Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/a58a04b6-61ec-3bbb-97c0-ffc1bc1aed2a.roa
File:                     a58a04b6-61ec-3bbb-97c0-ffc1bc1aed2a.roa (raw, json)
Hash identifier:          mJWAz3/bTZPQsQWZdjU3vMpB+//BNVl5bdMJF3k+74w=
Subject key identifier:   18:E7:15:60:9A:FE:0C:9E:F5:C0:A6:BD:74:4B:C5:AB:01:BB:3F:04
Certificate issuer:       /CN=5d1f7581-692a-467e-ae71-d3c4921d0765
Certificate serial:       010D0C9F4328584EA79260FD7B62F2BF4ACD6400
Authority key identifier: FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/a58a04b6-61ec-3bbb-97c0-ffc1bc1aed2a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36321
IP address blocks:        74.80.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:60:fd:7b:62:f2:bf:4a:cd:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d1f7581-692a-467e-ae71-d3c4921d0765
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4049bf4b-bab4-4b5e-836c-fc659260d131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:25:9b:15:5f:8e:7d:d1:64:fb:fb:ab:9f:31:
                    c1:0e:49:cd:95:19:ed:ed:f7:78:5f:0a:7e:7e:b5:
                    dd:f5:1d:5f:31:4e:71:06:9f:33:9e:3e:c3:a0:83:
                    94:98:e6:03:28:d0:41:73:9a:e1:9e:f5:5c:b2:fe:
                    41:86:d4:78:5c:c5:1d:a6:da:ac:92:7c:d1:0a:ef:
                    49:6d:0f:96:f2:95:05:9e:19:86:6f:59:02:6a:19:
                    d0:28:9f:50:c0:6c:06:c9:c7:58:1e:b7:2d:20:8f:
                    c9:d3:f2:0b:b4:e7:d4:bd:43:e2:b6:3f:c8:13:84:
                    1c:49:09:3b:2d:60:1e:f1:fc:e5:e5:74:6c:f4:a3:
                    18:ae:32:1a:e9:ea:c8:01:bd:74:13:bd:b3:18:3c:
                    2c:53:03:b2:47:9f:44:1f:4f:af:c0:6b:28:3a:84:
                    8a:f0:a5:a0:be:a7:88:0e:25:e2:3e:9e:cb:02:72:
                    ed:f6:9a:fe:e0:92:f5:ef:1b:67:ad:34:a3:61:8e:
                    e5:2a:e7:40:46:4f:8a:35:51:27:90:55:06:3a:4a:
                    67:ad:57:3f:c2:26:12:1d:90:6e:90:cc:1d:3f:b9:
                    e9:e1:86:37:16:4d:8d:ca:20:0e:33:d3:25:0d:b9:
                    95:9f:85:ef:6e:84:75:b8:4d:54:e2:3e:54:d5:5a:
                    0e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E7:15:60:9A:FE:0C:9E:F5:C0:A6:BD:74:4B:C5:AB:01:BB:3F:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/a58a04b6-61ec-3bbb-97c0-ffc1bc1aed2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl

            X509v3 Authority Key Identifier:
                keyid:FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ee:3a:2a:eb:5f:69:2b:4d:90:b5:e0:4c:e3:f2:71:b0:a3:
         ab:1e:31:cf:df:a9:36:e3:d6:60:fa:04:a6:b5:59:aa:23:a6:
         df:b6:b6:51:91:a8:91:3f:99:32:89:1f:08:58:f0:aa:b3:8e:
         69:65:1f:2d:b6:ee:3a:83:bf:36:1d:e3:5e:f8:00:d9:ad:e9:
         da:7c:60:75:c9:20:2c:1d:e5:39:b4:63:46:79:14:f7:19:fa:
         59:7b:46:d8:e5:87:0a:a2:a6:70:35:d9:60:81:f0:f9:1a:71:
         4d:23:9a:72:c5:69:16:ef:68:2b:0d:22:53:20:09:3f:29:24:
         e2:0d:aa:5f:e9:28:94:74:a6:7c:50:26:b7:b4:a5:af:6c:27:
         b8:ff:bd:45:e5:1a:ed:2f:1f:27:3f:95:ba:7b:f1:e4:66:c4:
         8c:dd:97:b2:8e:07:25:dd:20:7d:22:44:16:45:bb:7c:91:88:
         59:0d:a4:eb:e4:ed:ec:28:93:54:70:c6:ef:20:a4:1a:21:df:
         32:63:fc:34:c3:7b:bd:d2:e3:7e:03:d4:95:23:b1:f3:3d:23:
         b0:69:e1:95:16:78:58:9d:9c:72:c4:37:23:75:32:6c:04:ec:
         31:1f:5e:4b:9e:de:c5:96:50:25:3d:e9:dd:3f:69:4c:56:26:
         37:54:98:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:57:02 2026 by rpki-client