Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/881b5bdc-70e4-3447-b2e1-b18fdbb9094f.roa
File:                     881b5bdc-70e4-3447-b2e1-b18fdbb9094f.roa (raw, json)
Hash identifier:          fFHaT80D6S7yCCC7G8UYrimIpBSF7ixml2qH7ymp0+E=
Subject key identifier:   A4:A2:FD:46:B8:3E:14:E9:D3:5F:5C:42:CA:CE:E5:AD:06:CC:C5:D6
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584BB7EB9CBB17263F90A2E66000
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/881b5bdc-70e4-3447-b2e1-b18fdbb9094f.roa
Signing time:             Sat 01 Nov 2025 19:35:21 +0000
ROA not before:           Sat 01 Nov 2025 19:35:21 +0000
ROA not after:            Fri 30 Jan 2026 20:35:21 +0000
asID:                     54600
IP address blocks:        67.214.181.0/24 maxlen: 24
                          74.80.144.0/24 maxlen: 24
                          74.80.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b7:eb:9c:bb:17:26:3f:90:a2:e6:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Nov  1 19:35:21 2025 GMT
            Not After : Jan 30 20:35:21 2026 GMT
        Subject: CN=46092564-2c5e-4e76-a0dc-2c08edc9b49f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5f:35:be:58:1b:46:53:2f:51:65:b9:65:cf:
                    ad:d0:c9:d5:d7:2b:95:32:23:e5:90:c4:79:dc:60:
                    4b:46:d5:4a:81:ea:7a:3b:29:f5:9a:f3:35:3d:28:
                    42:bd:a9:79:98:4a:d0:d3:9e:13:05:6a:77:91:6f:
                    48:e2:44:2b:af:ba:ce:1a:08:17:7e:d2:ac:22:2c:
                    9f:6b:c2:27:7c:61:2f:ec:10:2b:74:b5:bf:a8:de:
                    d2:2c:b2:d3:b0:c9:19:c0:88:c4:20:5f:53:a7:06:
                    5a:9e:84:c5:17:1d:40:64:1b:d9:56:46:00:e7:f3:
                    fa:c9:d0:87:f4:b6:97:3e:be:e3:eb:22:c0:ca:64:
                    bb:e0:e1:ab:14:e4:05:85:b8:d3:0c:15:6c:ad:33:
                    ba:71:fc:08:b1:4b:e9:cc:19:18:c4:ba:af:33:39:
                    4c:79:e5:68:df:0f:d2:28:a6:1c:2e:bd:2c:5e:dc:
                    32:3c:6b:1c:5d:6e:c6:bf:b2:27:97:a7:00:1b:9c:
                    c1:f1:02:76:6d:de:71:9b:0a:13:1d:2b:01:ea:93:
                    0e:18:c9:ba:3e:1e:00:2e:ef:d7:54:9e:c8:68:62:
                    da:84:8f:0f:d5:f7:61:75:12:0a:f5:d4:74:11:ff:
                    ed:80:f8:0a:75:7c:a4:8b:6c:15:53:5e:00:8a:52:
                    4a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A2:FD:46:B8:3E:14:E9:D3:5F:5C:42:CA:CE:E5:AD:06:CC:C5:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/881b5bdc-70e4-3447-b2e1-b18fdbb9094f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.181.0/24
                  74.80.144.0/24
                  74.80.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:4b:4b:a5:bc:ba:ba:ae:0f:c8:ed:63:eb:b7:eb:ab:82:cd:
         03:7d:3e:ad:71:e2:0b:1f:35:e9:3f:a1:bc:ae:75:be:59:65:
         7e:0b:65:fe:a6:7c:4e:6b:aa:54:88:2c:cb:c9:9f:42:0f:3d:
         aa:ca:f2:8f:82:bb:86:39:89:1d:ed:4d:b0:b6:c9:ba:dd:3e:
         b3:75:c4:52:81:4d:89:25:41:86:a4:4e:5c:aa:b3:5e:0b:5d:
         ea:0a:b3:20:23:cf:c6:de:ba:1d:eb:f8:b9:c6:ad:bc:76:53:
         8c:05:22:b5:12:ba:23:23:cb:f8:a4:5d:33:c5:d7:92:11:84:
         5f:9e:14:36:b6:8d:05:57:9c:e8:c3:2d:cb:1d:03:92:dd:20:
         b5:93:4e:e1:19:d7:0b:89:96:ee:22:1a:17:bb:99:62:1d:43:
         c1:7e:d0:12:63:bf:c2:fa:9f:f3:09:e4:d3:b7:c7:97:48:cd:
         72:4c:d2:c6:40:cd:da:68:d9:74:c9:f7:2d:38:fd:4e:f3:73:
         48:b7:ac:58:be:3b:7b:ef:67:ca:0f:4f:3f:7e:5a:b9:04:c1:
         21:96:ed:72:dc:43:23:7f:04:7d:d0:63:3d:43:50:4d:33:03:
         ce:6d:72:08:0d:c4:41:ac:5f:26:c6:09:b1:a3:3a:3b:92:e3:
         c6:82:d4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:36:33 2025 by rpki-client