Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/119a8ee9-c67a-3c89-b56c-207a8120cc45.roa
File:                     119a8ee9-c67a-3c89-b56c-207a8120cc45.roa (raw, json)
Hash identifier:          qteBmmVEkt5anyKJKtQK/Xjo5rFVsbg1OqjsXO8gvwA=
Subject key identifier:   E2:C9:12:F7:1D:C6:77:96:2D:7B:35:33:61:45:7E:A6:EB:CD:BC:E6
Certificate issuer:       /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
Certificate serial:       010D0C9F4328584A6DBB42E2530E1F690B964F00
Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/119a8ee9-c67a-3c89-b56c-207a8120cc45.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     396185
IP address blocks:        74.127.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:42:e2:53:0e:1f:69:0b:96:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=1a7c740c-6833-4e5f-9067-9b7d2e6404cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:03:c3:ba:a0:c1:eb:a4:9e:9f:3d:5f:f7:e5:
                    b6:61:c5:32:32:2f:fd:3c:17:db:d3:79:cb:4c:2b:
                    ac:37:54:6c:da:1b:11:4d:f4:81:7a:84:51:ad:f9:
                    3a:ab:d8:4d:e6:ba:fa:17:f1:2e:3e:9d:86:6a:ab:
                    fa:9e:a6:6a:3c:4a:74:3a:41:0d:96:f7:4c:d8:40:
                    fb:59:ca:52:1d:2a:37:bb:64:70:80:d3:94:22:b7:
                    dc:c1:d6:0b:ed:52:bc:c8:0c:dc:aa:85:f9:04:c9:
                    4c:1f:df:00:23:b3:66:48:e8:78:58:c9:8d:31:1d:
                    d2:3e:78:08:53:cf:b3:b5:4f:af:d8:fb:f3:c4:39:
                    66:63:14:96:d7:eb:08:47:c3:f8:da:4a:97:90:22:
                    5d:51:0e:4b:d3:ca:90:a3:c9:0b:23:93:8f:4b:29:
                    27:4d:0c:2b:e7:9b:26:34:10:d2:a3:35:30:80:b0:
                    4c:17:2b:19:13:ab:d4:44:ff:53:f0:e2:3a:d0:a3:
                    a6:76:b5:46:0b:6d:f5:f7:42:08:60:13:c0:f1:01:
                    8a:ce:f9:88:f5:fc:3c:61:79:28:20:7d:37:22:06:
                    d9:95:1a:d4:98:a2:94:b6:99:04:90:d5:a0:34:a6:
                    51:97:a2:03:c2:b0:30:70:dc:a2:b8:bc:08:8e:ad:
                    22:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C9:12:F7:1D:C6:77:96:2D:7B:35:33:61:45:7E:A6:EB:CD:BC:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/119a8ee9-c67a-3c89-b56c-207a8120cc45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl

            X509v3 Authority Key Identifier:
                keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.127.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:67:b1:0c:2c:94:10:ed:ac:a4:cf:4b:40:ce:b0:90:5e:d9:
         ce:5f:d0:d3:f4:7a:c4:c1:60:11:a5:16:ad:95:0d:6d:fa:64:
         6e:d0:16:1b:f2:b5:c5:93:e3:91:7d:a1:a4:6d:3a:1c:f2:d6:
         84:49:8d:c6:64:14:22:9e:5a:d1:7b:5d:cd:05:32:ea:83:4b:
         19:48:c1:1b:9e:cb:df:95:7a:58:01:02:2c:f7:9e:fc:c7:4f:
         17:20:0d:2d:95:bf:b9:5f:9f:02:2e:04:e0:2d:ac:5d:09:a8:
         3c:56:b7:48:e1:a1:ed:4f:2a:ff:3a:97:eb:89:ff:c4:78:91:
         ee:ac:2e:17:ea:2b:01:bd:a0:4e:c4:7e:f6:3e:f1:3b:e2:b5:
         e2:77:e4:5a:07:9e:1a:08:02:cb:ca:fe:db:14:61:34:2a:f9:
         d8:bf:30:00:37:0f:64:2e:7b:23:06:a8:b7:42:52:18:f1:d7:
         44:ff:d8:45:41:af:07:c2:6f:76:4e:f0:f5:da:e5:84:01:ae:
         76:e1:91:33:2c:0b:be:2d:5c:3e:79:79:34:13:b7:ff:35:f3:
         d9:55:8d:f8:d6:fc:f2:b8:51:31:cf:5b:9e:ba:9d:28:5c:47:
         b7:3a:68:ae:31:e9:7c:cd:21:2c:b3:84:b3:a3:8b:c4:9b:ef:
         62:80:b1:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu0LiUw4faQuWTwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm
YTExMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk
MWE3Yzc0MGMtNjgzMy00ZTVmLTkwNjctOWI3ZDJlNjQwNGNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggPDuqDB66Senz1f9+W2YcUyMi/9PBfb03nL
TCusN1Rs2hsRTfSBeoRRrfk6q9hN5rr6F/EuPp2Gaqv6nqZqPEp0OkENlvdM2ED7
WcpSHSo3u2RwgNOUIrfcwdYL7VK8yAzcqoX5BMlMH98AI7NmSOh4WMmNMR3SPngI
U8+ztU+v2PvzxDlmYxSW1+sIR8P42kqXkCJdUQ5L08qQo8kLI5OPSyknTQwr55sm
NBDSozUwgLBMFysZE6vURP9T8OI60KOmdrVGC23190IIYBPA8QGKzvmI9fw8YXko
IH03IgbZlRrUmKKUtpkEkNWgNKZRl6IDwrAwcNyiuLwIjq0ivQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOLJEvcdxneWLXs1M2FFfqbrzbzmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw
ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvMTE5YThlZTktYzY3YS0z
Yzg5LWI1NmMtMjA3YTgxMjBjYzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1
YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk
ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5
NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSn9AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ1nsQwslBDtrKTPS0DOsJBe2c5f0NP0esTBYBGlFq2VDW36ZG7QFhvy
tcWT45F9oaRtOhzy1oRJjcZkFCKeWtF7Xc0FMuqDSxlIwRuey9+VelgBAiz3nvzH
TxcgDS2Vv7lfnwIuBOAtrF0JqDxWt0jhoe1PKv86l+uJ/8R4ke6sLhfqKwG9oE7E
fvY+8TviteJ35FoHnhoIAsvK/tsUYTQq+di/MAA3D2QueyMGqLdCUhjx10T/2EVB
rwfCb3ZO8PXa5YQBrnbhkTMsC74tXD55eTQTt/8189lVjfjW/PK4UTHPW566nShc
R7c6aK4x6XzNISyzhLOji8Sb72KAsT8=
-----END CERTIFICATE-----
Generated at Sun Jul 13 12:19:41 2025 by rpki-client