Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d617cd87-38a0-32ef-bcd7-9f749ccabb90.roa
File:                     d617cd87-38a0-32ef-bcd7-9f749ccabb90.roa (raw, json)
Hash identifier:          ZUumE8C64MTbBx7Yfps8uRRQ1fNZRXKeC7B8vt07TyQ=
Subject key identifier:   4B:DF:CD:C9:FA:80:9E:C3:8A:FE:04:DF:24:F1:93:ED:21:A8:E5:5B
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB82022349FEA33C0EDA00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d617cd87-38a0-32ef-bcd7-9f749ccabb90.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        97.80.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:82:02:23:49:fe:a3:3c:0e:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=ed58eae0-49fe-4c18-9277-94350cb09cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:31:b8:cf:b1:60:4f:37:87:ea:4a:0a:67:28:
                    09:4a:40:9b:4c:83:a0:c1:01:f6:77:bf:20:05:55:
                    8d:ac:f2:e8:57:54:f0:70:c6:00:03:24:90:9c:8f:
                    ec:1d:a8:5c:97:75:64:b4:46:18:71:20:ed:65:e4:
                    2b:62:24:e3:7b:1b:cd:d0:4b:e9:7f:a7:68:cb:97:
                    b3:40:cf:b4:71:61:c4:ab:a3:4f:b6:6a:d6:7f:69:
                    02:12:e4:c7:4d:2e:8f:f2:26:27:b4:cf:f4:b5:49:
                    d5:26:60:2a:b0:d1:4a:a9:5f:75:25:d3:3f:80:42:
                    67:41:4b:6b:59:b3:08:d8:70:1f:ea:af:aa:33:88:
                    61:ae:07:ff:89:72:62:24:2f:f2:26:68:2d:56:3b:
                    78:2e:a0:1b:34:5b:4d:ff:5f:ff:ce:95:02:17:c9:
                    f5:2d:29:be:3f:bc:d4:60:b2:e8:10:e0:98:8a:91:
                    25:cb:d7:cc:6f:f1:a7:25:28:73:35:1b:be:4a:20:
                    7c:8a:1c:00:0c:96:ce:93:cd:57:17:c5:c7:d8:c7:
                    b9:fa:aa:1e:06:97:05:87:2a:a7:e6:8b:35:8e:4e:
                    f2:f3:b2:52:a0:0b:be:86:74:6a:12:df:9c:bc:3c:
                    8d:fb:d2:b3:69:4e:22:69:e3:23:17:48:f8:80:53:
                    68:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DF:CD:C9:FA:80:9E:C3:8A:FE:04:DF:24:F1:93:ED:21:A8:E5:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d617cd87-38a0-32ef-bcd7-9f749ccabb90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.80.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:98:28:77:5a:61:74:96:b3:6c:25:01:48:e3:dc:54:d7:1d:
         5d:8b:75:a2:2b:29:dc:ce:ca:2f:39:d2:96:5d:2d:7a:c3:b5:
         c7:a5:f9:8d:3c:03:8d:46:13:0b:f4:97:c9:41:e2:86:2f:f1:
         e9:14:4f:19:5b:94:d0:1e:ef:87:d6:7a:e6:73:d5:02:c1:f8:
         a5:ea:32:cb:fd:86:53:c1:36:76:c5:a0:eb:5b:ed:02:82:ca:
         9d:05:6b:76:49:6e:7e:78:fa:35:67:9d:bf:5a:4e:12:7c:6d:
         4b:3c:d1:75:d3:0a:0c:46:a5:df:1e:5e:ca:45:f2:f0:10:a1:
         72:91:b5:71:c9:1c:10:21:ac:f5:88:c2:e7:4f:e8:e3:48:34:
         f8:c9:fe:8b:af:6c:9a:95:b8:00:ff:65:3b:e3:75:fb:25:0f:
         5b:a4:63:19:65:8e:21:ee:83:04:93:db:cc:bb:36:01:42:f1:
         2a:30:dd:7a:0a:11:79:62:f8:c7:e6:4a:7a:cd:a3:39:e9:74:
         95:6c:a7:65:d2:30:e8:23:9c:0b:6d:01:b3:28:03:b7:cf:88:
         e7:21:7d:b2:43:4f:30:c7:67:59:86:60:a2:26:8e:f0:95:5b:
         ed:b9:9c:22:4b:99:a8:fb:52:97:0c:fa:0b:b5:e8:38:c4:3d:
         46:d6:56:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:55:29 2026 by rpki-client