Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/2abb1020-91fa-3d34-ab8d-0cee35dab18f.roa
File:                     2abb1020-91fa-3d34-ab8d-0cee35dab18f.roa (raw, json)
Hash identifier:          /CvuxO5HVYvjybWd1UNl0Q30hANDmYaSTIP5QPiQ/Zo=
Subject key identifier:   66:66:8C:9E:B0:4A:F4:40:47:18:DF:46:01:24:E0:4D:2E:B4:24:5D
Certificate issuer:       /CN=38a6de71-55e9-453c-8cf4-1a205aef0191
Certificate serial:       010D0C9F4328584B4BAC54AD669B4DF77DEAA840
Authority key identifier: 1B:37:B0:A0:E1:D4:09:F7:4F:49:8E:9F:75:11:14:CC:4C:8F:90:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/2abb1020-91fa-3d34-ab8d-0cee35dab18f.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     40772
IP address blocks:        74.116.44.0/24 maxlen: 24
                          74.116.45.0/24 maxlen: 24
                          74.116.46.0/24 maxlen: 24
                          74.116.47.0/24 maxlen: 24
                          104.36.104.0/24 maxlen: 24
                          104.36.105.0/24 maxlen: 24
                          104.36.106.0/24 maxlen: 24
                          104.36.107.0/24 maxlen: 24
                          208.89.36.0/24 maxlen: 24
                          208.89.37.0/24 maxlen: 24
                          208.89.38.0/24 maxlen: 24
                          208.89.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/38a6de71-55e9-453c-8cf4-1a205aef0191.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/38a6de71-55e9-453c-8cf4-1a205aef0191.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:54:ad:66:9b:4d:f7:7d:ea:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38a6de71-55e9-453c-8cf4-1a205aef0191
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=0fa1203d-bb7b-435b-8cf9-9909b1c841b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5f:5c:da:97:96:b0:68:5c:24:92:4b:02:79:
                    32:1b:f3:91:8f:da:8e:2e:34:38:ad:42:da:3b:81:
                    ef:92:a6:9f:b2:a8:92:e6:98:75:2b:2e:ea:0b:1d:
                    af:91:26:8a:e3:a5:85:77:2b:a4:c5:4c:58:ac:5a:
                    93:ff:c4:03:ad:7b:7d:95:80:c5:e7:ef:1b:b0:bf:
                    97:e9:a4:c9:df:ca:62:d3:6f:99:fa:17:4b:be:55:
                    3f:fe:5f:c5:05:4e:5c:f0:54:7f:57:31:4e:be:23:
                    63:e9:1d:9e:c1:47:46:38:f1:37:5c:17:eb:cc:df:
                    dc:65:46:1c:c5:0a:2d:7a:4b:d1:43:86:63:a9:d7:
                    80:87:ef:79:70:e4:e7:76:42:91:c4:26:bb:cc:b9:
                    fc:f7:73:08:8e:65:12:4c:ed:3a:ac:9c:9f:ec:e3:
                    00:a5:0f:03:57:f3:92:4e:be:35:9e:ea:23:ac:0d:
                    ea:47:1c:f8:7b:b5:80:c2:02:bf:1c:0e:59:66:45:
                    1c:7b:ba:e0:36:79:87:fe:b7:6d:11:01:36:48:11:
                    84:35:89:37:0b:5c:7c:29:67:c7:4f:64:59:99:69:
                    e2:1b:9d:05:a8:45:45:32:e5:66:4d:1c:b9:f9:0f:
                    c3:39:90:0b:6d:d7:b1:6b:53:14:c3:90:93:1c:8c:
                    34:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:66:8C:9E:B0:4A:F4:40:47:18:DF:46:01:24:E0:4D:2E:B4:24:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/2abb1020-91fa-3d34-ab8d-0cee35dab18f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/38a6de71-55e9-453c-8cf4-1a205aef0191.crl

            X509v3 Authority Key Identifier:
                keyid:1B:37:B0:A0:E1:D4:09:F7:4F:49:8E:9F:75:11:14:CC:4C:8F:90:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.44.0/22
                  104.36.104.0/22
                  208.89.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:67:2d:a3:40:db:14:86:3c:19:cd:18:cf:6c:ba:5d:0e:13:
         a4:66:57:6f:73:ab:68:a7:eb:4b:5c:45:32:58:2c:aa:3f:61:
         a9:27:4f:05:ac:69:73:92:93:a6:3a:bf:21:fd:d3:4f:ea:1b:
         d1:88:c8:de:31:7e:fe:87:9a:1e:20:79:8a:39:b3:b3:7b:c9:
         63:56:36:fe:0f:cd:32:86:cc:d6:bb:67:ac:d2:95:47:6e:2b:
         2d:d7:44:d6:63:46:bf:ff:4a:9d:3b:bb:0c:d8:0b:dc:b8:37:
         db:c4:d4:96:dc:8d:08:91:6b:a0:bc:ac:f1:85:31:9a:2c:d9:
         78:bc:60:ff:ab:b5:80:64:27:9b:0b:de:c7:a1:77:4d:72:8e:
         96:32:1c:cf:14:56:cb:c4:45:93:54:3b:7c:ac:17:f3:a1:94:
         0c:02:64:7b:f4:5c:bb:f3:38:1f:ac:78:53:80:62:0d:63:13:
         3e:06:ee:23:94:a7:87:4c:50:93:47:dd:d0:8f:f2:29:cc:83:
         d6:11:62:28:a6:5f:03:60:d1:66:02:a7:94:c5:61:39:31:01:
         1f:00:1e:46:69:e9:0d:22:06:82:77:5f:36:4b:87:b5:32:3a:
         e8:f5:37:e5:e4:33:c1:fa:a4:d1:07:7c:94:1d:2a:2d:9f:44:
         e8:29:d3:27
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEtLrFStZptN933qqEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzhhNmRlNzEtNTVlOS00NTNjLThjZjQtMWEyMDVhZWYw
MTkxMB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk
MGZhMTIwM2QtYmI3Yi00MzViLThjZjktOTkwOWIxYzg0MWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh19c2peWsGhcJJJLAnkyG/ORj9qOLjQ4rULa
O4HvkqafsqiS5ph1Ky7qCx2vkSaK46WFdyukxUxYrFqT/8QDrXt9lYDF5+8bsL+X
6aTJ38pi02+Z+hdLvlU//l/FBU5c8FR/VzFOviNj6R2ewUdGOPE3XBfrzN/cZUYc
xQotekvRQ4ZjqdeAh+95cOTndkKRxCa7zLn893MIjmUSTO06rJyf7OMApQ8DV/OS
Tr41nuojrA3qRxz4e7WAwgK/HA5ZZkUce7rgNnmH/rdtEQE2SBGENYk3C1x8KWfH
T2RZmWniG50FqEVFMuVmTRy5+Q/DOZALbdexa1MUw5CTHIw0iwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFGZmjJ6wSvRARxjfRgEk4E0utCRdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zOGE2
ZGU3MS01NWU5LTQ1M2MtOGNmNC0xYTIwNWFlZjAxOTEvMmFiYjEwMjAtOTFmYS0z
ZDM0LWFiOGQtMGNlZTM1ZGFiMThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzhhNmRlNzEtNTVlOS00NTNjLThj
ZjQtMWEyMDVhZWYwMTkxLzM4YTZkZTcxLTU1ZTktNDUzYy04Y2Y0LTFhMjA1YWVm
MDE5MS5jcmwwHwYDVR0jBBgwFoAUGzewoOHUCfdPSY6fdREUzEyPkE0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zOGE2ZGU3MS01NWU5LTQ1M2MtOGNmNC0xYTIw
NWFlZjAxOTEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCSnQsAwQC
aCRoAwQC0FkkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAFtnLaNA2xSGPBnNGM9sul0OE6RmV29zq2in60tc
RTJYLKo/YaknTwWsaXOSk6Y6vyH900/qG9GIyN4xfv6Hmh4geYo5s7N7yWNWNv4P
zTKGzNa7Z6zSlUduKy3XRNZjRr//Sp07uwzYC9y4N9vE1JbcjQiRa6C8rPGFMZos
2Xi8YP+rtYBkJ5sL3sehd01yjpYyHM8UVsvERZNUO3ysF/OhlAwCZHv0XLvzOB+s
eFOAYg1jEz4G7iOUp4dMUJNH3dCP8inMg9YRYiimXwNg0WYCp5TFYTkxAR8AHkZp
6Q0iBoJ3XzZLh7UyOuj1N+XkM8H6pNEHfJQdKi2fROgp0yc=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:24:15 2025 by rpki-client