Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f2b0e8fa-5ddd-3d2a-84bf-4eb27f0b59a8.roa
File:                     f2b0e8fa-5ddd-3d2a-84bf-4eb27f0b59a8.roa (raw, json)
Hash identifier:          kmUgvrbT4irZUXpsAE1OvVt+1ErwRHWW0+X+YegepxU=
Subject key identifier:   94:8A:25:ED:CE:B4:E4:09:D9:2E:E6:84:E1:A9:CA:4F:FA:B4:91:FF
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EFB4765507D54F181F023E040
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f2b0e8fa-5ddd-3d2a-84bf-4eb27f0b59a8.roa
Signing time:             Fri 28 Aug 2026 01:00:12 +0000
ROA not before:           Fri 28 Aug 2026 01:00:12 +0000
ROA not after:            Thu 26 Nov 2026 02:00:12 +0000
asID:                     137830
IP address blocks:        74.2.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fb:47:65:50:7d:54:f1:81:f0:23:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 28 01:00:12 2026 GMT
            Not After : Nov 26 02:00:12 2026 GMT
        Subject: CN=d51cd0a6-b638-4c9f-aca0-5535657b84c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:21:59:39:e4:b0:15:21:5d:b4:37:14:7c:f0:
                    1f:69:1a:16:cb:4e:50:bc:3c:4c:52:50:15:de:a3:
                    1b:b5:ff:57:a9:b0:89:47:49:eb:5b:71:fe:c5:af:
                    40:8a:82:36:76:16:51:0c:bd:cc:4d:c6:9d:12:19:
                    9d:f3:49:bc:a0:93:78:55:81:26:2b:cc:24:a0:a9:
                    c8:f0:6f:d3:32:15:e0:ec:5a:83:de:f3:b8:97:26:
                    e1:85:c4:92:ee:e7:bf:6a:c5:84:71:30:7a:69:2b:
                    59:60:f8:d9:68:fa:d3:67:7f:77:1a:90:d5:7a:3c:
                    f5:c0:1e:36:17:6c:3a:f3:6c:a4:b0:0a:6e:bb:f3:
                    93:b7:4a:b7:2c:46:dd:32:60:48:84:49:92:60:a7:
                    51:8f:9a:12:1f:2f:fc:d1:de:f5:58:0a:87:e1:dc:
                    eb:25:06:df:e4:d1:b5:34:25:5a:50:05:30:f7:bb:
                    df:67:4f:8d:bf:08:c4:3a:8b:a5:79:4c:ec:89:dc:
                    ac:9f:4e:77:e8:76:f9:a0:48:11:ed:27:81:6e:57:
                    30:44:4b:7d:db:6e:6f:47:18:64:6b:bb:0a:97:97:
                    19:d1:a8:ae:ee:83:28:0f:68:ee:9b:42:ab:3f:fc:
                    dc:ad:fc:e2:df:1e:ff:fc:77:a7:54:a0:ce:5e:89:
                    e3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8A:25:ED:CE:B4:E4:09:D9:2E:E6:84:E1:A9:CA:4F:FA:B4:91:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f2b0e8fa-5ddd-3d2a-84bf-4eb27f0b59a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.2.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:3d:76:dd:27:b5:bf:c5:13:69:e6:81:cd:67:8b:89:14:f3:
         8b:3d:b9:1e:59:00:57:9c:f1:cf:df:23:3a:12:fd:58:3d:f5:
         05:ce:c5:c1:c6:90:05:51:f4:87:dd:fc:79:5a:e8:51:19:a9:
         68:72:8b:f8:40:da:c8:24:17:10:86:62:3a:f3:e1:48:06:c1:
         a5:74:e8:27:80:c6:f1:5e:85:c0:29:fd:5e:54:39:4e:aa:19:
         6a:b3:d2:dd:fc:a9:40:96:f3:34:7b:0a:69:48:ef:3e:3a:19:
         8f:0b:5e:7e:9b:ba:f9:b4:49:fd:0f:3f:18:41:48:09:52:b0:
         87:18:fa:ec:7b:1b:57:d2:d8:27:df:f4:c2:b0:d9:d4:d4:d6:
         90:62:32:26:18:71:09:aa:4c:db:f7:c5:05:01:ab:be:27:a1:
         2d:2f:a5:21:10:e4:d6:be:ae:9a:5c:c2:3f:f3:e6:c0:05:14:
         6b:34:56:b1:f0:92:1e:2f:ca:ed:57:7b:bd:70:6c:fe:dd:66:
         cc:b1:aa:46:91:30:e2:35:21:79:07:57:a2:9d:49:5f:60:7a:
         59:dd:f3:e5:51:10:8f:04:39:8b:1e:96:7a:b1:ec:7b:1f:a5:
         60:6f:f9:8b:4e:14:27:78:98:91:26:d9:d6:33:07:53:e2:1f:
         dd:70:2d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:06:36 2026 by rpki-client