Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9/2e0737cb-444e-353c-a1b6-5e659ac4f2aa.roa
File:                     2e0737cb-444e-353c-a1b6-5e659ac4f2aa.roa (raw, json)
Hash identifier:          BnkUKFksFgQiYDNVFCK36AS/0j4wO3McsGS07r+DtpU=
Subject key identifier:   A0:28:D4:E5:D9:1B:BF:CF:30:F4:04:7D:BD:EA:6A:D3:B1:45:BC:FA
Certificate issuer:       /CN=bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9
Certificate serial:       010D0C9F4328584ED16721A1A5FDA4FEBE0D6DE0
Authority key identifier: F5:0C:E1:7B:3F:80:EB:2A:B8:70:CA:72:EC:70:69:50:0A:C7:8B:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9/2e0737cb-444e-353c-a1b6-5e659ac4f2aa.roa
Signing time:             Thu 13 Aug 2026 01:00:11 +0000
ROA not before:           Thu 13 Aug 2026 01:00:11 +0000
ROA not after:            Wed 11 Nov 2026 02:00:11 +0000
asID:                     55189
IP address blocks:        74.220.85.0/24 maxlen: 24
                          74.220.86.0/23 maxlen: 23
                          74.220.94.0/24 maxlen: 24
                          74.220.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d1:67:21:a1:a5:fd:a4:fe:be:0d:6d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9
        Validity
            Not Before: Aug 13 01:00:11 2026 GMT
            Not After : Nov 11 02:00:11 2026 GMT
        Subject: CN=d0068bcf-de24-432f-96cc-a84b8dc8d3fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bc:30:84:67:65:f4:02:1f:85:03:c8:aa:15:
                    6f:64:51:22:89:79:b2:27:d6:f5:a6:35:0f:ae:d5:
                    a8:e5:75:db:b5:46:84:52:b9:dc:4e:c9:64:d9:9b:
                    be:69:05:a3:a9:f3:f7:ee:b5:ec:90:c3:95:6d:64:
                    a0:21:27:ab:ad:51:9b:0b:c1:aa:25:d7:10:27:a6:
                    6b:6f:1c:47:c7:85:22:af:fa:56:9e:ca:66:e0:83:
                    aa:d8:0b:98:f0:27:86:2c:7e:11:7c:7a:83:5a:0e:
                    0a:c3:83:55:ac:3c:56:1f:a6:2c:1e:e6:bd:93:7a:
                    fa:5f:65:92:9d:90:88:56:07:3e:1f:20:83:a3:4a:
                    80:92:98:9c:43:0d:43:98:42:66:76:3e:22:35:78:
                    45:16:f0:fc:c5:41:6c:99:aa:70:af:91:1d:86:bb:
                    c7:35:e5:05:66:5d:c3:57:ae:aa:49:32:d6:0d:39:
                    04:5a:b4:40:ab:5f:a3:ab:da:cd:1a:7a:2e:82:9d:
                    94:b8:12:18:20:89:98:2e:ea:2e:ec:4f:57:b6:e8:
                    dc:77:b7:4e:d5:8b:31:9c:a0:03:b2:7c:bf:07:d0:
                    41:a9:73:e3:91:34:ce:2b:a5:83:7e:29:fc:3f:7c:
                    f6:88:bf:c8:a2:67:71:32:9d:1b:a9:8c:b3:d1:15:
                    01:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:28:D4:E5:D9:1B:BF:CF:30:F4:04:7D:BD:EA:6A:D3:B1:45:BC:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9/2e0737cb-444e-353c-a1b6-5e659ac4f2aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9.crl

            X509v3 Authority Key Identifier:
                keyid:F5:0C:E1:7B:3F:80:EB:2A:B8:70:CA:72:EC:70:69:50:0A:C7:8B:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.220.85.0-74.220.87.255
                  74.220.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:af:82:44:cd:0a:85:09:f8:03:df:6d:89:47:e7:1b:b3:7b:
         5e:e5:58:93:72:f6:5c:02:b6:fd:99:7f:81:81:ad:7b:de:0f:
         c8:c0:59:68:f7:4b:59:41:8a:14:ef:09:45:a9:c1:40:84:28:
         76:e2:91:fa:fc:49:51:37:08:3d:be:a9:57:d2:85:e8:c9:d3:
         3c:59:93:d3:ce:19:de:60:03:01:17:20:30:37:bb:2e:f8:2e:
         e0:22:b1:de:0c:cb:b4:52:ba:d5:a9:b6:a7:52:f1:30:3c:87:
         1b:de:27:60:5c:38:9c:5c:52:18:79:76:d5:04:fe:e9:fc:cb:
         ba:ae:11:ce:a9:ce:68:a3:ac:af:6c:81:38:8f:17:3b:5d:10:
         45:14:51:d1:f6:41:61:e2:66:64:38:6c:8b:9a:0a:44:86:97:
         bb:a6:8d:16:58:2d:cb:fd:c5:83:53:05:34:f5:34:0f:b4:19:
         9c:1e:30:4b:9a:07:19:97:3b:fb:70:c4:ef:37:b5:4d:fb:16:
         01:c7:4b:24:47:20:ce:eb:6b:ed:d8:fb:c9:83:4d:ee:9d:28:
         0d:f4:36:0b:22:bf:4d:27:c5:22:f3:f7:e4:43:9a:dd:38:24:
         6a:c3:9d:fe:10:4f:08:74:92:f3:93:41:23:e2:db:1a:37:2c:
         85:8c:fe:98
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE7RZyGhpf2k/r4NbeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNjNmE0MWYtZTZhYy00Mzg4LTlhYzAtOGNmMGU2NzA0
MGI5MB4XDTI2MDgxMzAxMDAxMVoXDTI2MTExMTAyMDAxMVowLzEtMCsGA1UEAxMk
ZDAwNjhiY2YtZGUyNC00MzJmLTk2Y2MtYTg0YjhkYzhkM2ZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7wwhGdl9AIfhQPIqhVvZFEiiXmyJ9b1pjUP
rtWo5XXbtUaEUrncTslk2Zu+aQWjqfP37rXskMOVbWSgISerrVGbC8GqJdcQJ6Zr
bxxHx4Uir/pWnspm4IOq2AuY8CeGLH4RfHqDWg4Kw4NVrDxWH6YsHua9k3r6X2WS
nZCIVgc+HyCDo0qAkpicQw1DmEJmdj4iNXhFFvD8xUFsmapwr5EdhrvHNeUFZl3D
V66qSTLWDTkEWrRAq1+jq9rNGnougp2UuBIYIImYLuou7E9Xtujcd7dO1YsxnKAD
sny/B9BBqXPjkTTOK6WDfin8P3z2iL/IomdxMp0bqYyz0RUBYwIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFKAo1OXZG7/PMPQEfb3qatOxRbz6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iY2M2
YTQxZi1lNmFjLTQzODgtOWFjMC04Y2YwZTY3MDQwYjkvMmUwNzM3Y2ItNDQ0ZS0z
NTNjLWExYjYtNWU2NTlhYzRmMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmNjNmE0MWYtZTZhYy00Mzg4LTlh
YzAtOGNmMGU2NzA0MGI5L2JjYzZhNDFmLWU2YWMtNDM4OC05YWMwLThjZjBlNjcw
NDBiOS5jcmwwHwYDVR0jBBgwFoAU9Qzhez+A6yq4cMpy7HBpUArHi/YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iY2M2YTQxZi1lNmFjLTQzODgtOWFjMC04Y2Yw
ZTY3MDQwYjkuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABK3FUD
BANK3FADBAFK3F4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEADa+CRM0KhQn4A99tiUfnG7N7XuVYk3L2XAK2
/Zl/gYGte94PyMBZaPdLWUGKFO8JRanBQIQoduKR+vxJUTcIPb6pV9KF6MnTPFmT
084Z3mADARcgMDe7Lvgu4CKx3gzLtFK61am2p1LxMDyHG94nYFw4nFxSGHl21QT+
6fzLuq4RzqnOaKOsr2yBOI8XO10QRRRR0fZBYeJmZDhsi5oKRIaXu6aNFlgty/3F
g1MFNPU0D7QZnB4wS5oHGZc7+3DE7ze1TfsWAcdLJEcgzutr7dj7yYNN7p0oDfQ2
CyK/TSfFIvP35EOa3TgkasOd/hBPCHSS85NBI+LbGjcshYz+mA==
-----END CERTIFICATE-----
Generated at Tue Sep 15 18:01:47 2026 by rpki-client