Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d7abf034-2dc0-3c85-94a4-f7992604b832.roa
File:                     d7abf034-2dc0-3c85-94a4-f7992604b832.roa (raw, json)
Hash identifier:          H3MpNfvL+O+a0fgETqhzc5cusCoZbbuLsjSZwZAInlI=
Subject key identifier:   9A:EC:D8:C4:D2:CD:F9:0D:65:2D:BE:4C:3D:6A:1A:95:5C:FB:15:78
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CB6B710F61FF9090A366CA844
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d7abf034-2dc0-3c85-94a4-f7992604b832.roa
Signing time:             Sun 01 Feb 2026 02:00:32 +0000
ROA not before:           Sun 01 Feb 2026 02:00:32 +0000
ROA not after:            Sat 02 May 2026 01:00:32 +0000
asID:                     266400
IP address blocks:        74.1.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b6:b7:10:f6:1f:f9:09:0a:36:6c:a8:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb  1 02:00:32 2026 GMT
            Not After : May  2 01:00:32 2026 GMT
        Subject: CN=43bdfecf-0fe8-4b74-b256-b96792ead6bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ff:58:cb:f4:0c:35:d3:7d:ab:68:f7:29:98:
                    30:de:a6:03:83:27:c9:79:41:50:69:8e:bb:0d:28:
                    88:f2:b2:18:67:db:6b:df:bb:69:ef:7a:96:0b:96:
                    74:96:48:6a:44:84:a8:94:a2:5a:7f:55:34:87:37:
                    a2:d3:53:1e:b6:5c:76:56:7b:6d:6b:67:fc:74:ff:
                    ca:ac:df:29:06:19:f5:64:4d:72:ed:d1:a6:a6:c5:
                    2e:83:15:3a:14:81:35:28:a8:c1:f0:23:1b:e7:86:
                    c5:da:7f:bc:27:db:05:9d:dc:ce:59:af:47:da:d1:
                    dc:79:e8:5a:15:64:40:9e:64:73:59:e9:36:5b:2c:
                    c3:de:a2:5f:e3:d4:2d:3e:c4:33:69:68:c6:07:75:
                    10:00:8c:6a:e1:f0:ae:ba:fe:11:0a:ae:59:f6:1c:
                    37:ed:06:58:29:1f:bb:8a:c6:47:20:a4:c3:dd:8d:
                    f3:37:ce:a6:a1:cd:ee:8a:e6:36:13:86:4a:da:ca:
                    73:83:0c:de:83:69:3a:b2:e9:fe:fd:a1:87:55:15:
                    5e:43:15:e1:df:58:d7:d8:f4:35:18:d9:75:88:d0:
                    32:3d:82:ca:d5:f7:90:fe:72:86:69:cc:0f:ed:c8:
                    48:55:9d:76:88:fe:e0:48:28:95:98:6a:7e:85:95:
                    6a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EC:D8:C4:D2:CD:F9:0D:65:2D:BE:4C:3D:6A:1A:95:5C:FB:15:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d7abf034-2dc0-3c85-94a4-f7992604b832.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ec:c4:3a:7e:85:9b:26:ee:fe:6c:6e:66:3d:c8:e9:6e:16:
         61:60:c5:b5:8c:b3:79:58:f5:24:99:00:c4:90:08:dd:64:ce:
         a5:2a:5c:88:a1:f0:42:34:1d:1e:fd:b6:34:fd:b1:79:bd:17:
         76:2c:18:d9:d3:f7:3c:37:31:d2:10:5c:b9:b1:8d:6c:3d:04:
         d4:1b:d2:46:8f:40:e9:de:c3:ce:94:23:e0:71:76:fe:d0:5f:
         44:76:59:0a:78:30:64:25:a7:43:ae:1c:7b:03:42:c7:ff:89:
         40:37:9f:21:bb:89:68:73:0f:4d:51:ae:07:b1:ef:cd:be:a2:
         71:6f:e9:af:5d:6a:7c:a2:11:6d:46:4e:61:01:35:da:dd:4b:
         2f:4a:60:9a:ca:3e:81:16:7e:49:ea:3c:0a:62:58:e7:aa:b4:
         ec:0a:54:fc:49:f5:ad:aa:49:80:a9:41:65:81:4e:e6:4d:f8:
         7c:ca:aa:d1:01:41:98:78:10:73:04:c6:34:24:a3:cc:6a:78:
         04:80:08:33:18:b2:fd:b4:ec:96:f3:b9:5b:91:21:05:2d:40:
         67:24:b4:e0:e5:8e:bd:91:d4:10:6e:1f:af:3f:f4:01:7a:aa:
         95:90:e0:ed:84:60:cc:34:7d:3d:4c:c2:1d:76:70:69:4d:91:
         fb:46:9a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:48:07 2026 by rpki-client