Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/a2c3899c-531a-337d-8d6c-047bf9cf6907.roa
File:                     a2c3899c-531a-337d-8d6c-047bf9cf6907.roa (raw, json)
Hash identifier:          dnkYYKbdDn2NjgDA6AR+tMmC4IIAveRJIqnFY8F9bJ4=
Subject key identifier:   BD:9C:2E:86:A8:32:74:1E:9C:47:01:B1:D1:76:D0:4A:AE:35:69:7D
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F4328584D6A6D049533BF9EFF520D2000
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/a2c3899c-531a-337d-8d6c-047bf9cf6907.roa
Signing time:             Mon 06 Apr 2026 10:56:55 +0000
ROA not before:           Mon 06 Apr 2026 10:56:55 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     46450
IP address blocks:        74.80.230.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:6d:04:95:33:bf:9e:ff:52:0d:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: Apr  6 10:56:55 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=68023baa-2eca-44c2-ae75-d6870167c77d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:91:6d:66:f9:3b:66:d7:cc:34:eb:0c:cb:d6:
                    8f:40:4a:92:b9:60:e4:a8:d0:64:36:d3:07:15:28:
                    38:02:46:56:7f:01:42:e4:b2:53:2f:c4:f6:7e:cd:
                    89:df:af:5c:97:81:df:fd:42:ea:a9:35:09:c0:35:
                    53:40:80:22:d3:aa:5a:7e:51:55:26:50:db:ef:2f:
                    3c:2b:09:c1:60:1c:7a:0e:a1:9b:d8:62:11:fe:a1:
                    ae:11:0f:d7:72:93:fb:d7:a6:ce:99:ea:86:42:cf:
                    42:7f:8b:82:19:5f:7c:ea:38:89:1c:a1:60:62:aa:
                    b0:f1:e9:fb:02:cb:08:93:88:df:3a:8b:5d:4a:00:
                    5a:1e:03:60:12:9b:7e:28:cf:6a:5e:c1:18:dc:ba:
                    96:b9:8b:ca:14:60:b5:54:a6:01:b1:8d:08:55:f0:
                    c6:41:47:4c:94:3e:7e:01:78:ce:63:39:5e:29:df:
                    b5:dd:c9:3e:22:99:eb:8f:91:3e:e8:ab:b7:46:28:
                    4c:e2:4c:89:03:9c:42:5d:2f:d5:f2:33:0c:fb:1a:
                    73:b0:2d:b4:fc:c9:ed:1d:a6:9f:11:d8:b0:5f:85:
                    93:ab:f3:6f:2e:0d:4a:a8:ef:9f:a1:e6:1a:71:72:
                    c9:8f:5d:36:78:9c:fc:a1:88:9a:c8:72:ea:a0:dc:
                    72:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9C:2E:86:A8:32:74:1E:9C:47:01:B1:D1:76:D0:4A:AE:35:69:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/a2c3899c-531a-337d-8d6c-047bf9cf6907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:23:4a:48:fa:c2:6a:c2:59:a3:ef:d0:2a:58:bf:32:2d:99:
         ca:13:0b:29:50:27:f7:0b:5b:2b:01:a6:67:a8:cf:7b:ee:f9:
         0c:c7:dc:ea:b7:da:c3:d3:3c:48:b7:2f:86:f9:b3:e3:00:57:
         f7:34:bf:cd:b3:26:5c:39:70:13:95:00:7c:f1:b2:c7:77:9f:
         56:74:4b:b9:fb:b9:9c:a3:2c:f0:5c:b0:41:da:e5:0b:c5:d5:
         25:27:d1:3e:03:69:aa:51:7b:66:2e:fe:3e:a0:d5:8d:f7:77:
         9a:e5:5a:d0:52:fe:bc:09:c6:ce:0d:7e:a7:85:e2:6f:ef:f4:
         39:a5:90:8f:0d:9c:33:c4:ac:34:03:19:54:34:2b:23:93:2d:
         47:12:db:67:12:37:d0:93:de:36:d7:27:d3:f0:d4:0e:1c:bf:
         d9:aa:cc:3d:12:f1:b5:34:4f:27:e4:f6:b2:89:21:11:f5:96:
         b5:5d:3f:b4:dd:1d:4a:4b:b3:1f:b4:32:0f:71:38:35:03:3a:
         6d:b6:ef:8a:a6:1b:58:ad:d8:03:84:7c:2c:7c:a2:26:44:03:
         d9:3a:cd:ed:5b:c2:ac:2a:a0:87:e3:ce:d7:3d:95:5e:da:31:
         fe:6e:2e:6c:8d:ff:91:29:fa:55:b5:6f:b2:6c:c1:44:d1:dc:
         63:db:42:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:56:11 2026 by rpki-client