Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/99851ab3-ab14-3a67-a3db-991e9c97889b.roa
File:                     99851ab3-ab14-3a67-a3db-991e9c97889b.roa (raw, json)
Hash identifier:          7ASOd0+5/LPz/uuZJLRxFs5cORF4JtJNveMu1rfVG5w=
Subject key identifier:   03:AE:52:18:C9:EF:75:9C:FD:7B:12:8F:D4:DF:C1:DF:A7:B6:EE:F2
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584B2A2C397980C6EA742E56478B
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/99851ab3-ab14-3a67-a3db-991e9c97889b.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     31867
IP address blocks:        74.113.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:39:79:80:c6:ea:74:2e:56:47:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=f5976c98-bd15-472c-97ed-fb5ad0694a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6f:3b:99:5d:13:e3:ad:14:4c:44:7c:0a:86:
                    fe:46:85:71:a7:86:85:8a:ec:a6:9b:4f:b1:fa:af:
                    f2:bc:6b:82:7a:01:f6:6b:52:99:08:9a:60:98:7c:
                    3b:8f:39:14:93:8a:3b:3c:e8:d1:36:e6:a5:e6:88:
                    c6:e6:cc:a2:95:4b:fb:d5:b2:51:d0:49:28:c8:23:
                    98:6b:16:1c:45:59:55:1a:45:96:df:c0:73:e7:57:
                    a0:21:da:e4:2c:57:00:c4:b3:96:a8:51:b6:8f:f3:
                    39:5c:55:a3:17:51:a4:1b:08:15:c4:4d:50:60:ed:
                    a3:43:9d:1b:0e:91:5c:23:da:c9:15:25:4d:4f:74:
                    6f:21:34:1d:27:68:fd:39:9e:a7:87:7d:95:92:1c:
                    6a:8a:0b:dc:37:11:e7:0d:ce:f4:ce:2d:a5:76:0a:
                    28:b1:71:02:a2:22:35:2b:ae:c1:53:38:8d:d0:36:
                    8b:71:eb:4d:02:4c:d7:9d:d3:f4:d8:33:d1:24:02:
                    50:9b:0b:5c:ef:5f:4c:69:4d:49:bb:d3:85:b7:36:
                    ca:67:d3:08:a6:1a:51:68:3e:28:2a:2d:a8:c6:82:
                    03:4e:54:a7:97:c8:0f:37:46:41:2d:0a:6b:4b:ae:
                    d1:6f:1d:4b:23:21:53:63:39:27:e2:62:1d:13:80:
                    08:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AE:52:18:C9:EF:75:9C:FD:7B:12:8F:D4:DF:C1:DF:A7:B6:EE:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/99851ab3-ab14-3a67-a3db-991e9c97889b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.113.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:c8:8c:38:26:35:bc:72:43:6a:d8:1a:74:06:05:8a:b6:5e:
         c9:ab:f3:52:23:5e:2e:70:1e:b1:7d:fb:03:91:ad:d8:bc:8b:
         d7:f8:30:ff:29:a7:0c:7c:23:7c:df:0e:42:ed:5b:76:b3:dc:
         b8:b9:7c:aa:9f:f3:e0:b2:42:7c:5d:38:89:a4:f6:62:f5:b6:
         d1:ff:b9:f2:41:d1:51:34:1b:e6:13:1a:df:68:7a:30:c7:32:
         4f:36:9d:77:83:3d:a0:c1:93:2c:8d:19:fe:38:37:48:8a:35:
         e9:f7:54:e6:a7:06:6c:35:87:33:47:84:ae:dc:07:1a:41:6a:
         6a:88:7d:18:5a:9a:05:1f:79:f7:ae:28:a8:7d:1f:06:b1:c7:
         02:6c:82:01:bc:13:50:31:51:5e:80:37:ff:58:33:37:04:26:
         ec:f4:eb:8d:3f:76:ed:98:ca:7c:2d:19:41:31:22:c3:35:1d:
         71:4e:56:3d:1a:b2:f6:84:87:7a:66:a4:8d:31:d4:c1:8e:47:
         db:69:68:d0:f8:da:4b:99:85:3d:4f:15:4e:ae:f3:07:be:d2:
         1e:1c:7d:a3:20:89:bc:bf:47:af:a8:14:5f:7b:a9:bf:31:5f:
         52:96:37:cf:d0:c8:8c:11:0f:1c:47:f2:dd:1d:f3:3b:6c:f9:
         37:28:ca:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLDl5gMbqdC5WR4swDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjE4OTgxMDAtZjQwYy00MDAyLWI2OGEtOGE5N2I1NDhl
NjlkMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk
ZjU5NzZjOTgtYmQxNS00NzJjLTk3ZWQtZmI1YWQwNjk0YTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW87mV0T460UTER8Cob+RoVxp4aFiuymm0+x
+q/yvGuCegH2a1KZCJpgmHw7jzkUk4o7POjRNual5ojG5syilUv71bJR0EkoyCOY
axYcRVlVGkWW38Bz51egIdrkLFcAxLOWqFG2j/M5XFWjF1GkGwgVxE1QYO2jQ50b
DpFcI9rJFSVNT3RvITQdJ2j9OZ6nh32VkhxqigvcNxHnDc70zi2ldgoosXECoiI1
K67BUziN0DaLcetNAkzXndP02DPRJAJQmwtc719MaU1Ju9OFtzbKZ9MIphpRaD4o
Ki2oxoIDTlSnl8gPN0ZBLQprS67Rbx1LIyFTYzkn4mIdE4AI0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAOuUhjJ73Wc/XsSj9Tfwd+ntu7yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5
ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3YjU0OGU2OWQvOTk4NTFhYjMtYWIxNC0z
YTY3LWEzZGItOTkxZTljOTc4ODliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjE4OTgxMDAtZjQwYy00MDAyLWI2
OGEtOGE5N2I1NDhlNjlkL2IxODk4MTAwLWY0MGMtNDAwMi1iNjhhLThhOTdiNTQ4
ZTY5ZC5jcmwwHwYDVR0jBBgwFoAUiUz4vQ00NIcYcDP5AHBKyw94UlMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3
YjU0OGU2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnFhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD3IjDgmNbxyQ2rYGnQGBYq2Xsmr81IjXi5wHrF9+wORrdi8i9f4MP8p
pwx8I3zfDkLtW3az3Li5fKqf8+CyQnxdOImk9mL1ttH/ufJB0VE0G+YTGt9oejDH
Mk82nXeDPaDBkyyNGf44N0iKNen3VOanBmw1hzNHhK7cBxpBamqIfRhamgUfefeu
KKh9HwaxxwJsggG8E1AxUV6AN/9YMzcEJuz0640/du2YynwtGUExIsM1HXFOVj0a
svaEh3pmpI0x1MGOR9tpaND42kuZhT1PFU6u8we+0h4cfaMgiby/R6+oFF97qb8x
X1KWN8/QyIwRDxxH8t0d8zts+Tcoyv4=
-----END CERTIFICATE-----
Generated at Fri Oct 10 21:55:52 2025 by rpki-client