Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/5313ce26-5bc0-3011-8330-6204bfaa746c.roa
File:                     5313ce26-5bc0-3011-8330-6204bfaa746c.roa (raw, json)
Hash identifier:          LOwxs1Dyy+tyNEpPF7QqMVipnIBSUz4nf22OBL5SJBY=
Subject key identifier:   4E:49:3C:E2:4C:E8:33:C8:40:20:3F:72:9F:B2:7D:B4:EF:6A:EF:04
Certificate issuer:       /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial:       010D0C9F4328584E815F97BE094EE417D123A680
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/5313ce26-5bc0-3011-8330-6204bfaa746c.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     33392
IP address blocks:        74.116.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:97:be:09:4e:e4:17:d1:23:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=3293aa6e-386b-4630-8b0b-9d3342d3f744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:34:7b:ed:cd:9b:2c:25:e0:39:0c:bf:0d:91:
                    20:2b:87:34:b3:f9:7c:10:6d:61:51:81:c8:98:44:
                    c2:c0:14:2f:61:1f:c5:ac:8b:a0:78:cc:94:21:62:
                    65:40:46:9b:fd:dd:4f:e1:86:23:8a:97:d1:5a:ae:
                    dc:f5:49:39:0f:5e:70:70:2d:4f:c7:2f:c7:3c:0d:
                    99:76:0c:5f:f5:c1:82:ad:20:fe:ea:43:f4:3c:16:
                    79:d6:ec:38:12:43:24:36:79:d3:27:4c:79:7d:c4:
                    55:4f:86:5d:5d:fe:e9:37:fa:4a:71:b2:b3:fc:5e:
                    90:2e:51:55:e8:7e:42:3f:95:03:d2:da:c9:e1:ef:
                    8d:eb:6d:c7:5c:d6:4b:81:f7:f8:b5:ff:05:bc:1b:
                    0c:b5:4e:ff:1b:73:13:4a:ef:44:1c:93:dc:bc:77:
                    6c:07:b1:fd:f6:08:f1:b2:20:6c:f9:d8:1c:9c:89:
                    48:d1:fe:02:d3:a6:28:7e:0f:31:f5:63:a4:37:11:
                    5d:33:3a:80:60:97:04:56:4e:05:3e:4a:13:f6:15:
                    4c:22:be:fd:87:98:53:f4:73:97:2d:96:c4:0d:d8:
                    14:3a:36:25:75:eb:a8:e0:7b:31:c8:a9:10:b7:3e:
                    f3:d0:83:d9:51:bc:69:08:8c:08:30:3e:eb:5f:d7:
                    fe:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:49:3C:E2:4C:E8:33:C8:40:20:3F:72:9F:B2:7D:B4:EF:6A:EF:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/5313ce26-5bc0-3011-8330-6204bfaa746c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl

            X509v3 Authority Key Identifier:
                keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:f1:dd:1b:14:b6:3d:68:b6:bb:82:84:93:73:c8:ad:53:7a:
         87:6e:1c:fb:97:ec:02:2b:77:69:9b:cd:e4:9e:13:8b:76:b0:
         32:6a:26:23:bb:74:5c:e2:85:d3:fc:2a:47:7e:41:94:2e:31:
         4a:3e:dd:a6:06:62:5c:73:03:99:71:2e:3c:0c:63:1a:36:1b:
         03:06:20:ed:8e:1d:53:e9:54:3a:d7:e0:e2:90:df:5f:07:08:
         6f:32:95:3c:0d:64:79:6c:da:28:e7:d4:5b:9b:c5:82:21:02:
         a8:b8:a1:30:49:65:af:91:3f:6b:e4:d5:b5:c4:8a:83:b2:a1:
         18:2d:65:54:de:5d:3d:92:8f:60:b4:c1:b8:1c:ba:02:a8:39:
         ef:d8:2c:ce:19:98:3b:a5:a0:c8:06:a1:bc:a1:37:e8:4a:93:
         85:e3:f7:14:05:b9:89:22:14:e0:12:b4:c6:16:08:84:5e:f5:
         61:8d:5f:69:f3:b8:4c:4a:0c:1d:09:16:bd:0b:ab:41:c3:3e:
         cf:e6:f9:43:c3:ff:9c:ac:00:dc:19:54:a8:9e:51:8a:b8:5d:
         6e:62:9d:ef:da:bd:47:65:13:78:1f:f3:3c:64:34:a2:b5:65:
         3b:0a:48:58:26:8e:2d:b6:bb:88:c3:da:53:97:ee:8b:eb:9c:
         c4:83:9c:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6BX5e+CU7kF9EjpoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjg3Yzg2OWEtZmQ5Yy00ZGI5LThkYWItNTRiNzM3MTAz
NTEzMB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk
MzI5M2FhNmUtMzg2Yi00NjMwLThiMGItOWQzMzQyZDNmNzQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTR77c2bLCXgOQy/DZEgK4c0s/l8EG1hUYHI
mETCwBQvYR/FrIugeMyUIWJlQEab/d1P4YYjipfRWq7c9Uk5D15wcC1Pxy/HPA2Z
dgxf9cGCrSD+6kP0PBZ51uw4EkMkNnnTJ0x5fcRVT4ZdXf7pN/pKcbKz/F6QLlFV
6H5CP5UD0trJ4e+N623HXNZLgff4tf8FvBsMtU7/G3MTSu9EHJPcvHdsB7H99gjx
siBs+dgcnIlI0f4C06Yofg8x9WOkNxFdMzqAYJcEVk4FPkoT9hVMIr79h5hT9HOX
LZbEDdgUOjYldeuo4HsxyKkQtz7z0IPZUbxpCIwIMD7rX9f+jQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE5JPOJM6DPIQCA/cp+yfbTvau8EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ODdj
ODY5YS1mZDljLTRkYjktOGRhYi01NGI3MzcxMDM1MTMvNTMxM2NlMjYtNWJjMC0z
MDExLTgzMzAtNjIwNGJmYWE3NDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjg3Yzg2OWEtZmQ5Yy00ZGI5LThk
YWItNTRiNzM3MTAzNTEzLzY4N2M4NjlhLWZkOWMtNGRiOS04ZGFiLTU0YjczNzEw
MzUxMy5jcmwwHwYDVR0jBBgwFoAU4uiNCUXNrgKVNNtusLIBOCL3Hl4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82ODdjODY5YS1mZDljLTRkYjktOGRhYi01NGI3
MzcxMDM1MTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnReMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAXx3RsUtj1otruChJNzyK1TeoduHPuX7AIrd2mbzeSeE4t2sDJqJiO7
dFzihdP8Kkd+QZQuMUo+3aYGYlxzA5lxLjwMYxo2GwMGIO2OHVPpVDrX4OKQ318H
CG8ylTwNZHls2ijn1FubxYIhAqi4oTBJZa+RP2vk1bXEioOyoRgtZVTeXT2Sj2C0
wbgcugKoOe/YLM4ZmDuloMgGobyhN+hKk4Xj9xQFuYkiFOAStMYWCIRe9WGNX2nz
uExKDB0JFr0Lq0HDPs/m+UPD/5ysANwZVKieUYq4XW5ine/avUdlE3gf8zxkNKK1
ZTsKSFgmji22u4jD2lOX7ovrnMSDnNE=
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:00:19 2026 by rpki-client