Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/c1000c1c-c6dd-3c12-8ee0-fcb09f073840.roa
File:                     c1000c1c-c6dd-3c12-8ee0-fcb09f073840.roa (raw, json)
Hash identifier:          UoY9saqO0XrrtT3UMVihefMMx+AAMp9dk5uR43Cf/rI=
Subject key identifier:   43:76:5C:EE:0B:C9:E2:99:64:0F:C9:1D:FC:D8:F1:24:D4:7F:B4:E8
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584F3FAD42E970CFCFF8267EADE0
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/c1000c1c-c6dd-3c12-8ee0-fcb09f073840.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     3320
IP address blocks:        74.80.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:42:e9:70:cf:cf:f8:26:7e:ad:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=7824b4ce-4962-4276-a9cb-beb89f591d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cd:41:21:bd:c2:ae:99:47:75:ea:4e:6e:97:
                    7b:bd:38:4e:2d:08:fa:b4:47:4f:63:7f:bd:f3:b2:
                    c0:93:ae:71:3a:96:32:9f:5b:ff:8a:2e:61:61:ef:
                    cc:dd:82:f8:4e:3a:6f:fe:3e:cb:d3:b7:8b:8c:f0:
                    e8:7c:6e:15:1a:2a:12:99:df:23:9f:b7:a0:42:ef:
                    c8:09:1d:77:25:f3:e4:20:a5:d3:28:1f:26:14:b0:
                    6f:f4:4d:9e:4c:a8:14:92:fc:93:4b:a8:c6:fe:8d:
                    ed:60:8b:27:7e:8c:fa:b7:8e:d0:f3:c9:65:17:ce:
                    67:68:d1:9e:ed:c9:26:6c:f1:b5:2a:20:c3:e0:3e:
                    5c:1f:d1:ef:27:ec:4c:2c:28:a4:dd:f9:31:34:57:
                    30:bf:c9:8c:6e:40:ed:51:ce:8f:f0:62:6f:34:5a:
                    b5:0a:8c:1b:b5:b6:d0:6f:86:d7:a0:de:07:16:31:
                    44:21:50:bf:0a:9b:84:9c:34:13:6b:a6:a7:d5:76:
                    c9:40:4d:12:ad:ee:a2:fc:d3:ca:36:58:01:3b:71:
                    96:9f:b1:bb:49:56:bf:c4:13:e6:55:34:92:54:83:
                    83:5f:d6:3b:9e:c7:94:5b:69:21:a2:e8:b6:02:76:
                    6b:ef:86:92:32:bd:9f:52:4c:c0:58:06:74:02:f7:
                    61:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:76:5C:EE:0B:C9:E2:99:64:0F:C9:1D:FC:D8:F1:24:D4:7F:B4:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/c1000c1c-c6dd-3c12-8ee0-fcb09f073840.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:c9:c7:a3:9e:a0:75:56:4e:73:03:c3:4d:62:98:d0:c1:cb:
         b6:89:ab:e1:9d:75:3b:5e:ce:fa:f7:8a:05:f2:f4:95:86:2d:
         08:63:84:1f:0b:b2:e7:f5:bb:42:cf:79:66:a8:4a:bc:5f:b5:
         fe:6a:87:0f:94:20:1b:cd:20:62:2e:d5:87:d9:6b:5f:d3:cd:
         3a:2c:01:e0:c3:13:d1:09:60:64:4d:62:35:dd:81:94:f9:79:
         ce:31:06:cc:d3:3b:ab:ee:67:40:f1:05:b0:aa:f0:e9:85:ca:
         21:e0:55:a8:e5:5b:5e:0a:4c:23:ab:bc:5c:39:fb:cc:66:18:
         5d:71:0d:cf:5b:6b:b8:d7:28:41:34:b0:f3:f2:42:5e:d1:a6:
         c7:cf:ff:b4:24:ac:6b:69:0a:4d:15:1d:25:eb:26:e2:ab:6b:
         e2:6c:aa:c9:ac:77:fb:1c:b5:59:05:83:e6:08:f9:a9:bf:95:
         eb:b8:27:f0:5f:54:cd:1a:08:dd:e5:ba:4a:81:b9:49:5f:95:
         ff:7f:52:f6:03:2d:62:23:ab:3b:14:b4:fd:ed:05:43:3d:0a:
         66:1d:bc:24:c6:70:67:49:07:fb:8c:c1:b6:cd:b7:60:70:08:
         7e:1a:f5:14:04:83:65:cb:f9:2b:df:c5:db:78:49:8d:1b:64:
         7f:bc:ca:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rULpcM/P+CZ+reAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWUzZTk5Y2MtNzk5Mi00YWMxLWEyNTYtOTE3Y2NlMDc1
MzJlMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk
NzgyNGI0Y2UtNDk2Mi00Mjc2LWE5Y2ItYmViODlmNTkxZDFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr81BIb3CrplHdepObpd7vThOLQj6tEdPY3+9
87LAk65xOpYyn1v/ii5hYe/M3YL4Tjpv/j7L07eLjPDofG4VGioSmd8jn7egQu/I
CR13JfPkIKXTKB8mFLBv9E2eTKgUkvyTS6jG/o3tYIsnfoz6t47Q88llF85naNGe
7ckmbPG1KiDD4D5cH9HvJ+xMLCik3fkxNFcwv8mMbkDtUc6P8GJvNFq1CowbtbbQ
b4bXoN4HFjFEIVC/CpuEnDQTa6an1XbJQE0Sre6i/NPKNlgBO3GWn7G7SVa/xBPm
VTSSVIODX9Y7nseUW2khoui2AnZr74aSMr2fUkzAWAZ0AvdhhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEN2XO4LyeKZZA/JHfzY8STUf7ToMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNl
OTljYy03OTkyLTRhYzEtYTI1Ni05MTdjY2UwNzUzMmUvYzEwMDBjMWMtYzZkZC0z
YzEyLThlZTAtZmNiMDlmMDczODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWUzZTk5Y2MtNzk5Mi00YWMxLWEy
NTYtOTE3Y2NlMDc1MzJlLzVlM2U5OWNjLTc5OTItNGFjMS1hMjU2LTkxN2NjZTA3
NTMyZS5jcmwwHwYDVR0jBBgwFoAU2RNicrf45rV9n/DguoV/tj3NwN8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNlOTljYy03OTkyLTRhYzEtYTI1Ni05MTdj
Y2UwNzUzMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlCUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAELJx6OeoHVWTnMDw01imNDBy7aJq+GddTtezvr3igXy9JWGLQhjhB8L
suf1u0LPeWaoSrxftf5qhw+UIBvNIGIu1YfZa1/TzTosAeDDE9EJYGRNYjXdgZT5
ec4xBszTO6vuZ0DxBbCq8OmFyiHgVajlW14KTCOrvFw5+8xmGF1xDc9ba7jXKEE0
sPPyQl7RpsfP/7QkrGtpCk0VHSXrJuKra+Jsqsmsd/sctVkFg+YI+am/leu4J/Bf
VM0aCN3lukqBuUlflf9/UvYDLWIjqzsUtP3tBUM9CmYdvCTGcGdJB/uMwbbNt2Bw
CH4a9RQEg2XL+Svfxdt4SY0bZH+8ypg=
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:34:18 2026 by rpki-client