Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/df6eeaf1-2e88-3f30-a0dc-d1ba2c1ca6af.roa
File:                     df6eeaf1-2e88-3f30-a0dc-d1ba2c1ca6af.roa (raw, json)
Hash identifier:          lW/xWp0tlTrH4ZoNo2YKDIhnX9eqO24YCckFML36Sak=
Subject key identifier:   1B:48:E3:67:55:3D:AB:28:28:EA:51:49:A4:FB:06:96:45:8E:2A:C4
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584A682604C4A4464C731110F780
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/df6eeaf1-2e88-3f30-a0dc-d1ba2c1ca6af.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     16509
IP address blocks:        74.207.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:04:c4:a4:46:4c:73:11:10:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=46f3223c-070b-4bd5-81f1-0d774de13915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a2:6a:87:1c:d1:25:40:b0:ab:97:1d:51:91:
                    9d:b7:aa:4d:b7:82:28:29:0a:a8:95:df:8f:75:17:
                    ac:eb:66:b2:3c:3d:13:e3:73:6d:49:95:60:89:f6:
                    d1:f9:88:ae:09:61:3b:45:b0:99:8d:cc:33:2b:74:
                    a6:85:18:d6:d8:eb:91:4e:5e:ef:53:bc:f2:12:57:
                    b5:51:99:fd:48:8a:65:ef:5f:a5:9e:90:5b:31:0b:
                    28:49:ba:bd:2f:94:89:4d:17:9c:a9:da:ab:03:d9:
                    3a:fd:86:78:0c:6c:1d:96:7f:a1:6b:fc:44:7d:d8:
                    e7:db:7a:a1:07:38:fc:47:ae:a9:b9:7b:38:ae:cb:
                    2d:f6:85:5a:d5:59:aa:e3:19:d2:95:74:db:f7:8b:
                    a2:a2:9e:4c:9c:07:eb:6c:9d:5d:ee:32:9a:80:0a:
                    ba:df:56:69:3c:10:d5:09:86:43:73:47:c5:dd:e4:
                    76:36:6c:58:8c:0c:d1:fd:ab:47:2b:a8:ae:16:2e:
                    7b:ed:e2:b1:96:05:07:de:a3:a8:4b:fa:b1:68:50:
                    80:6d:18:da:77:e9:58:fd:d7:76:41:84:38:90:7b:
                    2a:35:a9:bc:ec:d0:ad:ea:d3:b7:03:4c:91:fd:84:
                    61:49:76:20:31:7c:2d:39:56:47:e6:58:c8:d5:ef:
                    6c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:48:E3:67:55:3D:AB:28:28:EA:51:49:A4:FB:06:96:45:8E:2A:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/df6eeaf1-2e88-3f30-a0dc-d1ba2c1ca6af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.207.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:c6:8b:05:75:b3:08:6a:74:8b:c0:98:b0:8a:e2:6b:7b:16:
         cc:dd:a5:92:cd:b2:a5:27:e9:fe:10:b5:9e:f4:47:86:fb:2e:
         db:38:b8:55:b6:86:34:00:ff:9c:52:4f:92:4b:7e:37:d6:e7:
         01:6c:aa:86:8d:6a:66:05:7d:c1:cc:a9:00:c1:cb:3d:c9:1b:
         dd:1e:11:1b:36:55:ca:56:96:7c:44:73:2f:d5:92:d3:4c:d4:
         91:2e:11:7a:da:64:86:ec:dc:83:77:09:9e:02:22:14:40:08:
         dc:d2:c0:21:e6:f7:fe:7a:09:b4:f1:fe:f8:22:0e:09:25:23:
         ed:dc:61:5d:2f:07:30:60:73:6a:88:d6:6a:7d:93:23:dd:30:
         9e:ff:7e:ec:9a:54:91:33:3b:8a:61:f7:be:39:20:ca:de:32:
         9e:d5:0e:37:46:cb:56:55:18:e3:ad:2e:ac:7f:e6:8d:41:1e:
         38:70:bd:cc:d2:6f:db:72:33:86:a1:65:3c:51:a5:93:c0:22:
         4b:5b:44:5f:53:21:28:24:d5:fb:c0:22:75:57:a3:3c:62:35:
         5a:98:10:92:3d:a3:39:89:4d:86:56:d9:9e:e8:de:5e:17:08:
         19:cb:68:9f:d2:83:c1:6a:84:ca:cb:56:c2:7d:f3:c6:2e:5f:
         c2:08:89:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJgTEpEZMcxEQ94AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzAwOTRhYWItN2FkMS00ODg5LTg1M2YtY2U5NDY1NTIy
MDZiMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
NDZmMzIyM2MtMDcwYi00YmQ1LTgxZjEtMGQ3NzRkZTEzOTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aJqhxzRJUCwq5cdUZGdt6pNt4IoKQqold+P
dRes62ayPD0T43NtSZVgifbR+YiuCWE7RbCZjcwzK3SmhRjW2OuRTl7vU7zyEle1
UZn9SIpl71+lnpBbMQsoSbq9L5SJTRecqdqrA9k6/YZ4DGwdln+ha/xEfdjn23qh
Bzj8R66puXs4rsst9oVa1Vmq4xnSlXTb94uiop5MnAfrbJ1d7jKagAq631ZpPBDV
CYZDc0fF3eR2NmxYjAzR/atHK6iuFi577eKxlgUH3qOoS/qxaFCAbRjad+lY/dd2
QYQ4kHsqNam87NCt6tO3A0yR/YRhSXYgMXwtOVZH5ljI1e9sKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBtI42dVPasoKOpRSaT7BpZFjirEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5
NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0NjU1MjIwNmIvZGY2ZWVhZjEtMmU4OC0z
ZjMwLWEwZGMtZDFiYTJjMWNhNmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzAwOTRhYWItN2FkMS00ODg5LTg1
M2YtY2U5NDY1NTIyMDZiL2MwMDk0YWFiLTdhZDEtNDg4OS04NTNmLWNlOTQ2NTUy
MjA2Yi5jcmwwHwYDVR0jBBgwFoAUj3vgUXfanU4hkDXXgc3toQDHub4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0
NjU1MjIwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSs9AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACrGiwV1swhqdIvAmLCK4mt7FszdpZLNsqUn6f4QtZ70R4b7Lts4uFW2
hjQA/5xST5JLfjfW5wFsqoaNamYFfcHMqQDByz3JG90eERs2VcpWlnxEcy/VktNM
1JEuEXraZIbs3IN3CZ4CIhRACNzSwCHm9/56CbTx/vgiDgklI+3cYV0vBzBgc2qI
1mp9kyPdMJ7/fuyaVJEzO4ph9745IMreMp7VDjdGy1ZVGOOtLqx/5o1BHjhwvczS
b9tyM4ahZTxRpZPAIktbRF9TISgk1fvAInVXozxiNVqYEJI9ozmJTYZW2Z7o3l4X
CBnLaJ/Sg8FqhMrLVsJ988YuX8IIid0=
-----END CERTIFICATE-----
Generated at Wed Jul 9 14:41:16 2025 by rpki-client