Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9/55234696-887f-3906-a940-46a30090b1e4.roa
File:                     55234696-887f-3906-a940-46a30090b1e4.roa (raw, json)
Hash identifier:          xcdHHPkYJM2FsQ5Pc1uM8fS4Yc5IsB76Cmc3tdUMqT4=
Subject key identifier:   0D:FE:8F:18:52:BB:F2:5D:87:F7:34:4A:E2:DF:5A:60:56:5D:C0:05
Certificate issuer:       /CN=bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9
Certificate serial:       010D0C9F4328584ED167217A180F8F9D455D8640
Authority key identifier: F5:0C:E1:7B:3F:80:EB:2A:B8:70:CA:72:EC:70:69:50:0A:C7:8B:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9/55234696-887f-3906-a940-46a30090b1e4.roa
Signing time:             Thu 13 Aug 2026 01:00:11 +0000
ROA not before:           Thu 13 Aug 2026 01:00:11 +0000
ROA not after:            Wed 11 Nov 2026 02:00:11 +0000
asID:                     14729
IP address blocks:        74.220.88.0/24 maxlen: 24
                          74.220.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d1:67:21:7a:18:0f:8f:9d:45:5d:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9
        Validity
            Not Before: Aug 13 01:00:11 2026 GMT
            Not After : Nov 11 02:00:11 2026 GMT
        Subject: CN=111e037e-7790-4ac0-a7ed-1f83c14051bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e1:71:b2:22:b0:8d:de:3f:d4:3f:6e:d3:91:
                    ca:dd:4e:75:d2:8f:f0:bf:d6:fb:6e:72:f9:c9:be:
                    0a:c5:18:b8:34:bc:4f:76:a3:b0:04:76:ab:a1:38:
                    7f:48:12:f7:83:17:5f:52:e7:83:47:dc:6d:d6:eb:
                    2d:60:84:8c:ce:fb:ab:67:b9:cf:a3:09:09:d5:1e:
                    02:38:f9:24:57:43:94:61:d9:8e:b7:51:68:8e:8d:
                    9b:a8:cf:83:4d:49:24:2d:07:c9:3a:5d:57:8e:bf:
                    bc:26:b5:c6:3c:60:f6:6d:79:8f:c0:01:9a:b4:02:
                    fb:9c:98:c9:b5:ad:ff:af:f6:72:7f:d0:e6:12:20:
                    65:e4:52:b4:f8:62:29:c6:40:a5:bd:08:0b:77:aa:
                    fa:ce:c1:2e:42:33:e7:c1:02:60:20:36:5f:f7:c8:
                    ff:4e:25:00:fe:b2:f2:96:08:ce:e3:46:1d:a3:2d:
                    b1:e4:16:b0:2c:24:52:f7:cd:c9:0d:2f:d9:fb:b6:
                    70:3a:b3:4f:2a:a1:21:8c:45:74:73:ba:e9:e3:44:
                    da:bf:4a:b6:b7:4c:56:f0:f8:51:57:95:60:0e:ef:
                    57:72:08:d6:44:24:b2:cf:37:df:bd:9a:9f:b8:32:
                    b3:83:90:4e:a9:75:3a:4e:1f:9b:d5:3f:0d:8d:cb:
                    b0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:FE:8F:18:52:BB:F2:5D:87:F7:34:4A:E2:DF:5A:60:56:5D:C0:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9/55234696-887f-3906-a940-46a30090b1e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9.crl

            X509v3 Authority Key Identifier:
                keyid:F5:0C:E1:7B:3F:80:EB:2A:B8:70:CA:72:EC:70:69:50:0A:C7:8B:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.220.88.0/24
                  74.220.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:cc:d4:df:64:b1:08:b4:8f:5f:2d:7a:1d:e8:7a:2f:6e:28:
         6e:cf:73:f8:9d:2c:05:66:07:24:93:7e:8d:0c:8b:78:30:d2:
         4a:3f:6e:cf:fe:66:db:07:4b:97:d3:5b:ca:de:e5:39:02:4f:
         8c:92:c2:a2:78:7c:99:5f:e2:2e:f7:a5:37:5d:69:88:16:33:
         b7:0d:59:c2:c7:5c:d1:2d:e0:1e:51:d7:73:be:82:ae:f3:b7:
         15:0b:fd:cd:43:cb:dd:a3:53:2d:1a:68:07:f1:cf:01:8e:78:
         9a:51:68:36:5b:81:3c:c0:19:45:36:ce:cd:2f:6a:aa:09:e3:
         cb:42:a4:b7:fc:a0:1c:f4:6b:f2:2b:85:8e:bf:79:8f:64:2b:
         1c:18:d3:81:8c:d1:d3:ab:d9:32:78:c7:9b:3d:ac:bd:b3:bc:
         14:41:2e:f8:27:7c:27:82:b1:6e:50:b5:5e:fc:7a:40:e4:c2:
         53:3b:98:57:1c:97:e0:bd:27:66:64:13:fd:e7:98:b5:51:ef:
         fc:f1:32:fb:64:51:cd:88:0d:12:36:3b:63:f4:08:ab:9f:25:
         9f:94:92:7e:64:94:7c:60:3e:64:ea:79:d6:8b:88:8e:6c:98:
         20:f7:51:43:75:b5:21:23:c5:6a:be:b5:e7:41:09:ab:c8:e9:
         b6:d7:c3:7b
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7RZyF6GA+PnUVdhkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNjNmE0MWYtZTZhYy00Mzg4LTlhYzAtOGNmMGU2NzA0
MGI5MB4XDTI2MDgxMzAxMDAxMVoXDTI2MTExMTAyMDAxMVowLzEtMCsGA1UEAxMk
MTExZTAzN2UtNzc5MC00YWMwLWE3ZWQtMWY4M2MxNDA1MWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuFxsiKwjd4/1D9u05HK3U510o/wv9b7bnL5
yb4KxRi4NLxPdqOwBHaroTh/SBL3gxdfUueDR9xt1ustYISMzvurZ7nPowkJ1R4C
OPkkV0OUYdmOt1Fojo2bqM+DTUkkLQfJOl1Xjr+8JrXGPGD2bXmPwAGatAL7nJjJ
ta3/r/Zyf9DmEiBl5FK0+GIpxkClvQgLd6r6zsEuQjPnwQJgIDZf98j/TiUA/rLy
lgjO40Ydoy2x5BawLCRS983JDS/Z+7ZwOrNPKqEhjEV0c7rp40Tav0q2t0xW8PhR
V5VgDu9XcgjWRCSyzzffvZqfuDKzg5BOqXU6Th+b1T8Njcuw+wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFA3+jxhSu/Jdh/c0SuLfWmBWXcAFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iY2M2
YTQxZi1lNmFjLTQzODgtOWFjMC04Y2YwZTY3MDQwYjkvNTUyMzQ2OTYtODg3Zi0z
OTA2LWE5NDAtNDZhMzAwOTBiMWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmNjNmE0MWYtZTZhYy00Mzg4LTlh
YzAtOGNmMGU2NzA0MGI5L2JjYzZhNDFmLWU2YWMtNDM4OC05YWMwLThjZjBlNjcw
NDBiOS5jcmwwHwYDVR0jBBgwFoAU9Qzhez+A6yq4cMpy7HBpUArHi/YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iY2M2YTQxZi1lNmFjLTQzODgtOWFjMC04Y2Yw
ZTY3MDQwYjkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAStxYAwQB
StxaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADjM1N9ksQi0j18teh3oei9uKG7Pc/idLAVmBySTfo0Mi3gw
0ko/bs/+ZtsHS5fTW8re5TkCT4ySwqJ4fJlf4i73pTddaYgWM7cNWcLHXNEt4B5R
13O+gq7ztxUL/c1Dy92jUy0aaAfxzwGOeJpRaDZbgTzAGUU2zs0vaqoJ48tCpLf8
oBz0a/IrhY6/eY9kKxwY04GM0dOr2TJ4x5s9rL2zvBRBLvgnfCeCsW5QtV78ekDk
wlM7mFccl+C9J2ZkE/3nmLVR7/zxMvtkUc2IDRI2O2P0CKufJZ+Ukn5klHxgPmTq
edaLiI5smCD3UUN1tSEjxWq+tedBCavI6bbXw3s=
-----END CERTIFICATE-----
Generated at Tue Sep 15 19:57:35 2026 by rpki-client