Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/c592dbd8-2fc3-3da7-bc76-52e82be2dc06.roa
File:                     c592dbd8-2fc3-3da7-bc76-52e82be2dc06.roa (raw, json)
Hash identifier:          7PYcZZ05kM5WPdgV4FMNxhREk43F7JSyct9XiTtT2sI=
Subject key identifier:   A0:E9:44:6F:07:EE:E8:4B:9B:7F:27:9F:42:D8:1A:EF:A8:43:F9:15
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584B5B31AA8ECDB911993F20D600
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/c592dbd8-2fc3-3da7-bc76-52e82be2dc06.roa
Signing time:             Mon 29 Sep 2025 14:26:20 +0000
ROA not before:           Mon 29 Sep 2025 14:26:20 +0000
ROA not after:            Sun 28 Dec 2025 15:26:20 +0000
asID:                     13737
IP address blocks:        74.80.149.0/24 maxlen: 24
                          74.80.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:31:aa:8e:cd:b9:11:99:3f:20:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Sep 29 14:26:20 2025 GMT
            Not After : Dec 28 15:26:20 2025 GMT
        Subject: CN=34dc2ebf-8558-4640-8b6f-04f3f81e0021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6b:bd:e0:5e:3b:db:f9:bf:48:72:3a:29:a1:
                    92:ea:c0:89:41:d4:75:38:99:b5:c0:d6:c7:cb:d1:
                    86:11:12:cd:cf:8c:dd:93:b5:96:93:eb:b3:6d:88:
                    28:a9:fc:35:69:0b:8a:93:ec:9a:cf:11:dd:0f:dc:
                    02:e3:51:f0:06:f6:16:dd:66:16:39:7c:e3:45:d4:
                    54:bd:a8:3f:fd:9b:1b:8e:96:d0:c6:8c:b1:2d:fb:
                    9d:a0:5f:bd:17:6b:c9:00:f1:9a:39:39:02:a3:51:
                    dd:06:e3:7e:17:5c:71:92:16:aa:e0:43:d6:f2:3d:
                    ef:08:00:56:08:aa:e9:96:9e:19:48:33:aa:65:9a:
                    30:c4:10:91:94:d8:32:54:de:07:fe:e4:01:f9:34:
                    2d:9c:78:27:81:a3:22:3d:62:85:d3:0f:ad:c0:59:
                    54:5d:1c:70:44:49:91:de:14:60:13:8e:bf:a3:83:
                    85:42:f9:bb:42:15:ca:84:65:35:ea:23:e7:5d:a0:
                    a4:70:84:78:a8:cb:b8:46:da:7c:f3:81:3e:78:b1:
                    ed:05:7f:10:a2:37:fa:44:d8:af:51:cb:8a:39:c6:
                    92:a4:20:f0:a9:c3:83:b3:6c:33:30:77:8c:c9:17:
                    85:5f:b4:03:16:dc:1c:a1:86:3f:42:cf:29:73:64:
                    64:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E9:44:6F:07:EE:E8:4B:9B:7F:27:9F:42:D8:1A:EF:A8:43:F9:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/c592dbd8-2fc3-3da7-bc76-52e82be2dc06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.149.0/24
                  74.80.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:41:14:a5:6d:89:16:2a:5e:fd:35:01:fc:f3:6c:45:3d:06:
         f5:eb:48:e4:a1:f3:90:02:b0:88:1d:2c:5c:c9:1f:03:16:ad:
         41:ef:86:e7:1c:b8:22:ee:fc:23:ae:b3:7f:d5:4d:16:b3:2b:
         16:fc:8f:9e:5f:09:0f:05:b4:b6:08:87:46:13:5f:85:35:28:
         6b:31:c9:f2:fd:bd:41:47:1e:d7:9d:d0:70:d9:d6:9e:21:24:
         5e:c3:db:0a:a1:f0:ca:cf:89:91:5e:9c:e6:e7:a9:de:22:c2:
         42:3e:a3:81:72:10:a5:26:dd:16:6d:7f:fd:15:a4:72:46:e6:
         c5:30:84:1d:31:b2:68:77:c7:84:1f:55:84:a2:b8:c6:cb:23:
         2e:3e:9d:47:38:82:fe:fa:ae:a8:9d:26:c4:13:27:05:c2:ac:
         5a:8d:9b:2b:e7:67:df:bf:f4:13:38:94:20:64:b8:b2:c4:32:
         50:af:74:cc:e8:e9:a8:c9:df:47:bd:ca:fe:ac:49:59:da:60:
         1f:fe:23:07:74:57:6c:a2:91:6f:d7:80:ec:89:d3:2c:5a:4e:
         55:ed:11:12:f5:c4:d4:a2:75:98:86:37:c6:90:3f:8e:15:de:
         7d:25:4e:45:d2:c2:a5:e0:d7:16:52:b9:91:24:3d:24:a3:f5:
         8b:7c:02:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 18:21:45 2025 by rpki-client