Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/6873e7e8-5fdd-3ad8-87c2-7f10dfe0e5c7.roa
File:                     6873e7e8-5fdd-3ad8-87c2-7f10dfe0e5c7.roa (raw, json)
Hash identifier:          q+3Y+2Mp7n5DvkWfMLnvqSI0eAxeLofqxfkncH9MfpE=
Subject key identifier:   A2:F4:43:24:0A:F2:4B:9A:84:D5:9B:E9:E4:02:6E:72:61:97:F7:80
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584E1FA99E70401DDEAEC65AFC40
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/6873e7e8-5fdd-3ad8-87c2-7f10dfe0e5c7.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     715
IP address blocks:        74.80.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:9e:70:40:1d:de:ae:c6:5a:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=28efa670-ea3f-48b6-8f07-8f88b9e737b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b6:4a:8d:20:2d:0a:fb:b2:8c:cc:c8:b8:9b:
                    f7:32:17:f0:1e:16:e4:ad:1b:9e:33:bf:7f:f2:fa:
                    fe:1a:58:fe:f3:72:24:1d:54:37:5b:48:a4:9c:f0:
                    0b:61:2b:c1:57:3f:69:d3:c7:a4:6b:92:29:1d:e7:
                    83:5a:c7:4f:2a:ac:f8:9b:49:18:9c:98:8a:86:48:
                    0e:53:d3:10:42:19:d8:2e:0b:08:c3:d2:57:9f:b2:
                    46:cd:23:7e:a1:75:8e:e9:14:3b:96:04:d8:91:ed:
                    09:42:da:8e:3e:67:a5:5b:41:4a:2f:d6:71:7a:02:
                    39:87:bb:e6:68:c4:53:4a:07:e2:8f:8a:f8:f2:92:
                    63:0e:61:d8:e5:f3:a5:d8:38:26:0d:27:92:4e:2a:
                    13:33:9b:8b:48:89:e4:0a:bf:1f:55:a2:0d:5b:48:
                    5f:e2:95:47:9c:88:e2:10:6b:24:cb:dc:39:09:d7:
                    f0:f0:7a:8e:0f:8d:72:bc:30:4d:c7:ab:1f:f1:99:
                    34:0a:86:b1:a0:b6:bf:1f:de:ab:57:f4:bf:94:dd:
                    6d:c6:fb:85:b1:78:ae:ea:ed:dc:3d:96:34:c4:dc:
                    0a:20:ed:78:0b:a2:0a:7c:3f:d3:21:bf:1c:32:5b:
                    8b:e1:27:0e:dc:7f:4c:ca:21:80:fd:34:e8:da:dd:
                    cd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F4:43:24:0A:F2:4B:9A:84:D5:9B:E9:E4:02:6E:72:61:97:F7:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/6873e7e8-5fdd-3ad8-87c2-7f10dfe0e5c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:14:3a:70:dc:45:55:c6:e4:ee:28:5b:3b:9e:6a:4f:72:40:
         3d:c2:ba:61:1f:c6:de:55:bb:a6:3a:bf:98:93:ae:84:53:be:
         ce:5e:ab:09:73:56:dd:a0:d7:7e:6e:59:f8:e0:92:c4:f3:0f:
         a6:64:d6:18:21:c2:af:95:a1:91:d3:54:fd:87:89:58:e8:a2:
         bd:28:fb:0e:0a:b2:ac:99:30:fd:a6:f6:22:dd:f7:26:70:39:
         25:8b:74:b9:d6:9d:1a:0c:3d:a3:c0:33:f4:46:d1:9e:da:4d:
         af:a9:ab:ee:c2:6b:ac:73:c0:7e:89:89:76:6b:64:77:35:2e:
         08:d9:4c:1b:7d:42:3b:0b:a3:27:7b:26:d4:2a:50:1b:68:4e:
         7d:b7:d2:ea:6f:dd:1d:63:8b:83:c8:c9:72:50:86:b1:bd:dd:
         f0:0c:29:13:fd:1b:02:06:8b:eb:7a:5a:9d:c3:89:6f:cf:29:
         3b:8b:1e:92:db:e0:0b:ef:a5:b7:81:84:be:ce:35:12:ca:7d:
         bf:9f:15:37:c5:fb:27:af:84:ca:24:9c:53:8e:5a:82:ae:bf:
         dc:b3:eb:1d:1a:60:0d:80:4a:86:37:aa:19:5c:0b:ce:2a:f4:
         f7:da:a1:5b:df:8e:1c:98:b4:e4:dc:72:17:b5:d8:04:d2:8f:
         af:f6:f8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:37:19 2026 by rpki-client