Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c88967c9-c0d5-3fd0-8264-6a4c3912b3b6.roa
File:                     c88967c9-c0d5-3fd0-8264-6a4c3912b3b6.roa (raw, json)
Hash identifier:          E70cCXoysnBOJeP0/aX71Jp3uLZbKP0W6hWpm+a+PIc=
Subject key identifier:   53:A6:A8:52:76:D5:27:51:DB:32:DD:C5:2B:67:F4:E2:71:A2:A5:EC
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D624A60E5A1DD5D8392530DD8
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c88967c9-c0d5-3fd0-8264-6a4c3912b3b6.roa
Signing time:             Fri 03 Apr 2026 13:00:30 +0000
ROA not before:           Fri 03 Apr 2026 13:00:30 +0000
ROA not after:            Thu 02 Jul 2026 13:00:30 +0000
asID:                     5650
IP address blocks:        74.2.218.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:4a:60:e5:a1:dd:5d:83:92:53:0d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr  3 13:00:30 2026 GMT
            Not After : Jul  2 13:00:30 2026 GMT
        Subject: CN=a419d0b2-b0a9-457b-8cfc-55780ae300a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4d:0d:85:29:24:9b:a5:eb:8e:d4:ba:58:b6:
                    c5:6e:0f:27:74:75:bf:56:bd:2f:f5:4c:a5:ad:ee:
                    48:4e:2d:90:78:51:cb:aa:4d:1a:1b:06:07:f4:00:
                    2d:38:28:4f:89:0e:a7:d2:3e:f1:13:7e:56:8d:0d:
                    ab:37:c5:77:23:dc:51:46:d5:4d:a5:09:cd:48:e0:
                    fe:b3:d8:a3:94:b6:c7:c4:69:2f:18:25:d9:ab:30:
                    27:03:46:8f:0d:87:e4:7c:91:52:40:57:96:0c:92:
                    27:0d:aa:07:41:27:9c:ed:3c:32:06:50:1c:82:93:
                    74:8d:ad:7c:64:e9:41:81:10:35:29:30:39:d8:f5:
                    f1:c1:c2:93:1e:af:2c:8d:da:61:43:c2:9f:78:7a:
                    5b:b4:24:81:dc:74:10:ff:a2:de:a2:e2:ac:12:07:
                    5d:d5:9a:54:ea:ec:33:7c:03:74:4e:34:02:e4:11:
                    f1:67:56:35:f3:7e:26:f5:50:31:a4:bd:84:5e:a6:
                    29:9f:c9:0f:b0:bb:60:6b:31:6b:3d:78:37:32:4d:
                    5e:61:d4:1b:1d:5f:b7:e7:d5:c0:d5:7c:20:55:00:
                    47:af:84:1c:8f:b9:7d:99:76:26:11:7e:c9:b6:cb:
                    66:03:a6:da:9f:34:59:62:11:4f:05:90:00:17:43:
                    b9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A6:A8:52:76:D5:27:51:DB:32:DD:C5:2B:67:F4:E2:71:A2:A5:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c88967c9-c0d5-3fd0-8264-6a4c3912b3b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.2.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:89:67:a5:f8:e4:ec:bc:7f:eb:d4:7d:6a:a1:8b:79:30:a9:
         d8:24:c7:db:fb:fa:07:f6:9c:41:0c:9b:ee:b6:bc:77:09:3b:
         94:8c:98:2d:81:5a:92:a5:41:27:82:d7:21:94:36:27:b2:28:
         27:65:89:ab:e6:c6:76:be:61:0a:1d:1b:e9:ad:d8:8e:82:dd:
         09:fe:96:51:38:10:7f:a2:11:fe:57:0c:9b:0a:2a:4d:0f:22:
         3d:36:05:34:4c:ed:0b:c1:b7:91:a4:71:eb:9c:de:0a:88:1e:
         c8:f1:ea:42:15:35:3c:20:e3:2a:4c:a8:3e:9a:04:5b:b6:2a:
         fc:07:97:e7:d3:b6:00:2f:bc:a1:83:97:dc:65:3a:21:3c:01:
         fd:c8:ed:16:2e:e7:20:66:2b:65:36:e1:a3:1c:88:c6:c6:14:
         10:c5:2f:88:4f:85:31:32:88:e6:ed:9e:4f:df:17:0a:f8:86:
         21:1c:78:6e:5d:a9:c7:7a:7b:1b:a8:d7:9d:9b:33:62:56:24:
         a9:03:1e:18:05:30:2f:55:02:77:2d:61:e2:7a:2d:76:c0:da:
         85:6e:ab:c6:82:ea:e1:83:62:4e:03:92:88:ab:38:d5:96:42:
         6a:86:62:2a:a0:7b:f9:41:23:0b:01:91:f5:e5:6c:c1:9c:fe:
         b0:7d:7e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:44:50 2026 by rpki-client