Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/c592dbd8-2fc3-3da7-bc76-52e82be2dc06.roa
File:                     c592dbd8-2fc3-3da7-bc76-52e82be2dc06.roa (raw, json)
Hash identifier:          jCSXZ9CrPu7+9vyuSGZF+TXkDxtN6Y1fNhPc0jheRA8=
Subject key identifier:   82:89:23:BF:47:2F:1A:20:C5:E4:E2:2C:AF:10:61:BD:B9:2B:27:89
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584EA799950BEA9171C166F06A00
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/c592dbd8-2fc3-3da7-bc76-52e82be2dc06.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13737
IP address blocks:        74.80.149.0/24 maxlen: 24
                          74.80.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:95:0b:ea:91:71:c1:66:f0:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3f7fe824-939f-4796-96b4-c9249563b068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:a4:e9:75:89:19:3c:4a:1f:03:39:d0:88:8d:
                    8f:54:84:55:6e:bc:42:2d:b7:02:b7:a8:2a:6f:5b:
                    62:69:39:04:9c:96:a0:d8:f2:a0:14:50:0e:01:52:
                    d3:ae:95:34:81:b8:6a:8f:17:92:92:fd:c4:ce:cf:
                    e4:cb:69:3d:66:16:f4:d4:fe:35:83:6e:14:3e:c7:
                    0d:96:01:26:a3:47:16:15:b8:44:67:21:29:49:5d:
                    10:d9:90:dc:23:a6:7d:06:2d:f0:86:de:58:56:79:
                    45:67:9a:78:a3:1d:39:ce:bb:91:b8:04:8d:e9:95:
                    e9:15:29:55:18:cf:76:2c:95:a1:b7:44:bf:65:d5:
                    ae:ca:8c:db:36:1f:70:ba:ae:5e:a5:b5:48:67:5b:
                    9d:10:34:8b:cd:55:31:6f:c3:e1:fc:40:ea:0c:b9:
                    95:28:14:96:43:72:d7:a0:26:4f:d7:63:1e:ab:c1:
                    04:79:9f:42:20:98:9c:37:26:b1:bf:19:6f:99:93:
                    c4:34:c3:57:2c:18:5e:ab:c6:1c:0b:27:f2:8f:cc:
                    b0:a9:b4:42:e7:37:88:8d:cc:90:f6:2e:28:5f:eb:
                    73:64:1c:87:f4:d0:18:82:d3:48:87:8c:d3:d0:c3:
                    8c:8f:cd:c5:9b:39:57:72:74:8e:2b:6d:08:02:49:
                    20:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:89:23:BF:47:2F:1A:20:C5:E4:E2:2C:AF:10:61:BD:B9:2B:27:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/c592dbd8-2fc3-3da7-bc76-52e82be2dc06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.149.0/24
                  74.80.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:86:da:fb:65:0f:f8:d6:0a:04:9a:03:30:bc:26:0d:cd:af:
         34:dd:f7:cd:71:fa:e9:35:86:a2:99:34:bc:37:45:01:78:be:
         8b:0c:34:45:7e:8c:4c:96:fd:5c:57:fd:17:d1:e3:9d:13:47:
         e3:8d:cc:1e:63:24:58:b5:ec:73:ad:0d:63:dc:58:3e:41:f5:
         b6:f5:53:4b:30:1e:76:fe:38:29:ee:e6:57:9e:63:12:4d:7a:
         bb:c7:2f:b2:9c:cf:47:f8:e0:f4:12:f9:e1:12:dc:34:64:ba:
         2a:e4:bb:fa:ac:21:f8:ae:a3:12:fe:ff:e9:7e:32:c4:b6:96:
         64:35:09:5c:5f:d9:cd:66:78:10:a3:dc:8b:40:65:b8:7c:67:
         58:d4:b1:9b:f0:9c:d2:2b:2c:83:6a:3e:89:38:d1:60:45:3c:
         1d:0e:ec:89:9d:ff:91:98:cf:e2:1b:0d:9a:13:db:02:48:06:
         da:b3:d4:6d:33:30:8b:23:36:1f:8e:83:08:aa:de:ca:47:60:
         f4:a3:60:c7:db:2f:0e:9e:dc:77:9c:e5:67:7a:e1:dd:37:7f:
         a2:3b:1c:32:c1:58:a0:31:a6:62:06:d9:b0:9f:5c:48:15:08:
         80:e1:89:2f:ef:5d:b5:e0:89:12:a4:da:fb:b6:e1:90:9a:82:
         04:98:15:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 07:17:22 2026 by rpki-client