Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/a08fca4d-f5a4-3731-b5c3-933299bdee84.roa
File:                     a08fca4d-f5a4-3731-b5c3-933299bdee84.roa (raw, json)
Hash identifier:          3p7OGYS28EwdWQpbK02I/Jn3o7NTp+RcUqEk+I0tGW8=
Subject key identifier:   C1:1C:A2:9D:BA:65:E1:A2:9B:A5:2C:C0:18:A1:16:D9:A4:62:96:A7
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584A9BA79997FB26B019081EA680
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/a08fca4d-f5a4-3731-b5c3-933299bdee84.roa
Signing time:             Tue 22 Jul 2025 23:48:45 +0000
ROA not before:           Tue 22 Jul 2025 23:48:45 +0000
ROA not after:            Mon 20 Oct 2025 23:48:45 +0000
asID:                     398704
IP address blocks:        74.80.149.0/24 maxlen: 24
                          74.80.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:a7:99:97:fb:26:b0:19:08:1e:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Jul 22 23:48:45 2025 GMT
            Not After : Oct 20 23:48:45 2025 GMT
        Subject: CN=05552c52-cc94-44b5-b15e-62d4ecba7c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:75:f2:46:ae:26:5f:ab:e8:93:e0:10:71:25:
                    53:2b:ed:47:d4:3a:b3:4f:64:82:a1:2c:d9:a6:21:
                    dc:99:80:94:8c:40:72:e5:97:26:22:49:a3:38:35:
                    3b:ea:d2:bb:39:a3:a7:03:e0:97:43:d2:1e:cd:e7:
                    0f:bc:de:4a:75:de:26:4a:39:f6:aa:70:64:e6:f2:
                    59:32:16:a8:16:fc:9a:c0:01:56:e6:dc:4c:9b:8c:
                    d5:a3:9a:db:bd:83:f3:19:36:f5:61:c6:5a:3b:ab:
                    ce:9d:3f:79:bd:f2:72:0c:00:67:b6:86:a6:52:e3:
                    bb:af:f5:b6:1f:82:0e:c4:4c:df:0c:5a:4d:2a:93:
                    34:e1:b4:77:7f:6d:f3:7d:0d:95:37:52:f0:c6:f9:
                    fe:7e:8d:62:b3:a8:cd:09:21:e3:57:a3:29:b7:92:
                    94:4c:f0:58:5e:58:be:8b:db:19:d2:cd:58:d1:03:
                    c3:f3:4d:a2:f6:c2:3f:ac:d9:88:80:4a:bc:26:0b:
                    bf:77:d7:65:4b:e9:a7:1f:99:5d:ee:85:e4:8d:02:
                    d8:c5:19:bb:d0:40:7f:72:90:69:a5:43:88:7c:3f:
                    79:8a:ac:52:84:df:c9:42:53:cb:14:84:d9:35:c0:
                    e3:5d:0b:e2:28:37:0a:88:40:6e:e4:46:fd:e9:cc:
                    d8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1C:A2:9D:BA:65:E1:A2:9B:A5:2C:C0:18:A1:16:D9:A4:62:96:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/a08fca4d-f5a4-3731-b5c3-933299bdee84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.149.0/24
                  74.80.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:5a:d1:3e:77:e9:ab:dc:52:4b:5b:18:f9:70:9a:77:96:c2:
         18:ee:3c:b5:6f:7a:06:7c:87:1d:b7:5b:83:6a:19:2b:b6:b7:
         d2:13:87:30:c6:04:d3:0a:18:da:a7:a9:e0:03:c1:35:ee:4f:
         38:5d:9a:32:fa:d7:41:4a:f5:71:74:1b:7e:52:bf:d3:b8:aa:
         58:38:f4:eb:67:3a:42:da:10:ad:74:c2:07:27:cb:3f:11:9d:
         23:ff:50:c8:68:d1:f1:9c:e9:b7:4b:68:4c:4d:df:3b:fb:bf:
         53:70:7a:18:e7:0c:7e:95:1d:19:07:e6:9f:9f:f7:6c:96:fc:
         f7:4e:92:c5:1a:42:1b:5a:81:a4:f3:a3:64:24:72:90:88:1c:
         12:8f:ab:55:ab:de:dd:61:2d:5a:4c:67:2b:49:64:b9:42:26:
         be:27:ef:27:6f:b5:f7:d2:ba:fc:8e:21:7e:57:98:99:0d:18:
         d7:d7:93:1d:9c:8d:54:23:73:e8:a3:00:ca:ef:aa:7c:93:f5:
         e2:bc:57:ab:41:10:b7:98:79:96:fc:7f:c1:53:95:be:10:a0:
         10:54:a4:fe:84:a2:1e:e4:3a:7d:7f:34:9e:2b:af:e4:fd:f1:
         29:1f:99:ae:2f:9c:b4:72:b9:e8:86:ee:06:21:85:17:8d:ef:
         79:cc:f1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:35:28 2025 by rpki-client