Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/7e14fe3f-046b-3698-b378-0410e8c01b3a.roa
File:                     7e14fe3f-046b-3698-b378-0410e8c01b3a.roa (raw, json)
Hash identifier:          YKh0xgrY15mqLSd5Vp9XD6pGvlSDsZ/zQ+PVYoPZSjE=
Subject key identifier:   A5:BB:9F:95:65:C8:96:57:83:C7:3D:E7:11:F4:A2:7F:79:40:52:BC
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584F4975DD00676B63B4F08B2800
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/7e14fe3f-046b-3698-b378-0410e8c01b3a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20057
IP address blocks:        74.80.151.0/24 maxlen: 24
                          74.80.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:dd:00:67:6b:63:b4:f0:8b:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d7f64e74-10df-45ee-b1ca-7a8cce32e5c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8e:4b:be:75:d4:92:6a:3a:c7:5d:e4:6a:e1:
                    8c:2e:2b:03:72:8b:a4:a9:ce:3c:5a:8f:dd:42:6f:
                    c9:01:21:d9:6f:26:c3:64:85:92:e2:9d:9c:e0:0b:
                    66:3f:c6:c2:43:34:d6:b5:49:14:4e:f8:5c:8f:0c:
                    e4:f0:d5:c4:94:81:1f:9d:54:57:03:72:42:98:44:
                    83:f1:a8:99:b0:0f:12:7b:5d:54:f8:7e:c8:d3:97:
                    0d:42:4c:4a:9b:73:62:c9:e1:5e:ee:9b:db:b4:aa:
                    bd:65:ef:60:44:14:7d:46:07:ac:62:05:09:54:44:
                    84:50:43:78:f8:f3:78:bd:5b:dc:1c:1f:f5:d0:16:
                    5f:ad:5a:40:2a:e1:2c:7e:a8:c3:41:78:00:a7:c2:
                    f0:92:e2:e6:67:f9:29:42:69:15:8b:2e:bb:40:4b:
                    de:14:3f:74:91:49:93:89:01:0f:a9:03:39:10:0e:
                    8a:55:10:6c:d5:b8:51:35:f7:88:73:62:58:ee:0e:
                    ab:2f:6c:4a:f1:09:ab:be:18:aa:d8:43:3d:b4:af:
                    a3:8c:57:04:e5:d2:65:08:0e:88:3e:2b:83:3f:a4:
                    72:fa:f7:e6:89:db:3f:92:f4:6e:78:a1:31:e0:ee:
                    11:17:a4:e4:5b:92:2e:90:f6:af:ed:b8:1f:45:e4:
                    94:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BB:9F:95:65:C8:96:57:83:C7:3D:E7:11:F4:A2:7F:79:40:52:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/7e14fe3f-046b-3698-b378-0410e8c01b3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.151.0/24
                  74.80.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:12:1b:c2:85:53:0c:65:c2:4c:cb:97:ff:11:12:ee:e2:82:
         90:14:f4:24:19:1c:e3:47:64:36:21:0b:ae:72:be:08:d2:bf:
         63:48:17:49:9d:f9:dc:9e:a7:59:05:f9:37:73:c1:cb:fb:1d:
         26:54:75:99:42:47:67:08:8a:c1:e2:4a:3b:41:e2:df:cd:ed:
         4b:ff:56:20:8a:c8:fb:6f:ad:11:c8:17:6b:d7:fc:ef:0c:51:
         97:74:50:05:01:f2:25:7f:7b:db:5b:be:3c:b1:50:4f:f9:5a:
         7b:48:03:77:f2:72:b0:26:0d:3c:b3:61:2d:c5:11:30:ee:58:
         63:5c:4d:2f:84:f9:15:ab:f0:d5:0f:85:3a:4c:6a:7e:91:f8:
         d8:6d:73:7b:cf:b9:6b:f0:1d:30:43:33:35:47:07:8d:48:9d:
         45:03:82:dc:00:33:74:83:83:3c:2a:be:bc:dc:4e:6d:0e:3b:
         cc:9a:bd:7c:84:e4:98:33:8a:28:51:9c:55:ce:b2:0f:2b:1b:
         1a:e7:58:00:7b:f9:b9:e9:ea:50:3c:9c:07:14:14:00:58:6b:
         48:5d:b8:ec:39:3d:b9:05:1b:35:3e:9d:3a:6f:e7:37:df:02:
         f5:37:44:c8:3d:36:8e:05:7e:84:46:81:5c:02:f4:ef:2a:4c:
         f8:d9:f9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:48:59 2026 by rpki-client