Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/255fb3e2-66b1-3c2a-80d8-f8806348c48e.roa
File:                     255fb3e2-66b1-3c2a-80d8-f8806348c48e.roa (raw, json)
Hash identifier:          hz6RAHdoSWZS20YwSOY/VD6VVEDLoJFnAJ+PAhAbCyI=
Subject key identifier:   56:B6:70:C5:9D:74:BC:3D:99:74:50:C9:86:67:4A:50:41:24:0A:D4
Certificate issuer:       /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
Certificate serial:       010D0C9F4328584A6DBB6E116383B0C94619B700
Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/255fb3e2-66b1-3c2a-80d8-f8806348c48e.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     396185
IP address blocks:        74.127.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:6e:11:63:83:b0:c9:46:19:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=5779124f-8ed5-4b99-85f1-0271146d85cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:46:08:fa:0b:e6:45:e0:93:80:b5:a8:8c:d4:
                    f9:36:57:53:ea:c3:17:d3:ee:55:0b:19:de:29:43:
                    3c:7d:d6:21:bc:c9:61:96:0e:56:41:d4:a5:df:db:
                    bf:58:e2:13:2d:d4:ef:55:86:27:a2:5f:99:c7:74:
                    e3:9f:6a:a6:6b:b5:fc:fd:3c:97:5d:3e:f3:bd:b2:
                    c3:74:17:0c:68:b9:6f:e6:4c:26:75:72:0b:ea:39:
                    cd:f6:8d:f2:e0:45:0c:50:cd:31:42:b8:22:ee:a6:
                    de:27:d3:46:be:cb:9c:3f:8b:4c:2f:8d:c4:ca:e0:
                    f0:e0:86:7d:02:13:c1:db:9d:09:d4:da:ad:f3:df:
                    d6:9c:bc:9e:7a:7b:16:6f:0f:40:f4:f1:52:33:e0:
                    c2:7d:20:70:ea:18:29:87:ed:19:3c:12:df:e2:29:
                    99:d2:d4:06:69:ed:db:32:48:cb:8b:f2:80:34:05:
                    39:39:a1:ec:59:f9:aa:cd:7d:c9:e0:9a:cd:a0:07:
                    01:23:d8:c5:b9:87:67:d9:73:56:12:f0:ce:40:3c:
                    58:bf:5b:02:cb:eb:86:2f:ba:32:f2:72:5a:c2:df:
                    00:62:c4:7c:44:a1:09:bf:00:3d:ba:48:a2:74:0e:
                    7a:85:5b:48:31:f3:fc:ec:7a:49:37:8b:af:a8:fd:
                    87:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B6:70:C5:9D:74:BC:3D:99:74:50:C9:86:67:4A:50:41:24:0A:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/255fb3e2-66b1-3c2a-80d8-f8806348c48e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl

            X509v3 Authority Key Identifier:
                keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.127.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:87:ad:ef:7c:b2:98:91:35:82:b9:a4:4c:8a:2e:a7:fa:17:
         d9:26:68:a3:95:72:17:6a:ad:0a:00:c7:7e:4d:88:bf:39:f6:
         17:af:5f:40:30:4a:3b:57:ed:a9:f4:c7:79:af:ad:54:38:6c:
         a7:78:35:d6:eb:bf:f5:fd:d6:ea:de:bb:a4:7b:11:6c:ad:df:
         2c:b6:8e:b2:6a:6f:18:9d:5b:df:91:b2:43:ba:82:b9:4a:aa:
         2b:fe:cd:ac:db:54:70:b0:d6:21:8f:22:36:9c:93:98:49:6b:
         dc:c4:bb:89:ba:5c:b9:38:12:62:c4:84:99:63:6e:75:ed:23:
         f1:d8:1f:8f:24:ec:d6:06:db:81:3b:ec:0b:04:8a:f8:13:92:
         ea:4e:e9:a9:ab:38:d3:e2:e5:85:e7:0d:40:6c:4f:b0:3d:c0:
         6d:fe:b1:45:40:04:27:9c:bb:2f:9d:85:3d:6b:69:03:8c:2a:
         40:8f:3f:51:36:f7:d9:18:c8:33:f0:25:fd:98:0e:2a:cf:f7:
         1b:e2:19:59:36:b8:1e:42:cc:86:f0:e2:f9:8b:58:77:14:f7:
         c2:3c:62:e4:a8:95:fe:25:70:4b:74:54:26:df:7b:f0:a3:8b:
         05:b7:da:ec:1b:ac:0e:4c:0e:74:97:d7:d6:e7:9e:f1:09:0d:
         56:c7:27:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu24RY4OwyUYZtwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm
YTExMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk
NTc3OTEyNGYtOGVkNS00Yjk5LTg1ZjEtMDI3MTE0NmQ4NWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UYI+gvmReCTgLWojNT5NldT6sMX0+5VCxne
KUM8fdYhvMlhlg5WQdSl39u/WOITLdTvVYYnol+Zx3Tjn2qma7X8/TyXXT7zvbLD
dBcMaLlv5kwmdXIL6jnN9o3y4EUMUM0xQrgi7qbeJ9NGvsucP4tML43EyuDw4IZ9
AhPB250J1Nqt89/WnLyeensWbw9A9PFSM+DCfSBw6hgph+0ZPBLf4imZ0tQGae3b
MkjLi/KANAU5OaHsWfmqzX3J4JrNoAcBI9jFuYdn2XNWEvDOQDxYv1sCy+uGL7oy
8nJawt8AYsR8RKEJvwA9ukiidA56hVtIMfP87HpJN4uvqP2HcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFa2cMWddLw9mXRQyYZnSlBBJArUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw
ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvMjU1ZmIzZTItNjZiMS0z
YzJhLTgwZDgtZjg4MDYzNDhjNDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1
YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk
ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5
NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn9ZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFmHre98spiRNYK5pEyKLqf6F9kmaKOVchdqrQoAx35NiL859hevX0Aw
SjtX7an0x3mvrVQ4bKd4Ndbrv/X91ureu6R7EWyt3yy2jrJqbxidW9+RskO6grlK
qiv+zazbVHCw1iGPIjack5hJa9zEu4m6XLk4EmLEhJljbnXtI/HYH48k7NYG24E7
7AsEivgTkupO6amrONPi5YXnDUBsT7A9wG3+sUVABCecuy+dhT1raQOMKkCPP1E2
99kYyDPwJf2YDirP9xviGVk2uB5CzIbw4vmLWHcU98I8YuSolf4lcEt0VCbfe/Cj
iwW32uwbrA5MDnSX19bnnvEJDVbHJ6Y=
-----END CERTIFICATE-----
Generated at Sun Jul 13 11:26:34 2025 by rpki-client