b6:f2:7e:27:d8:c8:d5:c8:41:f6:4f:c1:b9:0c:25:e6:29:73:
         19:1b:55:7c:cc:c9:7f:20:74:7e:d2:7d:cf:83:dd:3e:85:2c:
         ce:ad:83:dd:40:57:72:e7:af:92:31:87:5c:81:24:30:e1:0d:
         08:5d:14:e9:88:23:ab:a8:b2:bf:62:d2:e7:f5:de:10:4c:c0:
         89:2f:51:56:b5:0d:cb:85:fa:3e:a3:cc:ba:72:60:19:fb:f3:
         f0:0b:a1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:44:09 2026 by rpki-client