Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/f8228172-e8c6-37b2-889d-110800b59367.roa
File:                     f8228172-e8c6-37b2-889d-110800b59367.roa (raw, json)
Hash identifier:          WfuK0qaHmdT6LR/LNmiBtdBRTAwD0udVu74+wgxJjAY=
Subject key identifier:   A0:7E:94:7F:89:C6:47:C7:DA:D5:9E:7D:D9:C4:6F:0A:CD:15:46:F3
Certificate issuer:       /CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c
Certificate serial:       010D0C9F4328584B609C8F00E195F95411211D00
Authority key identifier: 74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/f8228172-e8c6-37b2-889d-110800b59367.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     36549
IP address blocks:        74.222.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:8f:00:e1:95:f9:54:11:21:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=6907a23a-27ee-4c42-94e4-05489dba87f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9e:0e:84:81:49:5a:f8:47:f9:af:fb:ef:9f:
                    1a:15:8d:dc:7b:35:aa:78:2a:cf:2e:56:56:9e:4e:
                    8d:34:a1:b1:98:95:59:c2:46:5a:26:39:e2:a7:24:
                    ce:c0:d9:64:ca:f6:31:4d:70:e6:a9:35:01:68:87:
                    bc:4d:6b:16:9a:3c:cc:bb:7e:5f:06:09:fc:c8:a4:
                    c2:ce:4f:6c:78:69:ef:4a:9f:a1:63:58:c0:49:e2:
                    38:17:0d:ba:b9:21:44:fd:f8:42:7f:03:1f:3a:08:
                    8a:4a:fb:56:3d:a8:26:49:d9:99:3a:42:50:1e:93:
                    12:36:4c:b2:b9:4d:24:eb:db:f7:b3:b0:db:62:81:
                    a7:3c:e7:05:90:00:8e:24:d8:51:90:09:94:04:0c:
                    61:b5:93:2c:c7:8d:c8:84:2b:a4:b6:81:ab:c8:10:
                    a7:a5:93:bf:2c:3f:9f:1c:12:04:15:6c:80:2f:3d:
                    7d:6a:04:f6:a8:ad:e7:1e:4d:be:a4:35:c7:60:fb:
                    77:4c:00:bd:7c:99:13:76:90:20:4e:28:f7:2f:07:
                    ec:86:fd:8f:80:ec:3e:ce:1e:01:55:7a:2b:9d:e2:
                    df:b7:0c:b9:fd:08:a1:5e:e9:49:80:2f:e7:14:0c:
                    b2:95:9e:23:9b:a8:62:a5:dd:fe:fb:67:28:6a:b9:
                    54:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:7E:94:7F:89:C6:47:C7:DA:D5:9E:7D:D9:C4:6F:0A:CD:15:46:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/f8228172-e8c6-37b2-889d-110800b59367.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl

            X509v3 Authority Key Identifier:
                keyid:74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.222.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ff:70:7a:1b:ec:1e:9b:dd:30:26:92:5f:51:1c:01:7e:0a:
         04:a7:fb:a3:1e:8d:52:98:64:63:2b:eb:b7:73:6a:b4:28:ea:
         d1:a2:4c:a0:2d:f7:e5:64:b5:06:24:ec:85:00:51:63:0e:ec:
         0e:be:91:d7:6f:e6:bf:d2:1c:72:1e:b5:b8:df:92:d3:59:ef:
         dd:d2:e9:e5:6a:a4:80:d6:93:b8:ad:55:cb:1d:f6:3a:62:f1:
         4c:90:14:93:55:9f:6b:0f:53:ed:46:2f:35:fc:44:3c:a4:df:
         00:93:81:78:d8:3d:85:f4:14:06:01:aa:e4:ce:44:4a:0f:fe:
         6f:34:44:1c:7b:20:77:64:2d:6a:80:ab:9d:89:bf:f8:50:21:
         b2:dd:08:e9:4f:45:e7:cd:aa:c6:48:6d:e4:52:a5:09:f1:31:
         5a:55:1d:91:98:b5:01:b4:7d:18:fb:53:17:5b:0c:dc:bb:cc:
         aa:61:07:70:85:e9:3b:86:d5:02:b6:2c:90:c0:4c:5b:fb:b4:
         7b:63:c2:1f:d9:2b:e5:00:1c:09:02:19:39:cc:ad:02:c9:2f:
         0b:8a:5e:46:31:a3:a4:2e:7c:ce:33:23:7b:56:e8:ab:65:d5:
         31:31:7f:e6:43:b9:d1:c3:09:79:cd:a6:11:03:68:06:f2:28:
         ab:2b:35:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnI8A4ZX5VBEhHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjU5ZmU3YzgtZjdmYS00NjM3LWE3NDYtODczZGJlYWRi
ZjNjMB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk
NjkwN2EyM2EtMjdlZS00YzQyLTk0ZTQtMDU0ODlkYmE4N2YxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs54OhIFJWvhH+a/7758aFY3cezWqeCrPLlZW
nk6NNKGxmJVZwkZaJjnipyTOwNlkyvYxTXDmqTUBaIe8TWsWmjzMu35fBgn8yKTC
zk9seGnvSp+hY1jASeI4Fw26uSFE/fhCfwMfOgiKSvtWPagmSdmZOkJQHpMSNkyy
uU0k69v3s7DbYoGnPOcFkACOJNhRkAmUBAxhtZMsx43IhCuktoGryBCnpZO/LD+f
HBIEFWyALz19agT2qK3nHk2+pDXHYPt3TAC9fJkTdpAgTij3Lwfshv2PgOw+zh4B
VXorneLftwy5/QihXulJgC/nFAyylZ4jm6hipd3++2coarlUFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKB+lH+JxkfH2tWefdnEbwrNFUbzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNTlm
ZTdjOC1mN2ZhLTQ2MzctYTc0Ni04NzNkYmVhZGJmM2MvZjgyMjgxNzItZThjNi0z
N2IyLTg4OWQtMTEwODAwYjU5MzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjU5ZmU3YzgtZjdmYS00NjM3LWE3
NDYtODczZGJlYWRiZjNjLzI1OWZlN2M4LWY3ZmEtNDYzNy1hNzQ2LTg3M2RiZWFk
YmYzYy5jcmwwHwYDVR0jBBgwFoAUdFJpwi/8O6u55n4V9rH9o+lb5uowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNTlmZTdjOC1mN2ZhLTQ2MzctYTc0Ni04NzNk
YmVhZGJmM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSt5AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC3/cHob7B6b3TAmkl9RHAF+CgSn+6MejVKYZGMr67dzarQo6tGiTKAt
9+VktQYk7IUAUWMO7A6+kddv5r/SHHIetbjfktNZ793S6eVqpIDWk7itVcsd9jpi
8UyQFJNVn2sPU+1GLzX8RDyk3wCTgXjYPYX0FAYBquTOREoP/m80RBx7IHdkLWqA
q52Jv/hQIbLdCOlPRefNqsZIbeRSpQnxMVpVHZGYtQG0fRj7UxdbDNy7zKphB3CF
6TuG1QK2LJDATFv7tHtjwh/ZK+UAHAkCGTnMrQLJLwuKXkYxo6QufM4zI3tW6Ktl
1TExf+ZDudHDCXnNphEDaAbyKKsrNfE=
-----END CERTIFICATE-----
Generated at Fri Oct 10 03:53:07 2025 by rpki-client