Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/f23f0547-2385-3d82-b362-a65cce74e39c.roa
File:                     f23f0547-2385-3d82-b362-a65cce74e39c.roa (raw, json)
Hash identifier:          HN4djcFkEhET9c0ykoketTZZZrBAu1UUvfF/SiFWRzY=
Subject key identifier:   1C:1C:5E:E6:E4:10:1B:35:F2:53:5F:0E:E4:1A:7C:F2:5C:ED:B1:9F
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584B1C36D3371C873990B9818780
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/f23f0547-2385-3d82-b362-a65cce74e39c.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     7029
IP address blocks:        74.80.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:d3:37:1c:87:39:90:b9:81:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=04589dba-93d1-4c5d-b4ad-7d42e5beb280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:61:ae:e7:46:2b:7b:1a:cf:dd:f4:9c:5d:1c:
                    cd:66:19:0b:80:cd:e5:57:d3:32:84:7d:ea:fa:11:
                    b1:ae:2e:e7:3a:c2:18:b4:6f:93:09:02:d8:70:80:
                    82:42:fc:e0:28:16:5d:d5:8f:32:06:cf:ef:4e:27:
                    8b:b7:21:a3:d9:cd:15:f9:bf:47:24:d4:a4:81:22:
                    77:f7:05:d8:57:37:14:d7:cf:ac:72:a9:49:0c:3f:
                    9e:90:f5:08:64:8a:55:84:8a:1c:f4:5a:b4:54:cf:
                    85:c4:5f:1b:af:c0:b8:c9:bd:9f:13:db:46:e0:8e:
                    a8:2f:c8:2e:0e:d5:cf:2e:f6:79:ec:49:1c:cc:59:
                    1e:b6:59:af:ea:86:85:d1:f9:88:f4:4b:c4:cc:05:
                    4a:a4:ef:93:55:bd:d3:4d:eb:93:9d:2e:3b:e2:f5:
                    25:3a:c4:84:f2:5f:c9:bc:a1:83:25:5b:95:60:de:
                    30:bd:f8:a9:e0:6e:b0:df:d9:d5:b9:ff:50:76:63:
                    ee:d0:c8:a2:a1:4a:d8:3a:23:02:e9:ae:c8:d7:3d:
                    15:d0:51:8b:53:40:0e:a0:3a:5e:35:15:ce:a7:30:
                    fc:ba:cb:dc:90:ce:7b:f1:53:77:2e:93:b7:f9:f8:
                    50:31:08:2d:3a:be:89:92:e4:01:3b:c5:62:4e:82:
                    83:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:1C:5E:E6:E4:10:1B:35:F2:53:5F:0E:E4:1A:7C:F2:5C:ED:B1:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/f23f0547-2385-3d82-b362-a65cce74e39c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:e5:0b:aa:53:60:9b:c4:4e:15:ad:98:5d:b7:06:c4:db:b9:
         30:c5:a0:e2:dd:b2:06:ff:90:9b:08:5a:13:7d:b8:4f:40:d9:
         42:3f:7a:44:16:69:09:ca:e0:da:05:57:ce:57:a9:27:6a:91:
         e6:c9:bb:06:41:c9:c0:ba:01:c4:cd:b0:2b:6a:11:7c:36:a7:
         7f:0f:a6:07:7c:be:4d:fa:73:7f:47:8b:47:ab:8c:63:fb:33:
         cd:2b:d3:e5:79:6b:b2:90:54:98:0c:1f:25:56:24:0a:a3:33:
         7e:0c:c8:2f:5c:c5:b4:b5:86:ef:9c:1a:ae:59:b0:80:5f:97:
         59:99:f9:31:cd:2d:9c:f3:d0:c6:0b:54:b2:71:d1:18:a2:85:
         4e:e3:33:b4:a7:da:d8:ce:2c:e0:6e:eb:78:32:74:24:1e:f9:
         35:4b:16:34:fb:ff:b9:76:39:9c:41:9f:03:e0:56:c1:1f:23:
         56:3f:2b:fd:06:b5:d2:f2:a2:72:1b:4b:6a:2b:ec:88:00:c1:
         af:23:a6:64:e4:06:d6:58:6d:dc:18:68:36:7f:bd:02:e4:67:
         40:e1:96:63:64:a3:bc:d8:e0:b0:7d:b1:d0:61:3d:ab:60:9d:
         80:e8:6f:03:6c:4f:fc:70:6c:17:fb:0a:fd:41:74:bc:7e:f0:
         cd:f5:cc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 18:24:08 2025 by rpki-client