Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508/014954f3-7dc1-3b60-8859-d30dcbd1f4c3.roa
File:                     014954f3-7dc1-3b60-8859-d30dcbd1f4c3.roa (raw, json)
Hash identifier:          VfgJUd5+97qI9VX5ZrkJlnwSUsZXhFdfKCKneOf23AA=
Subject key identifier:   AA:56:C3:A1:6C:19:88:17:CC:BF:4A:9F:5A:70:B4:54:07:6B:DC:D1
Certificate issuer:       /CN=99f49497-e145-4e4e-895c-2a7825ca6508
Certificate serial:       010D0C9F4328584DAAE025CC2D59FAA1681BA880
Authority key identifier: 2E:21:56:94:21:EA:A7:3F:43:08:43:7F:A4:6B:37:3C:50:4F:97:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508/014954f3-7dc1-3b60-8859-d30dcbd1f4c3.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     400703
IP address blocks:        74.80.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508/99f49497-e145-4e4e-895c-2a7825ca6508.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508/99f49497-e145-4e4e-895c-2a7825ca6508.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:25:cc:2d:59:fa:a1:68:1b:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f49497-e145-4e4e-895c-2a7825ca6508
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=171334be-bf5b-4a55-9cdd-51eb2b36e06d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3a:5a:a3:74:a1:04:85:3e:78:18:24:ba:c2:
                    bb:92:cf:7e:9c:56:a8:38:61:83:66:9a:5b:ab:03:
                    bc:b0:96:69:1b:05:43:38:cd:1b:5f:dc:d4:01:64:
                    eb:3b:07:0c:7c:e2:aa:a8:ce:d6:6f:9d:71:00:a7:
                    1d:db:28:e3:f0:d8:2b:0c:02:d7:67:c6:a2:dc:2d:
                    b7:25:68:1d:54:e7:72:fe:6b:b0:98:c9:5d:65:be:
                    91:94:81:eb:a4:8b:b7:e0:16:4c:cf:52:3f:4b:ed:
                    63:39:6b:77:f3:70:00:61:ed:79:86:ce:78:e7:1a:
                    c1:b1:10:d9:79:ec:39:81:df:9c:77:35:76:10:0b:
                    6e:54:e8:6b:19:01:52:42:16:4c:1f:89:87:24:c2:
                    e7:16:f7:e8:8d:49:b0:18:51:1c:da:7d:c8:13:d3:
                    cb:48:cc:d6:cf:24:a7:b4:67:7b:f4:a7:10:fe:2b:
                    13:55:ea:af:e3:fb:b1:ed:c5:81:a0:96:c8:96:7f:
                    78:97:b9:8a:7e:27:00:0b:c4:90:c8:5f:92:84:14:
                    d8:93:b3:83:11:95:83:21:04:87:a8:1f:39:d6:0c:
                    6d:fc:1e:99:1a:cb:80:69:a0:53:ab:37:90:a2:4a:
                    fc:14:3f:c9:37:e3:42:1b:d6:12:90:f9:f6:0a:cb:
                    64:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:56:C3:A1:6C:19:88:17:CC:BF:4A:9F:5A:70:B4:54:07:6B:DC:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508/014954f3-7dc1-3b60-8859-d30dcbd1f4c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508/99f49497-e145-4e4e-895c-2a7825ca6508.crl

            X509v3 Authority Key Identifier:
                keyid:2E:21:56:94:21:EA:A7:3F:43:08:43:7F:A4:6B:37:3C:50:4F:97:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:4f:ec:96:7e:11:6c:75:a9:3d:59:01:cb:98:65:8a:e1:e8:
         d5:58:9a:38:08:db:46:4b:8b:37:d8:bc:8e:0d:ec:f1:42:b1:
         0a:b8:cd:63:e9:6f:20:6b:e7:96:f8:fd:4e:03:8c:7a:4d:7b:
         8c:c6:04:d5:45:5a:c7:45:d2:26:8a:76:1c:4e:77:d7:41:53:
         05:7f:1b:b9:f7:46:ae:6f:4c:05:39:c8:69:f4:23:d0:b4:b7:
         92:50:34:65:08:2c:5d:93:2c:0f:9a:8a:48:84:08:ae:75:03:
         f9:76:10:b6:1e:73:70:2d:d6:ea:6a:4c:06:0e:e2:d5:b5:51:
         70:0e:f6:fc:e9:c0:a4:ec:1a:c0:e9:c5:9d:e2:25:1d:80:ad:
         e0:ef:36:64:5b:64:b1:00:02:b2:67:54:97:3d:db:f7:b7:e7:
         b3:dc:dd:65:90:e0:81:a3:00:c6:29:3b:78:7c:62:b9:4f:61:
         2c:51:33:7c:df:e8:16:fe:63:53:6e:32:c0:3b:bf:19:8e:7c:
         c9:dc:49:5c:6d:eb:c1:97:1f:e1:a9:a3:9b:d6:63:72:8c:51:
         c0:d8:b0:f6:0f:3a:f4:01:03:47:be:6b:97:bf:fd:67:35:74:
         3b:f6:89:3e:1e:a7:ae:a5:7a:de:e7:cf:38:73:b6:00:1b:dc:
         3e:4b:10:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:15:30 2026 by rpki-client