Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/5dc57eab-7dc5-36cd-b53e-f1b537fe6332.roa
File:                     5dc57eab-7dc5-36cd-b53e-f1b537fe6332.roa (raw, json)
Hash identifier:          UTMugGQI7VQkwbhMmUc4tkU17Uyr33Spn5rwZlZ57Z0=
Subject key identifier:   56:7E:7D:9A:EF:99:C6:F9:A3:80:0C:1C:7E:C6:68:4A:A8:57:1B:54
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584A6C55E009725076EBEF585700
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/5dc57eab-7dc5-36cd-b53e-f1b537fe6332.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     6250
IP address blocks:        67.218.174.0/24 maxlen: 24
                          74.51.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:e0:09:72:50:76:eb:ef:58:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=c81c4175-66f2-4c5a-9ffe-56e38034264b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9b:8b:de:11:ce:b9:c7:a4:9c:a1:21:15:d9:
                    17:0c:09:05:47:e9:76:c9:d2:87:7b:e1:b6:4a:69:
                    b5:c3:7e:74:3a:9e:28:ed:50:e3:d6:de:20:c0:e5:
                    51:2c:2f:2b:74:30:6c:ab:4d:96:fd:8e:77:f7:3b:
                    32:ee:3c:a6:3f:69:3e:0c:95:93:fa:c5:94:70:a5:
                    03:c1:f2:b4:a3:da:1a:47:cf:bf:75:c4:94:e1:59:
                    96:db:bb:92:e5:48:f6:e5:c8:45:29:22:a3:bb:d3:
                    ce:84:f0:ae:66:aa:d9:57:c3:37:c8:17:9e:7e:ba:
                    ae:2d:60:42:a4:c4:e8:2e:c2:6f:ff:5f:86:5a:5f:
                    37:35:ac:c3:c8:cc:f3:ec:28:8d:3a:ef:a8:e0:6b:
                    c7:78:3d:59:ce:d7:1d:a5:61:ae:54:6f:ba:b0:d4:
                    9c:05:11:af:02:79:64:7a:67:00:62:6e:08:9a:26:
                    5a:f2:1e:9b:dd:f2:72:81:7d:94:c7:ee:fb:d1:2d:
                    f0:ef:de:37:6e:4d:98:26:a0:87:24:5f:61:76:89:
                    0c:a7:51:5c:1d:7e:48:ed:f9:c0:55:6d:76:df:18:
                    4b:dc:53:47:da:51:f2:16:9f:c7:7b:cd:92:c9:0c:
                    62:7a:8b:4d:5f:32:cd:8e:d3:02:69:86:ff:96:1e:
                    46:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7E:7D:9A:EF:99:C6:F9:A3:80:0C:1C:7E:C6:68:4A:A8:57:1B:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/5dc57eab-7dc5-36cd-b53e-f1b537fe6332.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.218.174.0/24
                  74.51.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:1e:fd:57:70:41:56:b3:61:50:3d:99:6d:81:fa:bf:75:9f:
         05:45:17:1a:ab:27:6c:81:f9:20:c2:36:9f:15:29:e2:35:fc:
         e5:aa:12:14:ff:11:f5:06:3c:b0:0b:24:f4:e7:cb:db:19:12:
         bf:4b:8f:45:3c:84:8a:40:36:7d:cb:f7:14:eb:c4:c8:fc:4f:
         c8:e7:36:b6:8c:65:1e:4f:b7:6e:e0:00:db:e3:a1:d4:40:b8:
         a8:58:b8:5a:a1:ba:6c:8b:3d:03:ec:14:4f:e2:3d:2a:ec:79:
         e8:0f:6a:69:a7:77:64:6d:9c:a8:0f:26:be:86:3d:17:a8:14:
         c5:26:9e:90:fb:7d:59:94:b9:db:87:96:50:3d:af:2f:5c:b7:
         46:4a:c2:98:bb:33:b1:4f:58:bf:ac:bb:1e:8c:f6:a1:43:a0:
         c1:28:f4:2c:8f:f4:24:d2:87:51:1d:80:4f:57:4e:70:3e:92:
         5b:32:b7:73:b8:79:64:eb:a9:e0:19:97:6f:b8:2d:b1:0a:e4:
         e1:f1:08:93:a9:4b:99:a9:a4:f9:32:9c:1a:ce:69:3d:63:0c:
         fa:03:dc:60:a4:82:11:26:8a:a2:69:88:b2:20:88:f9:d9:48:
         96:98:ee:79:97:a5:17:07:6c:4f:4e:fa:c2:39:08:7b:c2:74:
         75:c2:a3:33
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEpsVeAJclB26+9YVwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQwMzc4YTktMTAzYy00NWNhLTg2OWQtN2M5MTE1Yzdi
MGY2MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk
YzgxYzQxNzUtNjZmMi00YzVhLTlmZmUtNTZlMzgwMzQyNjRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZuL3hHOuceknKEhFdkXDAkFR+l2ydKHe+G2
Smm1w350Op4o7VDj1t4gwOVRLC8rdDBsq02W/Y539zsy7jymP2k+DJWT+sWUcKUD
wfK0o9oaR8+/dcSU4VmW27uS5Uj25chFKSKju9POhPCuZqrZV8M3yBeefrquLWBC
pMToLsJv/1+GWl83NazDyMzz7CiNOu+o4GvHeD1ZztcdpWGuVG+6sNScBRGvAnlk
emcAYm4ImiZa8h6b3fJygX2Ux+770S3w7943bk2YJqCHJF9hdokMp1FcHX5I7fnA
VW123xhL3FNH2lHyFp/He82SyQxieotNXzLNjtMCaYb/lh5G4QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFFZ+fZrvmcb5o4AMHH7GaEqoVxtUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAz
NzhhOS0xMDNjLTQ1Y2EtODY5ZC03YzkxMTVjN2IwZjYvNWRjNTdlYWItN2RjNS0z
NmNkLWI1M2UtZjFiNTM3ZmU2MzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQwMzc4YTktMTAzYy00NWNhLTg2
OWQtN2M5MTE1YzdiMGY2LzBkMDM3OGE5LTEwM2MtNDVjYS04NjlkLTdjOTExNWM3
YjBmNi5jcmwwHwYDVR0jBBgwFoAUQpcvL3NZ63r1YWANDjlXhTjWG8kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAzNzhhOS0xMDNjLTQ1Y2EtODY5ZC03Yzkx
MTVjN2IwZjYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQ9quAwQA
SjN5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFQe/VdwQVazYVA9mW2B+r91nwVFFxqrJ2yB+SDCNp8VKeI1
/OWqEhT/EfUGPLALJPTny9sZEr9Lj0U8hIpANn3L9xTrxMj8T8jnNraMZR5Pt27g
ANvjodRAuKhYuFqhumyLPQPsFE/iPSrseegPammnd2RtnKgPJr6GPReoFMUmnpD7
fVmUuduHllA9ry9ct0ZKwpi7M7FPWL+sux6M9qFDoMEo9CyP9CTSh1EdgE9XTnA+
klsyt3O4eWTrqeAZl2+4LbEK5OHxCJOpS5mppPkynBrOaT1jDPoD3GCkghEmiqJp
iLIgiPnZSJaY7nmXpRcHbE9O+sI5CHvCdHXCozM=
-----END CERTIFICATE-----
Generated at Sat Jul 12 00:54:58 2025 by rpki-client