Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/9fb297c4-9b41-38d7-b4fc-464ac4e30e77.roa
File:                     9fb297c4-9b41-38d7-b4fc-464ac4e30e77.roa (raw, json)
Hash identifier:          IqJWzzUemT4+2jpBnTIKWK53S69M5o6zGh0T047DxRQ=
Subject key identifier:   1F:0D:C7:A2:99:2C:D9:6C:A9:32:F3:53:91:39:37:72:EB:18:F4:57
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584DFBD5DF9327BB6CD62C5B5D00
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/9fb297c4-9b41-38d7-b4fc-464ac4e30e77.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     15083
IP address blocks:        74.80.150.0/24 maxlen: 24
                          74.80.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:df:93:27:bb:6c:d6:2c:5b:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=35f49e3e-32dc-469c-a947-3cb197f1897a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b7:15:98:31:cb:68:31:d2:c8:2d:92:48:66:
                    6c:1d:f2:eb:01:c2:9c:74:8a:97:58:19:cd:87:90:
                    a7:84:9c:83:dd:52:cd:e2:63:db:f5:19:f7:58:ad:
                    c7:ec:21:b8:44:70:3a:e2:95:ce:5b:ee:f9:db:5a:
                    2e:84:ce:da:37:81:f4:21:ac:5b:eb:55:3a:4c:07:
                    b9:14:34:6b:f2:09:19:62:66:8b:d3:5c:95:ef:f6:
                    e8:43:24:7b:50:78:b4:6c:26:55:7f:bb:64:23:e8:
                    68:42:c3:c8:4e:98:fe:27:0a:66:bf:bd:a7:d2:35:
                    29:32:1a:a7:d2:e2:66:45:74:31:e4:1a:39:b7:56:
                    ea:a9:68:a1:ca:72:49:22:b3:b5:f6:52:eb:44:ae:
                    b1:ca:18:a1:33:71:a4:29:03:a3:ec:ef:b8:ad:fe:
                    05:fc:63:42:7a:a5:6b:7d:cc:45:07:98:1f:8d:7f:
                    fc:ed:91:69:39:4d:83:15:32:f6:f3:6f:7c:86:e5:
                    2b:88:9c:c3:4d:11:83:c4:8b:60:3f:da:db:be:de:
                    cd:7e:4f:09:2e:c4:6c:e1:44:56:25:e4:e7:ee:fd:
                    c6:8b:b7:7e:a6:79:43:5e:97:40:1c:cc:9d:ae:41:
                    94:c9:09:b3:d8:8c:2d:a2:07:ee:34:b4:29:e9:eb:
                    1f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0D:C7:A2:99:2C:D9:6C:A9:32:F3:53:91:39:37:72:EB:18:F4:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/9fb297c4-9b41-38d7-b4fc-464ac4e30e77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.150.0/24
                  74.80.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:7e:2c:a8:c0:42:96:d8:e2:63:ba:38:c8:4c:af:52:b9:ca:
         b6:d2:83:e9:e9:cd:19:a9:35:f7:60:99:15:fa:a4:45:58:30:
         df:bc:c6:b8:88:8a:f3:bb:7f:ca:49:9c:ee:29:92:96:80:80:
         af:1f:a4:a4:6c:dd:d3:e4:e4:0a:35:14:6b:14:14:23:72:c0:
         09:8f:f6:af:4d:0c:88:21:53:6f:18:92:45:9d:b6:08:89:8e:
         e3:4a:a0:f5:18:31:9a:5c:de:ea:75:59:d3:9f:57:bf:f0:ab:
         83:c6:63:d2:04:70:5b:a9:28:ca:f3:4f:35:82:94:23:56:69:
         d3:a9:ae:77:fc:d0:1a:ec:72:c6:52:ac:df:94:2a:f6:f6:ff:
         c8:79:a4:29:35:42:b1:f2:43:78:6a:84:99:9f:d7:9f:5a:ba:
         c2:cc:4e:ef:06:ec:b7:79:60:4c:ce:57:df:05:ec:ab:7e:ff:
         f0:bd:a9:bc:3e:1c:f2:d0:50:2e:2b:f3:b0:db:4c:c2:05:85:
         76:a6:35:83:c5:f1:96:5a:14:9a:f2:53:20:2e:e7:61:e9:d1:
         8e:95:61:3c:fb:88:6e:ed:40:fd:19:41:1b:ec:68:35:1f:25:
         46:7f:eb:04:70:6b:14:bc:09:0d:3c:4d:db:6b:94:93:59:e9:
         1e:f2:7d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 21:12:33 2026 by rpki-client