Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/a2c3899c-531a-337d-8d6c-047bf9cf6907.roa
File:                     a2c3899c-531a-337d-8d6c-047bf9cf6907.roa (raw, json)
Hash identifier:          Vmzj3eV8c1yeHSYP7lltGMY/ZM3be9FQeNSyIfidX/E=
Subject key identifier:   54:9A:92:FB:66:FD:B0:54:88:19:C1:DD:9E:ED:CC:1C:A5:CB:AB:A3
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F4328584E7634C8DD116F353F0958A580
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/a2c3899c-531a-337d-8d6c-047bf9cf6907.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     46450
IP address blocks:        74.80.230.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:c8:dd:11:6f:35:3f:09:58:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=af150d4f-2c6b-4b53-95b8-0a95e8f0b4e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ae:dd:0a:46:f3:b9:a4:c2:31:4d:13:00:4c:
                    5a:90:ce:05:97:b4:91:09:1d:bd:0b:6e:bf:8e:d2:
                    a2:45:d2:58:50:c8:90:08:11:d1:e6:49:cf:57:ff:
                    d4:1b:ad:c3:7b:b1:93:19:0c:df:25:1e:1b:19:dc:
                    53:d6:63:ea:b1:97:5c:8a:52:26:a4:29:05:94:61:
                    7a:cf:62:da:63:88:49:9b:6a:38:fa:ad:c2:74:54:
                    84:91:ff:2a:11:38:fc:f9:2f:1a:54:b3:72:69:c4:
                    df:bc:77:56:08:12:0e:67:8e:35:09:85:2a:c0:a9:
                    41:b1:30:85:10:83:d2:4f:87:ce:9f:c5:28:4b:9f:
                    d4:43:ba:ac:72:19:23:0c:1e:4f:4c:7a:94:0b:e0:
                    f0:b4:16:4b:82:84:cd:ee:44:48:fc:8c:46:02:af:
                    94:28:6a:a1:ca:4a:69:00:0f:ac:21:3a:26:dd:f8:
                    86:2f:e1:53:48:3b:f8:46:cb:37:4d:7c:c5:e8:b1:
                    4a:8c:11:37:42:70:7e:75:0f:8f:1b:a8:86:9e:44:
                    09:bb:41:a0:6b:7f:0c:6f:2b:0e:2c:ad:a1:85:ea:
                    e3:5f:99:63:15:9d:39:bf:17:f5:ae:bc:a5:71:d8:
                    42:b2:0d:e1:d6:4d:ac:4a:3c:96:32:32:c3:92:81:
                    db:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9A:92:FB:66:FD:B0:54:88:19:C1:DD:9E:ED:CC:1C:A5:CB:AB:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/a2c3899c-531a-337d-8d6c-047bf9cf6907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:43:eb:53:e3:b4:b0:fb:07:60:99:3d:40:13:ac:43:75:e1:
         93:61:7b:43:ec:a9:69:de:71:58:b3:1a:74:ad:7d:d4:c2:72:
         c2:81:9a:35:0a:10:e2:d5:71:c9:62:f4:f0:3a:52:fb:f6:48:
         15:b1:03:02:8f:4e:d2:3b:ac:1a:de:e2:a2:f8:46:36:ec:8a:
         49:5c:1e:10:20:42:08:32:62:68:ce:87:11:0e:e0:a1:85:7a:
         ee:40:0c:04:ac:cb:4b:36:8e:41:d0:d6:99:5f:91:86:9a:4b:
         66:4e:90:d0:08:31:38:29:5e:a9:00:b2:ff:36:ce:7a:e2:cf:
         6e:d5:0d:a6:3b:ae:74:b0:68:27:65:e0:28:22:2b:6a:8f:5d:
         1a:2f:ec:96:19:1f:d0:7c:16:c8:d9:17:7b:a7:8e:22:48:e3:
         7a:5f:89:76:fb:af:1d:41:0e:a8:85:25:c8:37:4d:01:52:d6:
         bf:24:94:10:29:f6:49:5f:7c:55:c0:0f:0f:0c:ca:b2:e2:91:
         c8:05:97:6f:e1:ae:d8:1f:e3:21:c5:6c:41:6a:a5:04:20:37:
         0e:a6:dd:21:af:3f:be:8f:70:ef:32:c3:57:55:8c:63:42:e1:
         df:83:65:05:39:e9:9c:7f:84:a6:9f:90:37:31:b2:b6:d2:fb:
         ca:48:21:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:47:05 2026 by rpki-client