Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/e050482f-7b99-3a10-b29d-7b7aa5d897fc.roa
File:                     e050482f-7b99-3a10-b29d-7b7aa5d897fc.roa (raw, json)
Hash identifier:          uiiH7c+51Rg/pf7eQWmkFKTJKigbCGONR3glo51xlKE=
Subject key identifier:   E3:D7:11:8D:0E:AF:84:7B:53:62:28:6A:25:FF:B2:20:4C:5D:15:F6
Certificate issuer:       /CN=8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c
Certificate serial:       010D0C9F4328584B61DCF7BA62A6727235C92F80
Authority key identifier: B3:27:C8:6E:2F:06:AC:4E:AE:62:5D:34:43:F4:B8:F5:E6:0A:6C:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/e050482f-7b99-3a10-b29d-7b7aa5d897fc.roa
Signing time:             Wed 01 Oct 2025 23:46:02 +0000
ROA not before:           Wed 01 Oct 2025 23:46:02 +0000
ROA not after:            Wed 31 Dec 2025 00:46:02 +0000
asID:                     396982
IP address blocks:        74.117.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:61:dc:f7:ba:62:a6:72:72:35:c9:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c
        Validity
            Not Before: Oct  1 23:46:02 2025 GMT
            Not After : Dec 31 00:46:02 2025 GMT
        Subject: CN=7dda06a4-fc31-4281-a8ee-d17e5c10a123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7e:5c:3a:be:ed:a7:95:52:31:5f:7f:d8:9b:
                    1e:94:ea:00:ab:bc:da:89:7b:3e:99:4c:4a:ea:fd:
                    2f:47:e5:ad:db:b6:9d:7f:da:ab:de:56:08:df:0c:
                    b6:17:09:2b:eb:f4:22:6f:c4:a4:fc:eb:23:d0:95:
                    ef:b7:0d:34:fa:54:24:3e:e6:51:a0:11:e9:36:6a:
                    e7:ad:b6:18:45:80:33:a8:8e:84:86:e5:b6:41:38:
                    2e:f3:1c:26:60:d2:97:54:f4:57:20:cd:90:e4:b6:
                    20:83:b0:4b:5a:97:22:b8:7b:f7:33:66:6e:65:c2:
                    8a:30:29:1e:2d:f1:b2:77:ee:07:2c:d7:3c:41:e5:
                    e4:fd:89:ef:64:d0:86:35:c1:b1:cb:36:aa:d1:3a:
                    ff:8c:05:db:e1:3c:75:29:f1:a9:22:79:07:a0:60:
                    9f:85:cf:4a:e0:60:54:64:78:14:20:3c:94:63:6a:
                    82:c1:c3:57:0a:c2:d6:4b:09:31:29:bb:ac:1e:68:
                    a7:3e:ea:96:af:0d:a1:88:10:08:47:10:40:e2:dd:
                    2e:6b:61:f0:f6:f5:2d:76:4c:9e:dd:cc:48:78:bc:
                    cc:a9:6a:c5:95:a1:a8:b9:25:85:8e:9f:2f:f9:be:
                    48:f4:59:fd:a4:4a:7a:53:b2:ff:3f:ff:1d:d8:06:
                    5c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D7:11:8D:0E:AF:84:7B:53:62:28:6A:25:FF:B2:20:4C:5D:15:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/e050482f-7b99-3a10-b29d-7b7aa5d897fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.crl

            X509v3 Authority Key Identifier:
                keyid:B3:27:C8:6E:2F:06:AC:4E:AE:62:5D:34:43:F4:B8:F5:E6:0A:6C:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:86:05:91:e6:ba:65:5b:0b:11:1c:af:d4:e3:41:09:75:1b:
         3c:9c:a4:38:d3:f7:d7:e5:f3:16:99:43:ac:1e:aa:21:14:40:
         a8:14:eb:8a:86:03:cc:e6:31:ee:0f:ba:cb:27:fa:33:55:52:
         d4:eb:21:18:8c:54:de:a6:b0:aa:99:c4:01:ce:00:a7:90:c6:
         ad:ac:c0:aa:f1:e7:13:cc:66:92:34:77:62:96:47:75:77:57:
         54:17:b0:88:33:be:6b:d2:86:ce:62:1b:a2:5c:c1:5e:d4:00:
         14:7e:11:1d:7e:56:22:97:6c:af:d3:c8:85:80:a9:87:a3:24:
         88:6d:70:fb:21:40:2a:8b:f5:8e:22:95:64:75:7f:ab:92:60:
         49:f5:6c:96:77:e9:d3:48:c5:a3:19:91:4a:41:29:38:f2:d6:
         e4:de:e9:a2:86:af:5e:6c:e0:71:93:22:22:38:d4:1d:06:a5:
         eb:36:6b:95:18:1c:ac:28:8d:2f:b2:99:a8:61:55:32:0a:b5:
         42:a4:00:77:85:86:f0:34:81:82:f9:af:49:b8:80:f8:1e:2f:
         5f:40:c2:a9:48:b2:7c:c3:ce:99:a3:17:69:b9:92:8e:45:fb:
         5c:ea:7c:e7:f4:07:f7:e3:a5:ba:c1:f6:6a:f2:81:19:a5:72:
         91:61:75:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEth3Pe6YqZycjXJL4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGU1YWM1YmQtMjZjOC00ZWNhLTlmMTUtZmQyMzI3NmMw
ZDRjMB4XDTI1MTAwMTIzNDYwMloXDTI1MTIzMTAwNDYwMlowLzEtMCsGA1UEAxMk
N2RkYTA2YTQtZmMzMS00MjgxLWE4ZWUtZDE3ZTVjMTBhMTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1H5cOr7tp5VSMV9/2JselOoAq7zaiXs+mUxK
6v0vR+Wt27adf9qr3lYI3wy2Fwkr6/Qib8Sk/Osj0JXvtw00+lQkPuZRoBHpNmrn
rbYYRYAzqI6EhuW2QTgu8xwmYNKXVPRXIM2Q5LYgg7BLWpciuHv3M2ZuZcKKMCke
LfGyd+4HLNc8QeXk/YnvZNCGNcGxyzaq0Tr/jAXb4Tx1KfGpInkHoGCfhc9K4GBU
ZHgUIDyUY2qCwcNXCsLWSwkxKbusHminPuqWrw2hiBAIRxBA4t0ua2Hw9vUtdkye
3cxIeLzMqWrFlaGouSWFjp8v+b5I9Fn9pEp6U7L/P/8d2AZcXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOPXEY0Or4R7U2IoaiX/siBMXRX2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZTVh
YzViZC0yNmM4LTRlY2EtOWYxNS1mZDIzMjc2YzBkNGMvZTA1MDQ4MmYtN2I5OS0z
YTEwLWIyOWQtN2I3YWE1ZDg5N2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGU1YWM1YmQtMjZjOC00ZWNhLTlm
MTUtZmQyMzI3NmMwZDRjLzhlNWFjNWJkLTI2YzgtNGVjYS05ZjE1LWZkMjMyNzZj
MGQ0Yy5jcmwwHwYDVR0jBBgwFoAUsyfIbi8GrE6uYl00Q/S49eYKbJswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84ZTVhYzViZC0yNmM4LTRlY2EtOWYxNS1mZDIz
Mjc2YzBkNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSnUoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADqGBZHmumVbCxEcr9TjQQl1GzycpDjT99fl8xaZQ6weqiEUQKgU64qG
A8zmMe4Pussn+jNVUtTrIRiMVN6msKqZxAHOAKeQxq2swKrx5xPMZpI0d2KWR3V3
V1QXsIgzvmvShs5iG6JcwV7UABR+ER1+ViKXbK/TyIWAqYejJIhtcPshQCqL9Y4i
lWR1f6uSYEn1bJZ36dNIxaMZkUpBKTjy1uTe6aKGr15s4HGTIiI41B0Gpes2a5UY
HKwojS+ymahhVTIKtUKkAHeFhvA0gYL5r0m4gPgeL19AwqlIsnzDzpmjF2m5ko5F
+1zqfOf0B/fjpbrB9mrygRmlcpFhdfA=
-----END CERTIFICATE-----
Generated at Fri Oct 17 11:28:51 2025 by rpki-client