Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/7e14fe3f-046b-3698-b378-0410e8c01b3a.roa
File:                     7e14fe3f-046b-3698-b378-0410e8c01b3a.roa (raw, json)
Hash identifier:          Wr576TBVeyZ2bvOCK9EfcqSluJ9+DMh9Z2/sMeknUxM=
Subject key identifier:   CB:2A:EE:1A:34:6F:50:FB:16:0B:96:B5:C6:61:44:6D:9E:5D:4B:FD
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584E016B2CF6FB95EDAE6F495880
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/7e14fe3f-046b-3698-b378-0410e8c01b3a.roa
Signing time:             Sat 30 May 2026 13:00:10 +0000
ROA not before:           Sat 30 May 2026 13:00:10 +0000
ROA not after:            Fri 28 Aug 2026 13:00:10 +0000
asID:                     20057
IP address blocks:        74.80.151.0/24 maxlen: 24
                          74.80.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:01:6b:2c:f6:fb:95:ed:ae:6f:49:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: May 30 13:00:10 2026 GMT
            Not After : Aug 28 13:00:10 2026 GMT
        Subject: CN=40f8a7c1-3f67-4550-9309-94d5574fe6f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1b:34:b0:ec:04:95:db:2b:bf:48:2d:a8:9f:
                    1f:b5:8f:1e:35:00:42:01:97:1f:3a:ed:4d:af:c8:
                    86:70:5e:ae:53:ec:4e:92:d9:36:c7:a1:cb:86:ac:
                    b3:3e:e0:2a:d0:8e:12:25:d2:4d:02:93:07:6f:f6:
                    96:d8:5c:c0:32:f9:8b:58:69:77:6a:7b:d7:17:41:
                    5c:47:3d:64:25:94:c1:56:81:dc:33:f4:f5:dd:02:
                    00:a7:58:bd:7e:63:5d:23:cd:fe:e2:4d:21:38:f8:
                    21:2a:98:2c:9a:8a:d0:4d:aa:9b:21:78:fb:94:f7:
                    21:25:75:37:aa:13:64:fb:44:9e:5b:cc:c1:0a:2a:
                    28:92:1a:eb:f9:32:d1:e1:ce:90:32:06:2a:95:9a:
                    1e:82:69:c1:de:f6:5c:d6:b7:fe:d2:81:a4:cb:35:
                    f9:6a:53:e9:9e:f7:8e:52:75:bc:7c:64:de:7b:00:
                    50:b7:04:22:a1:2f:f4:7c:4c:f5:57:5b:14:8e:6f:
                    cc:bb:63:a2:c6:95:b2:ce:d8:8a:24:2c:08:c3:ee:
                    69:d9:e3:ad:a1:bc:83:d9:9b:8d:8e:3f:a2:03:11:
                    51:dd:5e:eb:ad:99:fc:42:f8:2d:2b:33:09:ab:2d:
                    24:69:b9:7a:7c:d3:17:e1:f7:97:02:69:a2:13:bd:
                    f0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2A:EE:1A:34:6F:50:FB:16:0B:96:B5:C6:61:44:6D:9E:5D:4B:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/7e14fe3f-046b-3698-b378-0410e8c01b3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.151.0/24
                  74.80.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:2f:e8:0d:bd:52:ce:fe:63:bd:27:e8:10:94:16:66:07:ba:
         8d:74:04:6b:04:4c:4e:01:b9:81:43:95:be:7b:41:7c:f8:f9:
         6b:35:70:e3:3d:83:84:db:2e:15:d9:32:fe:7f:fe:9f:9e:b8:
         00:f0:50:43:37:37:c9:5b:38:04:98:29:32:6b:f2:af:ea:4a:
         71:73:cf:a9:a3:51:e6:27:95:aa:cb:75:7d:dc:d9:bb:3a:ee:
         31:7f:6d:13:b4:81:28:9a:ce:72:7a:c1:fb:37:2c:58:30:69:
         1b:6b:87:2c:a9:18:85:ed:d5:f3:7d:90:fc:e9:2f:90:32:d7:
         27:15:9d:23:da:2e:3b:df:51:ff:52:17:89:d6:0c:fb:47:76:
         70:46:f0:e4:92:db:9a:5c:8a:51:9f:fa:59:c3:f5:28:a9:23:
         10:36:d2:f5:e7:ef:7b:a4:2c:24:fc:dc:f0:1c:c1:ff:5f:26:
         34:91:dc:c4:f7:3a:41:d7:f0:93:78:ab:4a:16:31:eb:38:ce:
         2e:52:a6:ab:cf:3e:ca:4d:f7:d7:1a:94:a9:a4:16:3a:ff:79:
         a9:be:db:95:1c:b3:36:16:9d:57:c3:6c:b1:2b:13:32:e5:ff:
         36:54:7a:2e:81:f5:0e:d2:c2:a4:42:d9:9d:46:e3:72:99:cd:
         31:4e:e4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:27:06 2026 by rpki-client