Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/d1f62340-99fb-368c-9f78-1827c102f447.roa
File:                     d1f62340-99fb-368c-9f78-1827c102f447.roa (raw, json)
Hash identifier:          1Ja1n6HaN5z8Ai2zDgNgYSWj2wVxRyxClys6Cy5gnB0=
Subject key identifier:   01:66:7E:1E:1B:C8:1F:AA:E9:3E:B5:E7:33:29:88:32:E2:60:D3:C7
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584F4975DD1D2540397F994CD380
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/d1f62340-99fb-368c-9f78-1827c102f447.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     134176
IP address blocks:        74.80.151.0/24 maxlen: 24
                          74.80.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:dd:1d:25:40:39:7f:99:4c:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=18245b72-5e25-4cc9-b9ef-f8950e943eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:de:9d:f9:28:14:ac:4c:62:e2:7c:d1:7d:c4:
                    bb:10:5a:74:28:4e:9d:dc:b9:c5:ad:77:02:e8:76:
                    af:e9:34:98:ed:56:73:33:15:42:3b:49:3b:fa:57:
                    c4:2b:6f:2d:29:a0:9a:e2:ab:9d:ed:96:12:c0:bf:
                    dd:05:d1:a4:67:9f:90:2e:60:90:2b:b1:62:59:03:
                    ca:d9:2b:1a:99:24:57:7f:9e:f6:17:31:5d:a9:ac:
                    a5:8f:e1:6a:58:14:3f:4d:04:ab:40:a4:a0:78:f7:
                    ab:1e:14:94:e9:89:42:e7:6a:c2:ee:3d:22:96:e7:
                    fe:cb:e8:06:c8:ad:9c:76:0a:e3:bb:a0:12:ad:2a:
                    47:c6:af:c2:9e:82:53:d6:1e:89:c1:d8:5b:28:24:
                    8f:75:e3:58:93:d9:7b:12:d6:8f:10:4b:32:cf:b4:
                    52:6d:ab:43:b0:be:44:95:69:1f:9e:c2:74:47:4b:
                    e6:ee:b7:4e:53:b6:5c:0c:e6:76:47:41:b6:e9:eb:
                    3f:2c:da:e0:75:59:8e:ef:72:79:48:4f:dd:b5:b6:
                    30:0a:5f:a2:30:65:22:8e:3a:c8:57:72:50:cf:30:
                    63:50:a1:5d:74:4c:25:04:ec:fc:f0:16:0b:50:b2:
                    28:74:f0:18:34:31:37:e4:ae:ff:a8:7d:51:25:8c:
                    d8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:66:7E:1E:1B:C8:1F:AA:E9:3E:B5:E7:33:29:88:32:E2:60:D3:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/d1f62340-99fb-368c-9f78-1827c102f447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.151.0/24
                  74.80.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:f8:5c:f4:6f:c6:2f:d5:3b:10:b5:c1:8b:b7:20:79:a6:e0:
         d1:10:dd:f2:17:37:4c:84:86:9f:07:8c:4e:26:08:89:a7:b6:
         4d:66:16:da:15:0f:e7:18:59:d2:77:43:50:f4:4b:e4:64:45:
         d1:37:f7:fc:7c:79:ff:29:58:6c:15:46:46:3c:61:fc:73:b6:
         e3:e5:9b:62:01:9a:9c:4b:ff:32:f3:7b:02:db:65:63:0a:41:
         f7:dc:44:af:21:22:09:77:45:5a:05:b1:cd:d7:5c:a1:12:d5:
         64:c6:05:0e:b1:c7:5d:2f:8f:56:fc:a5:a6:31:12:c1:c2:b7:
         f2:6a:d6:e7:c4:dd:ae:dc:fb:de:09:a6:af:aa:c0:f1:30:cf:
         40:57:36:17:42:2b:04:86:3e:1e:2f:08:bb:a8:b3:d0:6b:6c:
         1e:88:84:65:93:3c:3b:d0:1b:49:89:77:1e:85:28:6b:62:c8:
         01:96:0e:a3:58:12:b2:41:44:10:10:34:4b:ee:6f:1a:42:72:
         84:ac:58:5f:26:09:f5:27:07:ac:fb:ed:9b:53:5b:49:5c:7a:
         40:d0:c0:ec:32:48:2b:cf:0f:e3:27:c4:28:32:17:35:6d:ab:
         45:4c:ed:90:63:a0:7d:02:71:99:e0:7b:d4:60:69:0e:cd:89:
         94:01:00:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:55:10 2026 by rpki-client