Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/1b1b6d1c-4786-39cc-9485-c8554d7f2833.roa
File:                     1b1b6d1c-4786-39cc-9485-c8554d7f2833.roa (raw, json)
Hash identifier:          O31rd7q28MyQ6TeWSkEEwJkmIrkGVMrsUNL6wg7wN8o=
Subject key identifier:   06:C6:8A:48:EF:B1:00:20:5E:C2:E5:F0:EC:3C:6C:5E:E1:2B:B1:57
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584B99D79A9F300F7924C91C85AC
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/1b1b6d1c-4786-39cc-9485-c8554d7f2833.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     7018
IP address blocks:        74.80.146.0/24 maxlen: 24
                          74.80.147.0/24 maxlen: 24
                          74.80.152.0/24 maxlen: 24
                          74.80.153.0/24 maxlen: 24
                          74.80.158.0/24 maxlen: 24
                          74.80.159.0/24 maxlen: 24
                          74.80.166.0/24 maxlen: 24
                          74.80.167.0/24 maxlen: 24
                          74.80.172.0/24 maxlen: 24
                          74.80.173.0/24 maxlen: 24
                          74.80.176.0/24 maxlen: 24
                          74.80.188.0/24 maxlen: 24
                          74.80.189.0/24 maxlen: 24
                          74.80.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:9a:9f:30:0f:79:24:c9:1c:85:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=8b86b4ca-8ff4-4918-ad28-3c7aa7f3128c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:12:d0:c3:7a:21:5c:c8:e9:8c:4b:72:ee:9a:
                    d6:b5:e8:eb:05:7a:e7:d5:e0:c9:45:68:21:c7:4c:
                    d6:b9:03:47:50:05:c9:6b:9e:67:9e:2d:87:c3:fd:
                    45:79:3a:47:b1:c7:5e:6e:63:43:0c:0c:ed:56:60:
                    e3:c9:ec:40:a5:9d:f0:0b:64:4c:50:71:ef:5c:a0:
                    17:47:40:97:51:af:3f:1c:59:8a:96:da:65:f4:96:
                    bc:67:cb:0a:9a:7d:40:29:6c:c4:ae:6f:91:b5:bb:
                    2d:30:77:7f:11:ca:ac:59:05:9e:f8:18:0f:4c:f3:
                    50:82:11:ac:b3:67:b5:5e:64:f6:a5:7f:b9:c6:ad:
                    e8:e5:a3:a1:64:fc:a0:0f:a6:51:c1:b0:e9:cc:d9:
                    f7:bb:d9:ef:43:49:94:2f:08:7b:ca:04:cb:a9:fb:
                    8b:99:91:3d:e1:d5:8a:ef:69:86:0a:0b:d0:72:ea:
                    74:76:7b:79:ae:1c:4d:5a:b8:10:f6:15:94:43:93:
                    07:b6:fe:5c:3b:e4:59:87:7b:81:58:75:a6:38:4e:
                    d2:64:57:c8:0a:cf:c0:69:2d:4b:21:d0:95:59:e9:
                    af:45:e8:21:cf:ac:71:7d:b2:ab:4e:69:5d:7a:1f:
                    f9:5a:61:9d:9f:80:76:9d:72:bf:05:7a:47:6d:37:
                    5d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C6:8A:48:EF:B1:00:20:5E:C2:E5:F0:EC:3C:6C:5E:E1:2B:B1:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/1b1b6d1c-4786-39cc-9485-c8554d7f2833.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.146.0/23
                  74.80.152.0/23
                  74.80.158.0/23
                  74.80.166.0/23
                  74.80.172.0/23
                  74.80.176.0/24
                  74.80.188.0/23
                  74.80.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e8:d8:cb:52:36:83:41:55:a4:6e:77:e8:cf:61:e8:f0:db:
         e4:cc:7d:aa:6c:15:cd:42:59:88:50:04:28:fe:72:98:74:ee:
         f7:8c:c7:f7:76:d1:1b:4d:a9:dd:91:02:b5:f5:bf:50:f8:41:
         20:9a:0f:82:aa:c0:45:56:47:42:c9:c9:89:ec:40:8b:9a:84:
         50:5d:ed:ba:75:db:25:23:46:5a:21:b3:15:10:0e:30:b3:a6:
         14:69:0a:9d:15:9c:00:8c:f6:66:81:5f:e7:80:d4:64:dc:41:
         9f:bc:80:6c:56:22:05:50:bc:bc:73:bb:dd:73:9e:93:00:28:
         28:95:e1:59:eb:4e:c7:84:ba:c3:bb:ea:3f:b3:85:8c:82:05:
         ce:d3:de:33:06:51:a8:c5:6d:c3:7e:d2:dd:a8:f4:1b:bd:06:
         6c:5c:38:e4:24:c7:ea:68:c9:52:9e:8f:01:71:76:3e:05:6b:
         bb:eb:a0:b5:d2:1c:4b:6a:ee:a1:df:e2:d3:b1:b2:00:c4:19:
         d9:91:22:d6:d7:d5:7f:a2:fe:b0:fa:0e:b4:d8:07:dc:24:01:
         26:65:1d:c1:1e:7e:0f:ab:3c:70:bd:ef:6c:85:bf:66:f8:3b:
         e3:76:53:e0:01:af:08:02:75:ae:ed:24:d3:f2:5f:9f:01:34:
         bf:86:9a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:04:34 2025 by rpki-client