Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/7e14fe3f-046b-3698-b378-0410e8c01b3a.roa
File:                     7e14fe3f-046b-3698-b378-0410e8c01b3a.roa (raw, json)
Hash identifier:          VA/Y4/cCCjoxqybh9pDtPSJ79jtIh5EScxl1BPFLWWk=
Subject key identifier:   8F:8E:6B:4C:FC:AE:43:D5:D3:B3:81:8B:9E:E1:60:62:07:12:DE:7D
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584A7FE09158A5D7F101C524A420
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/7e14fe3f-046b-3698-b378-0410e8c01b3a.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     20057
IP address blocks:        74.80.151.0/24 maxlen: 24
                          74.80.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:91:58:a5:d7:f1:01:c5:24:a4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=3ee0d2c7-1166-4228-a55a-3c9f3124e253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:44:2a:64:f3:e5:ca:7b:0f:6a:0e:19:d0:17:
                    73:ff:aa:5a:b7:b1:59:07:17:37:ae:47:15:27:b8:
                    99:c1:47:31:27:31:a3:44:7b:bf:db:c6:7a:4b:36:
                    c9:f8:f7:99:a2:0b:54:ee:b3:af:ae:b3:1f:ec:a7:
                    63:cb:8e:5d:aa:b0:39:e9:e8:51:bb:29:fc:6b:17:
                    56:ca:46:43:f4:36:bf:7f:50:25:16:b8:0d:a9:9a:
                    e2:f6:ec:86:d7:7f:e4:1f:ea:5c:99:f8:f7:4a:cd:
                    95:8e:85:68:3d:d8:92:f8:94:3a:dc:7f:0e:32:5b:
                    5d:d5:61:6e:36:41:66:76:03:5c:07:39:fe:9b:30:
                    47:9a:83:1e:f7:a2:6b:04:cd:55:75:75:e6:0c:08:
                    8c:97:d1:17:c3:cd:a8:34:1d:2b:ad:17:c4:b9:32:
                    ff:c7:13:77:75:6c:5f:83:05:a4:c1:58:e4:f9:a2:
                    50:d5:e3:70:e1:6b:07:3f:a5:53:a6:30:d9:46:95:
                    85:2b:6e:e2:6e:67:27:a8:12:d5:56:9b:be:51:31:
                    ac:24:79:7d:a4:9d:15:16:91:1f:03:87:8e:7c:ac:
                    9e:41:81:0e:27:7e:2c:74:67:d2:79:01:10:23:72:
                    80:a9:6b:51:3d:1e:24:a9:34:62:d6:7c:40:a0:1e:
                    20:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8E:6B:4C:FC:AE:43:D5:D3:B3:81:8B:9E:E1:60:62:07:12:DE:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/7e14fe3f-046b-3698-b378-0410e8c01b3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.151.0/24
                  74.80.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:f7:77:aa:88:2c:03:a1:1a:71:15:5d:5c:58:05:c5:4d:f6:
         66:86:13:e0:76:84:27:b2:8a:f5:9a:1e:d7:a7:f5:5c:11:49:
         47:40:4e:57:81:dd:36:71:44:ba:da:42:ee:20:9a:a7:d0:f4:
         38:2a:d8:d1:58:98:17:d7:fd:3d:1b:67:4c:fa:d4:96:d5:3e:
         9a:d9:c5:84:c9:5e:7e:5b:dc:03:59:ef:c2:8b:a9:89:5e:8f:
         d8:82:a4:83:b3:49:00:86:7c:02:fc:ee:05:76:47:7f:1d:e0:
         59:6b:c8:96:32:d0:0c:93:80:f6:36:1c:75:6b:f6:f0:07:7a:
         39:20:b1:ce:c5:ec:1a:2a:2f:36:ad:32:5d:bc:68:ad:3b:aa:
         fd:75:e0:58:63:db:f6:2c:74:eb:0a:94:27:b7:35:b2:89:40:
         1d:18:12:f4:7f:b7:3d:66:e2:8c:93:2e:42:07:2d:0c:a0:ed:
         4d:59:59:5a:5f:07:23:bc:ba:df:de:b5:c5:3c:13:d8:04:ee:
         1f:28:4b:45:30:d6:d2:36:8c:78:86:99:fc:e1:c4:df:3c:d7:
         66:e2:be:96:ac:ea:7c:3a:18:cf:2b:0e:38:c5:d2:a1:ae:8a:
         c6:22:44:ac:29:02:e3:25:82:32:e9:a0:1a:04:68:22:b0:8f:
         ba:b1:8c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:13:07 2025 by rpki-client