Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/995012a3-c676-30f0-97ac-6854a908a622.roa
File:                     995012a3-c676-30f0-97ac-6854a908a622.roa (raw, json)
Hash identifier:          xRkO1DChxDOTGPMJiIsIyY6APYlo9p6MJsOjRccmH0o=
Subject key identifier:   16:62:31:80:45:F0:F4:30:4C:AD:A6:AB:79:77:89:69:4D:41:9A:FB
Certificate issuer:       /CN=6ad8d02c-4049-4deb-a840-4229a7010c02
Certificate serial:       010D0C9F4328584B047C05B16452CFC37C481B00
Authority key identifier: 74:FA:33:B5:F8:35:EA:5B:08:76:10:04:99:61:B8:67:68:6D:51:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/995012a3-c676-30f0-97ac-6854a908a622.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     395544
IP address blocks:        74.85.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/6ad8d02c-4049-4deb-a840-4229a7010c02.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/6ad8d02c-4049-4deb-a840-4229a7010c02.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:05:b1:64:52:cf:c3:7c:48:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ad8d02c-4049-4deb-a840-4229a7010c02
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=815f73a0-887d-496a-b47e-cb0e43b5ed7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:31:68:d9:ad:70:bb:cc:c8:2f:dd:83:80:bf:
                    ea:67:a8:a8:3f:8c:c7:69:1d:b9:14:66:e9:b0:5c:
                    5d:eb:69:9b:9b:bd:f5:89:71:2f:67:33:8f:4e:7d:
                    3b:b9:89:26:6d:c2:aa:25:cb:fe:2e:69:de:c9:e0:
                    2f:c4:1e:82:57:ee:e6:a7:c0:c3:7e:c6:c8:07:3e:
                    34:5d:bb:76:b9:44:50:17:d1:0a:ec:95:c9:9c:7a:
                    66:d6:8f:fa:ff:06:c5:15:47:97:0e:32:b9:84:b5:
                    d3:fe:ac:d0:42:c4:5a:ae:ce:19:9a:ae:85:39:ab:
                    fa:0d:4b:33:f0:64:89:25:ca:4a:13:c0:55:12:13:
                    ab:bb:91:76:9c:a7:9f:5f:6e:8f:47:1f:70:72:c7:
                    f5:03:a9:ec:d6:42:3b:6a:e2:7c:d2:3f:18:e1:a7:
                    f7:c2:5b:18:2c:47:70:83:e2:4e:35:69:11:21:86:
                    40:3d:74:c6:f1:56:5f:a3:7c:ee:e3:47:dc:bc:e3:
                    77:53:57:9d:17:c9:2b:bd:6d:e6:c9:d0:ed:40:90:
                    eb:30:14:ef:c1:85:d0:ea:f9:88:ca:5b:fb:a4:e4:
                    93:a5:4c:e4:18:3c:fa:bb:be:bb:ee:58:b9:4f:ca:
                    ea:f0:db:61:ed:11:14:0c:03:ed:7a:32:7b:d3:06:
                    2c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:62:31:80:45:F0:F4:30:4C:AD:A6:AB:79:77:89:69:4D:41:9A:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/995012a3-c676-30f0-97ac-6854a908a622.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/6ad8d02c-4049-4deb-a840-4229a7010c02.crl

            X509v3 Authority Key Identifier:
                keyid:74:FA:33:B5:F8:35:EA:5B:08:76:10:04:99:61:B8:67:68:6D:51:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.85.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:c4:00:b8:1a:25:20:1c:c9:2a:12:f5:28:c3:3a:dc:ac:9b:
         83:5f:fb:3b:18:d8:24:8a:9a:82:16:5f:9b:2f:ce:27:90:b7:
         a8:ce:3f:e3:73:a9:78:1f:0f:f5:5d:82:9a:0b:e0:42:98:cd:
         f6:20:67:63:fb:4e:ab:08:f4:cd:89:3b:ff:9d:f7:04:fc:29:
         e7:e7:d7:16:5c:44:b2:b7:37:52:78:ba:61:b2:9c:b8:58:e1:
         ac:5e:85:4d:37:21:2c:0f:b7:06:39:af:3e:9a:d9:d3:15:4e:
         80:bb:03:c7:f7:50:b5:f7:88:55:f5:fe:c7:2c:09:8f:3e:de:
         a6:9d:4f:11:0e:26:e0:18:f2:17:0c:8b:9c:f0:89:cc:7e:7e:
         a0:1a:b8:ce:be:fc:a1:b5:7b:e4:e1:95:40:f3:b6:c8:d7:f4:
         db:50:14:56:e2:65:30:64:e2:b2:5b:09:b7:c3:e0:56:4d:8d:
         86:f8:c3:c4:b1:3d:da:f9:98:18:3a:bd:6a:ff:26:07:a0:5f:
         f5:c2:08:a8:e3:f7:f7:7e:55:59:d2:6f:4b:88:6e:53:d8:9d:
         69:55:d3:dc:6d:f7:9e:fc:86:4c:98:bf:d8:a4:7f:7d:8d:c7:
         09:f6:5b:8e:c8:cf:99:34:51:c8:cd:f2:4e:57:bf:49:72:ba:
         1d:21:d0:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfAWxZFLPw3xIGwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmFkOGQwMmMtNDA0OS00ZGViLWE4NDAtNDIyOWE3MDEw
YzAyMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk
ODE1ZjczYTAtODg3ZC00OTZhLWI0N2UtY2IwZTQzYjVlZDdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDFo2a1wu8zIL92DgL/qZ6ioP4zHaR25FGbp
sFxd62mbm731iXEvZzOPTn07uYkmbcKqJcv+LmneyeAvxB6CV+7mp8DDfsbIBz40
Xbt2uURQF9EK7JXJnHpm1o/6/wbFFUeXDjK5hLXT/qzQQsRars4Zmq6FOav6DUsz
8GSJJcpKE8BVEhOru5F2nKefX26PRx9wcsf1A6ns1kI7auJ80j8Y4af3wlsYLEdw
g+JONWkRIYZAPXTG8VZfo3zu40fcvON3U1edF8krvW3mydDtQJDrMBTvwYXQ6vmI
ylv7pOSTpUzkGDz6u7677li5T8rq8Nth7REUDAPtejJ70wYs5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBZiMYBF8PQwTK2mq3l3iWlNQZr7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82YWQ4
ZDAyYy00MDQ5LTRkZWItYTg0MC00MjI5YTcwMTBjMDIvOTk1MDEyYTMtYzY3Ni0z
MGYwLTk3YWMtNjg1NGE5MDhhNjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmFkOGQwMmMtNDA0OS00ZGViLWE4
NDAtNDIyOWE3MDEwYzAyLzZhZDhkMDJjLTQwNDktNGRlYi1hODQwLTQyMjlhNzAx
MGMwMi5jcmwwHwYDVR0jBBgwFoAUdPoztfg16lsIdhAEmWG4Z2htUdMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82YWQ4ZDAyYy00MDQ5LTRkZWItYTg0MC00MjI5
YTcwMTBjMDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlWaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEzEALgaJSAcySoS9SjDOtysm4Nf+zsY2CSKmoIWX5svzieQt6jOP+Nz
qXgfD/VdgpoL4EKYzfYgZ2P7TqsI9M2JO/+d9wT8Kefn1xZcRLK3N1J4umGynLhY
4axehU03ISwPtwY5rz6a2dMVToC7A8f3ULX3iFX1/scsCY8+3qadTxEOJuAY8hcM
i5zwicx+fqAauM6+/KG1e+ThlUDztsjX9NtQFFbiZTBk4rJbCbfD4FZNjYb4w8Sx
Pdr5mBg6vWr/JgegX/XCCKjj9/d+VVnSb0uIblPYnWlV09xt9578hkyYv9ikf32N
xwn2W47Iz5k0UcjN8k5Xv0lyuh0h0Pc=
-----END CERTIFICATE-----
Generated at Sat Oct 18 20:24:54 2025 by rpki-client