Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/74e9ae05-0fb2-33a8-96b1-27a18c43a8ec.roa
File:                     74e9ae05-0fb2-33a8-96b1-27a18c43a8ec.roa (raw, json)
Hash identifier:          wfnFtOKBUXNjIJi332VLh06OUgTF1+JBjrinMKby6/s=
Subject key identifier:   EA:86:11:C3:0E:90:C9:D8:F1:DE:92:7F:F4:0D:01:AC:A6:80:55:31
Certificate issuer:       /CN=ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0
Certificate serial:       010D0C9F4328584AF9514527887552AF51C25CC0
Authority key identifier: 60:91:E4:47:FE:45:BF:10:7C:41:41:7E:CF:EB:96:27:4E:4D:AC:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/74e9ae05-0fb2-33a8-96b1-27a18c43a8ec.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     398020
IP address blocks:        23.133.48.0/24 maxlen: 24
                          66.205.243.0/24 maxlen: 24
                          174.136.212.0/22 maxlen: 24
                          209.142.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:45:27:88:75:52:af:51:c2:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=7f028e55-33f1-4fa5-97af-bbc02e6cd70a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:35:9c:08:de:66:2e:1c:28:82:fd:6b:25:49:
                    52:16:8a:00:9a:9c:24:02:b9:1f:2f:f8:46:92:76:
                    f1:51:ce:b7:47:4b:1b:60:9d:ae:7a:0c:66:a2:18:
                    a4:9d:aa:36:5f:46:42:d9:9b:74:62:51:34:35:ba:
                    7e:6f:a7:91:38:fe:40:fd:92:6c:14:f8:aa:7f:a5:
                    fd:19:45:b3:f5:90:6e:f0:3c:d5:0d:bb:fb:dc:77:
                    7c:ed:3c:5e:60:28:2c:f5:72:ab:cd:d1:64:b8:5f:
                    f6:d3:32:c1:55:40:59:73:48:98:49:f7:5b:84:b4:
                    09:ea:6b:f6:df:e4:cf:cd:6f:99:7e:b7:26:84:e2:
                    13:f9:1e:b5:ec:c5:f4:a6:e2:14:b4:63:9a:d7:a7:
                    98:e7:0e:57:47:b9:04:66:6f:ec:82:8c:68:34:c5:
                    24:3d:00:80:8b:e7:3d:a7:57:fd:66:e8:bf:8e:2f:
                    2d:4f:50:a9:d4:5a:0e:6b:99:63:3d:77:53:59:67:
                    da:51:02:8c:ef:f2:79:fd:15:0e:76:e4:e8:75:0d:
                    6c:aa:5a:1d:3d:ae:9f:ed:62:fa:2b:2c:ae:60:52:
                    c4:69:72:f3:22:c5:15:f0:9c:4f:b4:10:90:c9:71:
                    84:1e:d1:57:80:68:31:38:b7:b1:d4:f0:64:f2:e4:
                    5d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:86:11:C3:0E:90:C9:D8:F1:DE:92:7F:F4:0D:01:AC:A6:80:55:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/74e9ae05-0fb2-33a8-96b1-27a18c43a8ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.crl

            X509v3 Authority Key Identifier:
                keyid:60:91:E4:47:FE:45:BF:10:7C:41:41:7E:CF:EB:96:27:4E:4D:AC:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.48.0/24
                  66.205.243.0/24
                  174.136.212.0/22
                  209.142.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:cf:aa:29:f2:c6:4d:f5:d8:5a:69:8c:87:1b:b6:6b:4d:b0:
         1e:61:f8:40:16:24:a0:a1:e5:ee:6d:ac:ea:15:c9:46:29:2d:
         e7:e8:3a:28:f1:3a:7c:92:de:76:2f:4a:f9:84:14:85:d3:72:
         b2:15:36:c0:87:ee:d5:db:5a:37:6f:bf:8c:18:9e:d4:96:6e:
         f4:82:71:e1:1f:87:40:68:35:8f:84:de:39:bd:af:d8:12:3a:
         61:46:8a:73:46:e7:33:b8:2a:d6:2b:f3:ac:ce:7d:c1:d5:a7:
         c5:82:f5:bc:a4:4d:74:77:65:87:58:a8:96:4a:d5:be:e7:79:
         3a:9c:44:ca:8a:52:92:d6:c2:6f:be:ea:d4:18:16:cf:eb:e1:
         06:35:cf:80:c0:a2:20:c1:1d:0c:a9:81:62:7c:d1:85:41:8f:
         f5:31:a1:5b:f9:27:8f:81:4b:66:6f:1a:4d:d0:7e:9e:89:6b:
         8b:d5:0a:8d:f7:f3:e3:af:2a:d0:7e:54:49:c4:04:ea:0a:05:
         6c:10:76:d3:e0:60:07:3d:20:ad:55:e5:46:31:cb:7c:44:81:
         81:ea:ed:56:d8:5d:3b:4b:90:84:3b:24:cb:0d:bb:f8:db:49:
         5c:37:09:c5:d4:53:33:10:40:ad:9f:5e:ed:fe:79:3a:da:b5:
         92:d9:b1:4f
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEr5UUUniHVSr1HCXMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI0YTFjOGEtZDQwYi00Mzc4LWE5YzYtZjNiNGQwOTE5
ZGYwMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk
N2YwMjhlNTUtMzNmMS00ZmE1LTk3YWYtYmJjMDJlNmNkNzBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDWcCN5mLhwogv1rJUlSFooAmpwkArkfL/hG
knbxUc63R0sbYJ2uegxmohiknao2X0ZC2Zt0YlE0Nbp+b6eROP5A/ZJsFPiqf6X9
GUWz9ZBu8DzVDbv73Hd87TxeYCgs9XKrzdFkuF/20zLBVUBZc0iYSfdbhLQJ6mv2
3+TPzW+ZfrcmhOIT+R617MX0puIUtGOa16eY5w5XR7kEZm/sgoxoNMUkPQCAi+c9
p1f9Zui/ji8tT1Cp1FoOa5ljPXdTWWfaUQKM7/J5/RUOduTodQ1sqlodPa6f7WL6
KyyuYFLEaXLzIsUV8JxPtBCQyXGEHtFXgGgxOLex1PBk8uRdxQIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFOqGEcMOkMnY8d6Sf/QNAaymgFUxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hYjRh
MWM4YS1kNDBiLTQzNzgtYTljNi1mM2I0ZDA5MTlkZjAvNzRlOWFlMDUtMGZiMi0z
M2E4LTk2YjEtMjdhMThjNDNhOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWI0YTFjOGEtZDQwYi00Mzc4LWE5
YzYtZjNiNGQwOTE5ZGYwL2FiNGExYzhhLWQ0MGItNDM3OC1hOWM2LWYzYjRkMDkx
OWRmMC5jcmwwHwYDVR0jBBgwFoAUYJHkR/5FvxB8QUF+z+uWJ05NrA8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hYjRhMWM4YS1kNDBiLTQzNzgtYTljNi1mM2I0
ZDA5MTlkZjAuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAF4UwAwQA
Qs3zAwQCrojUAwQB0Y5MMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFzPqinyxk312FppjIcbtmtNsB5h+EAW
JKCh5e5trOoVyUYpLefoOijxOnyS3nYvSvmEFIXTcrIVNsCH7tXbWjdvv4wYntSW
bvSCceEfh0BoNY+E3jm9r9gSOmFGinNG5zO4KtYr86zOfcHVp8WC9bykTXR3ZYdY
qJZK1b7neTqcRMqKUpLWwm++6tQYFs/r4QY1z4DAoiDBHQypgWJ80YVBj/UxoVv5
J4+BS2ZvGk3Qfp6Ja4vVCo338+OvKtB+VEnEBOoKBWwQdtPgYAc9IK1V5UYxy3xE
gYHq7VbYXTtLkIQ7JMsNu/jbSVw3CcXUUzMQQK2fXu3+eTratZLZsU8=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:12:50 2025 by rpki-client