Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5ef59d74-d97d-393f-bf09-169a13cc0f4c.roa
File:                     5ef59d74-d97d-393f-bf09-169a13cc0f4c.roa (raw, json)
Hash identifier:          IyZj0pEe/9R88PvQI+l+CXR2hhpesB3ieVLgIXbs8H4=
Subject key identifier:   53:29:EF:42:F3:1C:40:82:CF:69:F5:5A:4C:37:44:0C:4E:92:B2:00
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584A3050406BF4DE42D3B0F68780
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5ef59d74-d97d-393f-bf09-169a13cc0f4c.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     11404
IP address blocks:        74.80.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:40:6b:f4:de:42:d3:b0:f6:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=c20e618d-3d89-471c-b361-6ea0d8f46c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:3d:95:74:59:69:c9:71:0b:20:2f:36:e1:e9:
                    bc:cf:92:f2:f9:48:a9:76:d7:61:14:ac:6f:ae:86:
                    2d:37:43:8c:d3:89:2a:58:3d:f4:fb:c1:32:38:db:
                    32:86:33:d3:93:b3:69:54:45:2d:94:6c:57:fa:b4:
                    c3:59:0a:32:0c:fc:9c:f7:a1:c3:07:2d:eb:23:dd:
                    b7:b5:b6:e1:41:c0:88:34:09:f5:fe:77:1d:95:ab:
                    42:51:5d:e9:2c:90:45:0f:b8:35:bc:63:08:82:0b:
                    55:5d:66:0b:31:14:2d:7c:d4:cc:b6:98:ec:80:a3:
                    7c:a4:e8:31:b4:99:d6:14:b5:de:86:8a:d2:3c:e0:
                    aa:37:4b:2c:ef:6e:71:0b:6d:af:60:7d:4b:ed:b3:
                    73:a2:56:3e:e6:d9:da:1f:f0:04:01:75:b5:80:be:
                    7c:79:ae:48:14:4c:99:2d:44:d3:40:f9:76:e0:13:
                    67:7a:f5:80:44:b2:67:a8:37:84:22:6c:34:cc:e3:
                    e0:f7:ff:95:2d:9e:48:ca:cb:4a:8a:3c:66:51:6e:
                    ef:37:db:cd:54:3a:94:c5:58:56:79:df:e6:4f:cd:
                    35:c5:d9:29:76:86:e0:33:7b:d2:0b:c3:9d:f2:21:
                    d9:57:6c:0d:67:f0:82:ca:c3:66:96:f0:e2:22:57:
                    26:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:29:EF:42:F3:1C:40:82:CF:69:F5:5A:4C:37:44:0C:4E:92:B2:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5ef59d74-d97d-393f-bf09-169a13cc0f4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:40:f2:32:be:ff:60:95:44:88:e0:2d:be:1b:3b:96:e8:ed:
         5e:fd:d0:19:cd:9c:41:14:6c:af:f3:27:f0:bc:e5:77:60:21:
         db:98:a5:d0:29:aa:62:f4:db:88:fe:7f:73:cf:8b:2e:ac:5d:
         6a:fb:d1:d5:4f:a0:96:a9:d6:81:8f:68:00:26:2b:00:f6:29:
         9b:1c:e3:fd:78:48:e3:a2:09:26:94:e2:c8:39:83:64:3e:ca:
         29:3d:6b:e2:ea:22:4a:4d:06:f6:e6:96:65:a5:15:5c:f9:93:
         93:03:4d:63:3e:6b:11:a0:38:0f:ea:e6:d2:9b:80:ee:42:e6:
         1a:aa:15:ad:4e:eb:0c:d2:b2:38:ca:a8:e3:49:be:dd:30:64:
         82:64:0e:b8:4c:95:d8:02:91:c9:d5:d8:1f:3c:86:ae:ce:de:
         9a:a1:c8:71:19:4d:90:07:3f:c5:bd:4f:9e:10:76:5c:61:22:
         62:9f:dd:21:23:7b:ce:bc:e4:2b:51:c6:32:04:01:bf:6a:d1:
         65:39:a2:6b:18:d2:aa:3f:43:4a:5e:7f:9e:c4:26:65:7b:67:
         be:ae:a4:62:75:6e:72:13:ab:da:03:75:c2:34:d6:a3:c6:9e:
         4b:7d:b6:ac:55:0d:00:99:f6:1c:86:15:a0:fa:08:0c:96:73:
         61:06:d8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:29:01 2025 by rpki-client