Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/672aff51-d681-3250-a7e7-9f42bd350c90.roa
File:                     672aff51-d681-3250-a7e7-9f42bd350c90.roa (raw, json)
Hash identifier:          cfT0yEmBAsTzJ6TaNZAFCECzTs2wLAYlcEolucdp7N8=
Subject key identifier:   CA:EE:66:94:56:91:A3:3F:00:60:DF:BB:6C:FB:81:2D:0B:A3:69:07
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584CEBC22572BAE4BEE497353A40
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/672aff51-d681-3250-a7e7-9f42bd350c90.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     13737
IP address blocks:        74.80.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:25:72:ba:e4:be:e4:97:35:3a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=9430737c-8921-467f-8671-388413e57ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:26:25:8b:22:ba:bd:07:d3:69:b9:47:89:8c:
                    3d:78:00:35:44:36:4e:bf:17:84:51:2a:87:03:78:
                    b6:06:78:72:8a:cc:3b:95:78:41:de:cf:a8:81:93:
                    8a:19:40:43:d0:ff:d5:bb:ed:76:c6:7d:29:f2:64:
                    8a:88:2e:e4:a4:66:21:a6:35:0a:e0:09:6a:e8:d6:
                    a6:cf:58:4a:ba:da:05:0b:a5:43:d4:86:c4:60:3e:
                    91:90:d1:34:07:02:5a:b9:66:23:2a:91:aa:b3:b1:
                    17:f5:e5:95:0b:40:b5:a9:2e:8d:a9:fc:b7:b7:a2:
                    6d:44:59:72:12:a9:ee:04:2d:a4:a9:58:c6:2d:96:
                    43:e2:f8:ed:ce:51:36:5e:c8:00:3c:3d:84:13:bd:
                    4f:fa:30:92:17:e1:44:40:bc:a2:ab:a9:0a:a3:b9:
                    9e:3b:13:5f:42:20:ba:9d:2e:94:12:6b:8d:ec:a5:
                    a3:2c:c3:38:95:05:3f:8b:40:c4:cf:56:87:d8:d8:
                    2c:3d:cf:45:f6:e0:ae:01:a9:ee:9f:f2:13:86:93:
                    26:23:26:5e:3a:0c:a4:b4:de:ec:55:71:75:f6:31:
                    0f:32:a5:3a:46:4e:e7:28:5a:cf:70:de:54:4d:c0:
                    f4:cd:54:32:3c:e4:23:ba:83:a2:ed:11:ae:10:19:
                    c7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EE:66:94:56:91:A3:3F:00:60:DF:BB:6C:FB:81:2D:0B:A3:69:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/672aff51-d681-3250-a7e7-9f42bd350c90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:cc:53:c3:29:c4:e4:41:3d:57:c7:f2:03:34:95:83:0e:97:
         bb:b9:ed:34:7b:d9:bc:54:4d:a4:61:71:17:0b:e4:9f:35:c9:
         c9:bf:6c:6e:35:5d:d1:50:d4:cf:54:cd:c9:53:03:ff:12:e3:
         fb:8c:7d:3a:e3:be:95:f0:d7:40:55:e8:4b:3e:b8:fb:ae:d7:
         2d:65:d4:9e:d9:bf:8b:14:30:1e:85:5a:43:09:44:79:9f:30:
         b4:16:16:90:65:bb:dd:0b:db:9c:f3:66:61:17:25:97:82:55:
         28:0a:ee:ef:88:e5:69:ca:90:a9:21:7c:9c:6e:64:8b:b9:2a:
         c8:64:b3:18:2d:4e:b8:2e:b4:43:b3:41:4d:fc:31:f6:d2:3d:
         f2:f7:dd:e8:d5:bb:b2:26:9c:b7:1b:62:61:46:c0:b0:6a:d8:
         03:86:c3:45:38:75:5a:87:07:a1:6d:0e:82:70:be:92:5c:c8:
         51:2a:19:25:f6:06:84:ed:3d:14:c8:92:17:d6:cc:1d:fb:35:
         84:90:b7:0a:85:fd:0d:8c:31:a4:1c:e2:c7:93:f4:35:9f:ce:
         7b:c6:82:4b:85:5c:fa:c1:4b:57:a4:28:6b:b3:de:5a:35:b2:
         cb:e3:c2:86:50:c1:2f:ee:fd:e3:62:d6:d4:e0:bc:ac:0e:e3:
         77:36:56:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzrwiVyuuS+5Jc1OkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWUzZTk5Y2MtNzk5Mi00YWMxLWEyNTYtOTE3Y2NlMDc1
MzJlMB4XDTI2MDIyMDAyMDAzMloXDTI2MDUyMTAxMDAzMlowLzEtMCsGA1UEAxMk
OTQzMDczN2MtODkyMS00NjdmLTg2NzEtMzg4NDEzZTU3YWUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CYliyK6vQfTablHiYw9eAA1RDZOvxeEUSqH
A3i2Bnhyisw7lXhB3s+ogZOKGUBD0P/Vu+12xn0p8mSKiC7kpGYhpjUK4Alq6Nam
z1hKutoFC6VD1IbEYD6RkNE0BwJauWYjKpGqs7EX9eWVC0C1qS6Nqfy3t6JtRFly
EqnuBC2kqVjGLZZD4vjtzlE2XsgAPD2EE71P+jCSF+FEQLyiq6kKo7meOxNfQiC6
nS6UEmuN7KWjLMM4lQU/i0DEz1aH2NgsPc9F9uCuAanun/IThpMmIyZeOgyktN7s
VXF19jEPMqU6Rk7nKFrPcN5UTcD0zVQyPOQjuoOi7RGuEBnHPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMruZpRWkaM/AGDfu2z7gS0Lo2kHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNl
OTljYy03OTkyLTRhYzEtYTI1Ni05MTdjY2UwNzUzMmUvNjcyYWZmNTEtZDY4MS0z
MjUwLWE3ZTctOWY0MmJkMzUwYzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWUzZTk5Y2MtNzk5Mi00YWMxLWEy
NTYtOTE3Y2NlMDc1MzJlLzVlM2U5OWNjLTc5OTItNGFjMS1hMjU2LTkxN2NjZTA3
NTMyZS5jcmwwHwYDVR0jBBgwFoAU2RNicrf45rV9n/DguoV/tj3NwN8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNlOTljYy03OTkyLTRhYzEtYTI1Ni05MTdj
Y2UwNzUzMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlCUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFLMU8MpxORBPVfH8gM0lYMOl7u57TR72bxUTaRhcRcL5J81ycm/bG41
XdFQ1M9UzclTA/8S4/uMfTrjvpXw10BV6Es+uPuu1y1l1J7Zv4sUMB6FWkMJRHmf
MLQWFpBlu90L25zzZmEXJZeCVSgK7u+I5WnKkKkhfJxuZIu5KshksxgtTrgutEOz
QU38MfbSPfL33ejVu7ImnLcbYmFGwLBq2AOGw0U4dVqHB6FtDoJwvpJcyFEqGSX2
BoTtPRTIkhfWzB37NYSQtwqF/Q2MMaQc4seT9DWfznvGgkuFXPrBS1ekKGuz3lo1
ssvjwoZQwS/u/eNi1tTgvKwO43c2Vp4=
-----END CERTIFICATE-----
Generated at Fri Feb 27 11:17:44 2026 by rpki-client