Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/f23f0547-2385-3d82-b362-a65cce74e39c.roa
File:                     f23f0547-2385-3d82-b362-a65cce74e39c.roa (raw, json)
Hash identifier:          aPjJVoWln6JXfPdmbOpXBn4WVd05kPJLdm/SqhXBauE=
Subject key identifier:   86:7C:ED:B0:1E:41:51:F3:DE:61:86:83:D4:27:88:5B:1A:A8:70:D3
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584DBD05A2BD12517B0E34B583E0
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/f23f0547-2385-3d82-b362-a65cce74e39c.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     7029
IP address blocks:        74.80.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:a2:bd:12:51:7b:0e:34:b5:83:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=d833f350-5eb1-4b7b-a1e8-9442b14f8dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dc:40:0a:d5:ff:46:24:bc:ce:f6:91:7d:c4:
                    c4:d1:69:04:13:9e:26:97:ab:a3:e7:e5:a7:7a:48:
                    51:50:25:45:23:5c:74:a9:cb:d1:2e:fe:0f:29:0c:
                    eb:56:f0:9a:83:3a:41:16:f1:56:db:00:c5:75:ac:
                    9d:06:c8:da:fb:db:75:98:25:76:e2:b2:ea:50:33:
                    00:f8:c4:9c:37:c0:8e:b6:9b:0d:06:1f:cc:d7:5a:
                    91:40:4b:b3:08:38:90:a6:10:02:83:83:69:98:8f:
                    8b:83:c9:ee:d0:7b:e6:5f:6c:d7:5a:93:2b:b6:2d:
                    0b:c2:ed:cb:9e:18:c7:d0:ba:b7:3e:fd:f0:e3:a2:
                    49:13:4e:b7:4a:12:db:1b:3b:a4:7d:cc:f3:8a:fe:
                    0e:f5:3f:41:07:ac:95:59:8c:58:30:d4:d4:0c:13:
                    d1:55:c0:4d:fc:e8:7d:19:ed:f8:58:c3:0c:44:00:
                    b6:d1:7c:3e:fa:d6:58:9e:c1:94:9b:a4:75:12:01:
                    75:01:ec:25:3c:fb:d2:5b:d6:a2:0c:f9:fc:df:99:
                    30:26:a7:42:18:29:c7:55:bd:23:dd:c1:65:5f:1d:
                    e2:0b:59:78:53:85:b6:55:6c:48:07:b7:03:18:95:
                    d5:6e:f5:eb:06:5c:71:1c:b9:1c:50:19:99:fb:74:
                    b6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7C:ED:B0:1E:41:51:F3:DE:61:86:83:D4:27:88:5B:1A:A8:70:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/f23f0547-2385-3d82-b362-a65cce74e39c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:28:be:aa:e3:37:77:e2:ed:01:1f:ed:f0:0f:a0:f5:28:f1:
         99:f6:4f:87:a9:fd:f9:1a:74:18:65:23:0e:ae:fd:d4:04:b9:
         bc:9a:d3:05:81:42:8c:65:a5:30:6d:17:a2:41:11:58:ae:19:
         8d:2b:af:cf:37:b4:e8:32:f0:17:60:20:5c:07:80:df:26:1a:
         9b:1c:43:05:58:3a:bc:4e:50:9a:60:96:e6:66:6e:ce:70:a1:
         06:10:d1:e5:3d:4e:d9:0a:2c:d9:ef:e2:d2:8d:db:26:f9:0d:
         7d:14:fa:f2:06:47:4a:2f:f4:86:77:9e:aa:31:cb:a1:65:e2:
         5e:73:c5:18:90:77:f6:d2:f3:80:59:d3:14:06:fa:01:93:6c:
         46:b1:82:69:37:0f:4f:76:41:ce:42:0d:74:c6:a8:e0:54:13:
         7b:9f:e0:de:81:38:74:e6:3b:71:8b:6c:fd:75:6b:e2:a6:92:
         63:a6:2c:21:17:f7:dd:eb:4b:43:e5:ad:c9:73:81:44:5c:9e:
         ed:75:8e:dd:15:2e:7e:05:7f:05:13:e5:08:0d:fe:50:7d:7d:
         dc:4d:5a:f2:95:ea:56:90:0f:69:4d:1b:16:88:4a:fa:15:19:
         7c:d3:7d:01:6d:b9:e4:9a:ee:fe:71:54:36:d8:c1:f5:be:cb:
         da:5e:0e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:45:48 2026 by rpki-client