Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/61f2aa6b-18e9-3b22-b195-33073c6969c3.roa
File:                     61f2aa6b-18e9-3b22-b195-33073c6969c3.roa (raw, json)
Hash identifier:          a1MD/k0MrPAsXTnS6+qdRYVoKRnHoEtvsHl2H6xwktw=
Subject key identifier:   C6:FA:E1:19:4D:F1:E2:6D:20:D8:49:3C:1A:0F:41:6F:76:C4:C6:46
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584DB4A57AD73AD0D4DB831B2480
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/61f2aa6b-18e9-3b22-b195-33073c6969c3.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     11872
IP address blocks:        74.80.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:7a:d7:3a:d0:d4:db:83:1b:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=5a352d60-4ee9-4772-a132-43952f854b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:79:b5:7f:2d:ef:a9:54:a5:cd:3a:82:0d:e9:
                    b5:57:da:a3:a0:a9:ea:2b:9b:b1:8f:c1:93:a3:92:
                    63:2c:d6:9f:26:8d:d0:54:d5:75:9c:c4:f9:96:23:
                    02:21:b5:98:dc:47:7b:ad:bb:02:81:59:55:b5:36:
                    74:c4:f4:b1:7a:8e:83:ae:3c:2e:4c:54:fc:81:b3:
                    c7:48:0c:fe:06:72:06:87:8a:90:3f:4c:54:0c:8f:
                    a6:d3:55:d1:8c:2b:9c:58:d0:2b:03:67:7d:4b:d7:
                    af:9e:88:2f:8c:e7:e8:7f:45:f0:c0:82:d3:a5:37:
                    7a:e8:32:23:1f:39:ad:c3:00:99:30:7f:4e:9a:eb:
                    5c:9f:fe:0f:e7:05:4d:d4:2e:80:f2:5f:6b:41:7b:
                    0e:7b:6a:68:80:67:9f:11:23:90:5a:ae:8f:e3:20:
                    9e:53:00:e8:f4:f9:0b:d1:3d:bb:3b:7e:e3:44:96:
                    95:a9:25:3d:cd:45:57:be:21:ab:d6:48:f3:76:c1:
                    a4:13:d1:a2:16:d8:06:4f:51:40:d3:e9:fa:f2:3e:
                    06:1e:2c:c4:de:32:d6:f4:15:3a:b6:0e:8d:af:37:
                    dd:8e:2d:dc:2c:00:3a:5b:ad:90:e5:d2:4b:0f:71:
                    04:31:17:4e:7a:55:5f:5e:28:dc:5b:0a:5d:43:76:
                    f5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FA:E1:19:4D:F1:E2:6D:20:D8:49:3C:1A:0F:41:6F:76:C4:C6:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/61f2aa6b-18e9-3b22-b195-33073c6969c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:28:a0:d6:02:7d:5d:8b:d7:d4:fa:d1:7a:ec:28:2b:a7:f6:
         05:ba:56:b6:c8:19:0a:9e:89:09:8e:4e:f9:22:07:0e:4d:6b:
         0d:0e:b3:f8:89:44:ff:7e:50:08:d5:7e:5b:8e:fc:38:fb:51:
         06:fb:fa:4f:a9:5a:38:dd:03:d5:fd:f7:d4:36:8a:87:f6:0d:
         39:1f:e9:63:99:95:3b:3a:e2:9e:fc:ca:07:02:80:2f:a1:54:
         3f:ce:40:77:11:21:d5:dc:df:27:6a:81:4b:ff:4a:33:94:5f:
         ca:6a:9b:0f:7f:1b:a5:2b:33:8e:7e:8a:b6:51:93:17:38:50:
         3a:f6:52:47:d0:bc:90:21:23:a2:5c:65:62:d5:3c:5e:37:b5:
         8f:a7:6c:d0:54:1d:1d:e1:03:fe:27:66:6d:bb:80:ff:32:58:
         9e:37:f8:d6:44:c5:2c:62:c0:53:1f:69:d1:cc:9a:d8:d0:e3:
         8c:59:bc:a4:99:cf:87:54:51:11:86:8a:28:e7:f4:4e:3f:14:
         ce:ed:9f:26:36:fe:7e:99:13:20:61:b4:48:02:af:c5:b9:15:
         58:81:c5:c6:7e:c4:f6:f0:f3:0a:f4:2d:e6:4e:42:50:5c:e4:
         8e:29:18:45:18:47:53:22:95:c9:3a:78:aa:c0:c5:ac:2d:3c:
         32:da:25:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:01:34 2026 by rpki-client