Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/848dd6de-3510-3f76-a679-a6f8f8aca2de.roa
File:                     848dd6de-3510-3f76-a679-a6f8f8aca2de.roa (raw, json)
Hash identifier:          9kGelrtE7nFfhQDin1IqdHVGrAklVUZAUkrepJ8hrzQ=
Subject key identifier:   C6:0C:DA:28:39:B7:19:26:D6:BF:91:5C:0F:53:D7:7A:3D:15:0B:28
Certificate issuer:       /CN=08c424ab-20c3-4a52-bba2-1ccddeee2e34
Certificate serial:       010D0C9F4328584DBD059098E2B23BA51B877B60
Authority key identifier: 0C:CA:C2:AC:1B:F8:B7:04:E6:D2:85:37:B7:55:32:4B:E7:DC:E8:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/848dd6de-3510-3f76-a679-a6f8f8aca2de.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        74.80.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/08c424ab-20c3-4a52-bba2-1ccddeee2e34.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/08c424ab-20c3-4a52-bba2-1ccddeee2e34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:90:98:e2:b2:3b:a5:1b:87:7b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08c424ab-20c3-4a52-bba2-1ccddeee2e34
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=20841e58-78ec-4c3a-810c-a476548223c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:51:d7:27:b6:0b:17:4c:9e:e1:c2:be:4e:14:
                    00:a3:92:e6:64:47:e4:54:e1:73:bd:1b:09:83:f7:
                    cb:e8:a0:59:14:52:ef:59:79:14:cc:8a:13:4c:83:
                    7b:bf:53:04:17:08:78:69:17:05:7d:4c:19:b3:84:
                    31:26:12:2e:0e:c5:50:8f:8c:4f:9e:d2:fe:48:45:
                    6a:36:6d:cd:51:91:92:e5:e1:dd:bf:81:88:f1:4c:
                    a4:c2:ed:1d:a6:d0:1e:aa:6e:74:10:a0:02:8b:d9:
                    69:63:67:50:3e:c3:ad:cf:07:25:f6:61:34:84:cd:
                    02:9e:e0:0e:30:f0:31:7a:df:ff:40:f3:db:03:75:
                    17:8d:a6:ae:d1:5b:c5:8b:47:47:e1:ea:e0:6e:21:
                    18:fd:98:c1:cb:ca:6a:0e:d6:1a:e1:90:95:0d:d3:
                    b9:fb:ff:49:58:f9:5e:c0:17:6a:ba:f2:f4:49:77:
                    8e:e3:a7:f7:27:18:2a:8d:07:d4:02:be:f6:99:d1:
                    6c:fc:c9:aa:94:8d:55:31:35:63:32:7c:c5:8f:c5:
                    e0:dd:74:97:94:b2:8a:04:34:95:97:ee:d9:3a:7d:
                    d0:df:22:4c:d0:39:b1:99:47:fc:93:b7:d8:7b:1d:
                    5e:6b:85:96:6e:d8:bc:3e:1c:e5:51:2f:bb:02:97:
                    b0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0C:DA:28:39:B7:19:26:D6:BF:91:5C:0F:53:D7:7A:3D:15:0B:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/848dd6de-3510-3f76-a679-a6f8f8aca2de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/08c424ab-20c3-4a52-bba2-1ccddeee2e34.crl

            X509v3 Authority Key Identifier:
                keyid:0C:CA:C2:AC:1B:F8:B7:04:E6:D2:85:37:B7:55:32:4B:E7:DC:E8:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:3a:cf:1d:60:bf:63:5f:99:d2:01:57:5c:7a:02:97:a9:9c:
         16:a7:20:cd:93:b9:c4:fa:82:52:87:b0:31:e9:78:47:e3:61:
         33:6a:70:12:e1:d5:97:bc:01:ee:1f:fa:83:99:a5:d2:ac:ab:
         bf:2d:c4:e7:4c:59:0b:fc:7e:f2:ce:c8:df:3b:3d:c0:33:11:
         8b:d5:19:66:4e:ab:d8:27:59:a4:31:8b:c4:5a:a2:73:81:8e:
         c2:3a:8e:d9:dc:d0:dd:1d:d4:8e:f7:de:20:d7:d0:2b:68:80:
         74:88:0a:bd:58:1b:fe:ea:eb:9d:97:2d:dd:cb:4e:d1:1c:80:
         c8:4b:7e:bf:67:41:10:86:8d:cb:f3:cc:d4:18:b8:38:8a:f6:
         77:60:2f:1c:23:20:ee:76:74:6e:3d:3a:8a:76:09:30:5e:9a:
         5d:ff:6d:63:63:ed:8b:98:28:d7:91:34:6a:2e:47:21:21:95:
         b3:e0:3e:8d:47:b4:ad:91:78:0e:e9:81:d6:df:64:b7:91:00:
         03:55:17:a9:43:7b:17:9e:05:49:6e:f2:f9:9e:a7:4e:79:fa:
         4d:3f:3e:90:fb:93:a6:3f:b0:34:64:0e:38:e8:e4:55:63:95:
         8b:a2:fe:f4:f0:ee:f4:57:95:7f:bb:12:bc:34:f0:48:bb:57:
         e6:3c:ac:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:19:23 2026 by rpki-client