Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/bad69b5b-4fd0-384b-9e0a-3db5b0127c2a.roa
File:                     bad69b5b-4fd0-384b-9e0a-3db5b0127c2a.roa (raw, json)
Hash identifier:          d+8R6iwSW/ACIGpEQcsEH4H9YwG5E9X21yW5eFmTWL4=
Subject key identifier:   BA:16:F1:71:7D:E3:86:9C:51:09:53:95:40:DA:C9:95:28:75:74:F3
Certificate issuer:       /CN=c2c2b205-cbf7-456f-b185-0afd263c5276
Certificate serial:       010D0C9F4328584F576822361BA73AFD4FC1A500
Authority key identifier: D5:19:AE:14:CB:EC:24:6A:5B:BA:4B:E4:B7:D4:36:14:33:41:52:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/bad69b5b-4fd0-384b-9e0a-3db5b0127c2a.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     11620
IP address blocks:        74.116.200.0/22 maxlen: 24
                          74.116.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:22:36:1b:a7:3a:fd:4f:c1:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c2b205-cbf7-456f-b185-0afd263c5276
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=ee67dd10-dbd5-4653-bd57-2a28bb9d8151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d7:0b:30:d0:d1:90:8c:9b:b5:d9:8f:3a:1f:
                    24:ab:63:09:73:1e:8f:9b:41:dd:86:56:11:3e:cd:
                    bf:f6:63:f7:5a:15:7b:5d:63:81:e3:55:bd:5b:91:
                    6e:eb:ae:53:f1:d0:a0:4e:6f:fd:07:29:5c:35:09:
                    d0:9f:17:87:8d:9c:a2:35:19:14:a0:b4:94:92:a6:
                    e8:03:d4:b2:bb:06:80:d3:c4:21:41:c5:0c:09:99:
                    b1:33:03:58:02:0f:4d:b8:fe:47:ea:ba:db:77:ae:
                    79:65:2f:5a:ad:a8:15:e8:a7:3f:e3:be:29:43:d9:
                    c3:3a:e7:18:9b:15:3b:7b:28:e5:22:c8:9b:f9:cb:
                    2f:cc:3e:73:cf:38:02:df:48:80:17:ef:3b:23:90:
                    9b:9d:11:80:29:1e:b1:95:2a:9b:36:15:f7:52:07:
                    a6:84:bb:d5:6f:06:56:e1:f4:a1:84:c4:f9:2f:04:
                    91:a9:36:a0:f2:c7:0e:c6:d6:c7:69:42:b6:6a:f2:
                    65:c4:eb:a5:c3:e2:2e:37:a8:87:84:06:1d:8a:0e:
                    bb:66:37:bc:4c:08:0e:a3:08:64:16:76:37:63:1c:
                    b3:17:b4:36:3c:a4:c2:cd:e9:c6:93:3c:f0:18:06:
                    d9:b5:4c:82:88:cf:70:a9:20:6f:b8:b2:38:1a:12:
                    88:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:16:F1:71:7D:E3:86:9C:51:09:53:95:40:DA:C9:95:28:75:74:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/bad69b5b-4fd0-384b-9e0a-3db5b0127c2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.crl

            X509v3 Authority Key Identifier:
                keyid:D5:19:AE:14:CB:EC:24:6A:5B:BA:4B:E4:B7:D4:36:14:33:41:52:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:4c:a7:95:4f:e5:21:dd:fc:0a:03:30:63:89:a3:5d:dc:ad:
         31:9d:30:97:c1:4a:0a:29:57:82:47:f7:48:3e:d8:62:9a:54:
         dc:05:22:a0:ee:82:17:4f:5f:8e:22:81:d8:e9:39:cc:08:04:
         6a:a3:72:0f:47:76:3c:71:c1:08:cd:63:ec:35:fd:b2:e6:71:
         f5:92:82:ad:22:4d:cb:ca:1b:59:a0:dc:fb:bb:c3:43:b9:0b:
         d0:1f:11:46:e6:35:ff:3e:25:d6:c8:52:b7:00:27:34:95:4d:
         cf:cd:9e:db:6b:4c:a1:16:a4:0e:45:c9:2e:2b:58:b4:dd:c8:
         2f:21:43:fa:b8:cd:03:74:cd:6e:87:81:34:0e:3a:70:bc:df:
         47:f9:2c:74:6c:4a:43:36:b3:c1:70:51:57:3f:b9:e8:90:17:
         c5:cf:f0:d8:63:cc:fe:2d:8e:89:e8:17:e1:82:bd:bb:be:4f:
         82:5d:7f:23:62:5a:ae:a1:58:3a:f2:3f:46:a4:66:dc:92:8b:
         ca:d8:21:76:7d:83:73:04:cb:ce:ff:e9:1a:88:37:36:8b:f0:
         5c:74:9d:47:86:61:49:6d:1a:85:1a:05:04:1a:cf:0f:89:a7:
         e0:53:69:d8:b5:ec:d5:2a:58:e0:5d:44:2f:29:ac:89:ae:af:
         2c:c0:51:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XaCI2G6c6/U/BpQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzJjMmIyMDUtY2JmNy00NTZmLWIxODUtMGFmZDI2M2M1
Mjc2MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk
ZWU2N2RkMTAtZGJkNS00NjUzLWJkNTctMmEyOGJiOWQ4MTUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNcLMNDRkIybtdmPOh8kq2MJcx6Pm0HdhlYR
Ps2/9mP3WhV7XWOB41W9W5Fu665T8dCgTm/9BylcNQnQnxeHjZyiNRkUoLSUkqbo
A9SyuwaA08QhQcUMCZmxMwNYAg9NuP5H6rrbd655ZS9aragV6Kc/474pQ9nDOucY
mxU7eyjlIsib+csvzD5zzzgC30iAF+87I5CbnRGAKR6xlSqbNhX3UgemhLvVbwZW
4fShhMT5LwSRqTag8scOxtbHaUK2avJlxOulw+IuN6iHhAYdig67Zje8TAgOowhk
FnY3YxyzF7Q2PKTCzenGkzzwGAbZtUyCiM9wqSBvuLI4GhKI/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLoW8XF944acUQlTlUDayZUodXTzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jMmMy
YjIwNS1jYmY3LTQ1NmYtYjE4NS0wYWZkMjYzYzUyNzYvYmFkNjliNWItNGZkMC0z
ODRiLTllMGEtM2RiNWIwMTI3YzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYzJjMmIyMDUtY2JmNy00NTZmLWIx
ODUtMGFmZDI2M2M1Mjc2L2MyYzJiMjA1LWNiZjctNDU2Zi1iMTg1LTBhZmQyNjNj
NTI3Ni5jcmwwHwYDVR0jBBgwFoAU1RmuFMvsJGpbukvkt9Q2FDNBUh0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jMmMyYjIwNS1jYmY3LTQ1NmYtYjE4NS0wYWZk
MjYzYzUyNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSnTIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEpMp5VP5SHd/AoDMGOJo13crTGdMJfBSgopV4JH90g+2GKaVNwFIqDu
ghdPX44igdjpOcwIBGqjcg9HdjxxwQjNY+w1/bLmcfWSgq0iTcvKG1mg3Pu7w0O5
C9AfEUbmNf8+JdbIUrcAJzSVTc/NnttrTKEWpA5FyS4rWLTdyC8hQ/q4zQN0zW6H
gTQOOnC830f5LHRsSkM2s8FwUVc/ueiQF8XP8NhjzP4tjonoF+GCvbu+T4JdfyNi
Wq6hWDryP0akZtySi8rYIXZ9g3MEy87/6RqINzaL8Fx0nUeGYUltGoUaBQQazw+J
p+BTadi17NUqWOBdRC8prImuryzAUQM=
-----END CERTIFICATE-----
Generated at Sun Oct 18 03:22:37 2026 by rpki-client