Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/afe54e83-cd0f-38a4-8069-4a0eac3c61ba.roa
File:                     afe54e83-cd0f-38a4-8069-4a0eac3c61ba.roa (raw, json)
Hash identifier:          p4BL5c1RWHEWvy5N5Ds538xVXXqEuenqxp8hz7eejtI=
Subject key identifier:   02:39:DD:2B:68:17:58:44:D3:67:47:32:5A:1A:E5:40:0F:80:6C:3E
Certificate issuer:       /CN=b558fe83-60e3-423a-b823-c3c24b9a60dd
Certificate serial:       010D0C9F4328584DAAE02839F1E2AC45372345C0
Authority key identifier: 7C:DB:AE:AE:08:A0:92:A8:31:52:55:26:BE:2B:E1:07:43:E5:9B:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/afe54e83-cd0f-38a4-8069-4a0eac3c61ba.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     8075
IP address blocks:        74.80.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/b558fe83-60e3-423a-b823-c3c24b9a60dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/b558fe83-60e3-423a-b823-c3c24b9a60dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:28:39:f1:e2:ac:45:37:23:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b558fe83-60e3-423a-b823-c3c24b9a60dd
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=0067553e-8648-42e9-b742-f9e6c065265e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:22:65:f3:67:4e:92:f1:49:76:95:73:9f:8e:
                    9f:f7:88:71:84:b9:34:bb:3e:d3:c2:a0:86:14:40:
                    52:20:6f:05:10:12:c0:b5:97:87:92:9c:37:ce:73:
                    52:52:2b:29:df:05:14:76:4d:e5:8a:86:2e:11:8a:
                    d8:ed:8c:8b:a4:30:0a:ef:61:1e:4e:0a:2e:3d:ca:
                    c4:98:72:66:55:86:7e:b2:38:ef:ae:c6:19:70:51:
                    05:c5:d8:46:f3:8b:1a:d3:29:5f:a3:10:3b:b5:a1:
                    6c:e5:2c:0c:f6:a0:3b:de:c4:ad:c0:62:32:1d:d8:
                    3c:26:ac:90:e2:3b:73:bc:b8:bf:b4:f9:b7:97:ce:
                    bb:f3:6f:0d:d4:81:a4:e1:58:69:76:5d:4e:86:f5:
                    87:26:be:53:a0:54:e2:17:cc:4b:a4:cf:3e:e7:6f:
                    23:70:d0:99:55:f4:82:21:e2:ce:f3:72:7c:3a:fa:
                    e6:97:00:b7:12:86:61:d1:13:b1:5c:a4:1b:29:23:
                    00:b8:55:84:b3:12:6d:65:de:44:c1:38:fe:59:12:
                    e5:b2:f3:e9:c2:05:7e:d9:b1:b4:c0:7b:f9:2c:35:
                    7c:77:71:3b:ea:21:03:b7:69:d4:e1:3a:19:a2:a7:
                    45:8e:ad:17:fa:f9:38:28:6d:50:ba:fd:6b:f9:28:
                    12:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:39:DD:2B:68:17:58:44:D3:67:47:32:5A:1A:E5:40:0F:80:6C:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/afe54e83-cd0f-38a4-8069-4a0eac3c61ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/b558fe83-60e3-423a-b823-c3c24b9a60dd.crl

            X509v3 Authority Key Identifier:
                keyid:7C:DB:AE:AE:08:A0:92:A8:31:52:55:26:BE:2B:E1:07:43:E5:9B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:e8:e6:48:52:42:55:07:69:12:97:45:2d:67:6c:e3:88:f9:
         77:9b:e4:ff:a4:4e:f6:34:11:fa:0b:49:55:ec:8f:cf:db:2f:
         18:85:fe:eb:e1:16:a9:8a:b7:ff:03:4a:b5:ad:92:87:38:fb:
         eb:6a:eb:14:0f:19:59:0c:46:4e:d2:d3:35:61:0a:68:d9:82:
         2f:1b:a1:6d:3b:84:57:cd:39:6a:f0:35:0d:37:35:39:b8:6d:
         2c:08:66:29:bd:47:5a:18:ed:09:15:13:ab:14:b0:f5:1f:1d:
         30:5b:f9:8b:f0:bc:da:cc:fb:74:15:15:b4:72:dd:42:19:df:
         3d:bc:2d:45:de:de:6a:17:f1:f7:ba:0c:54:0a:ec:28:c6:df:
         da:31:53:eb:ec:9b:43:14:9a:d4:7a:1b:55:3f:8d:62:3a:ba:
         5d:16:aa:21:0f:1b:b6:d2:50:91:0e:91:7f:7d:c1:e1:89:b4:
         97:a6:33:f2:67:96:57:b3:3b:09:0c:ad:30:bb:31:03:43:61:
         18:e8:4c:21:05:9a:45:36:f1:91:8b:dd:65:49:b3:d2:da:ce:
         37:8c:3b:ef:23:9a:cc:05:a1:b2:87:38:3f:4b:a4:14:af:e0:
         6b:bb:21:84:ed:3a:08:f6:fd:55:5a:0e:ce:cb:30:97:0f:e6:
         af:d3:df:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4Cg58eKsRTcjRcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU1OGZlODMtNjBlMy00MjNhLWI4MjMtYzNjMjRiOWE2
MGRkMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk
MDA2NzU1M2UtODY0OC00MmU5LWI3NDItZjllNmMwNjUyNjVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCJl82dOkvFJdpVzn46f94hxhLk0uz7TwqCG
FEBSIG8FEBLAtZeHkpw3znNSUisp3wUUdk3lioYuEYrY7YyLpDAK72EeTgouPcrE
mHJmVYZ+sjjvrsYZcFEFxdhG84sa0ylfoxA7taFs5SwM9qA73sStwGIyHdg8JqyQ
4jtzvLi/tPm3l867828N1IGk4Vhpdl1OhvWHJr5ToFTiF8xLpM8+528jcNCZVfSC
IeLO83J8OvrmlwC3EoZh0ROxXKQbKSMAuFWEsxJtZd5EwTj+WRLlsvPpwgV+2bG0
wHv5LDV8d3E76iEDt2nU4ToZoqdFjq0X+vk4KG1Quv1r+SgSvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAI53StoF1hE02dHMloa5UAPgGw+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTU4
ZmU4My02MGUzLTQyM2EtYjgyMy1jM2MyNGI5YTYwZGQvYWZlNTRlODMtY2QwZi0z
OGE0LTgwNjktNGEwZWFjM2M2MWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU1OGZlODMtNjBlMy00MjNhLWI4
MjMtYzNjMjRiOWE2MGRkL2I1NThmZTgzLTYwZTMtNDIzYS1iODIzLWMzYzI0Yjlh
NjBkZC5jcmwwHwYDVR0jBBgwFoAUfNuurgigkqgxUlUmvivhB0Plm8wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTU4ZmU4My02MGUzLTQyM2EtYjgyMy1jM2My
NGI5YTYwZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlDlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJLo5khSQlUHaRKXRS1nbOOI+Xeb5P+kTvY0EfoLSVXsj8/bLxiF/uvh
FqmKt/8DSrWtkoc4++tq6xQPGVkMRk7S0zVhCmjZgi8boW07hFfNOWrwNQ03NTm4
bSwIZim9R1oY7QkVE6sUsPUfHTBb+YvwvNrM+3QVFbRy3UIZ3z28LUXe3moX8fe6
DFQK7CjG39oxU+vsm0MUmtR6G1U/jWI6ul0WqiEPG7bSUJEOkX99weGJtJemM/Jn
llezOwkMrTC7MQNDYRjoTCEFmkU28ZGL3WVJs9LazjeMO+8jmswFobKHOD9LpBSv
4Gu7IYTtOgj2/VVaDs7LMJcP5q/T38o=
-----END CERTIFICATE-----
Generated at Wed May 13 09:30:50 2026 by rpki-client