Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/f8ffaf0f-d9ca-34f5-9961-b6ec959fc727.roa
File:                     f8ffaf0f-d9ca-34f5-9961-b6ec959fc727.roa (raw, json)
Hash identifier:          Qy5b5A6iw5FInxVWXVgyt+Kjm3CiwzDIiXPCZdMGhao=
Subject key identifier:   0B:AA:E7:9E:71:64:44:A9:31:B6:5D:E9:98:23:75:9A:C4:75:51:11
Certificate issuer:       /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial:       010D0C9F4328584AF7EBD4AC1940C2FEE018B280
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/f8ffaf0f-d9ca-34f5-9961-b6ec959fc727.roa
Signing time:             Mon 25 Aug 2025 01:00:33 +0000
ROA not before:           Mon 25 Aug 2025 01:00:33 +0000
ROA not after:            Sun 23 Nov 2025 02:00:33 +0000
asID:                     36511
IP address blocks:        74.116.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f7:eb:d4:ac:19:40:c2:fe:e0:18:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
        Validity
            Not Before: Aug 25 01:00:33 2025 GMT
            Not After : Nov 23 02:00:33 2025 GMT
        Subject: CN=efd82567-b788-488e-b661-24264d31b37e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:36:b1:b1:83:4d:ad:cc:68:80:94:96:98:23:
                    12:a5:86:4b:ac:c4:38:24:0d:f9:98:de:c4:b2:e3:
                    39:5e:a6:7c:ae:19:12:11:b6:4d:44:4c:60:ea:de:
                    fe:f2:86:00:ff:9b:47:5b:0d:34:f9:88:37:6a:59:
                    f8:2d:1b:bc:9b:4e:0e:18:6e:79:ec:0e:8b:6d:2b:
                    42:86:4a:22:92:eb:5c:e9:69:3b:9a:73:ce:22:f3:
                    d6:8c:1a:31:64:02:a1:11:60:7f:1a:c5:af:bc:dd:
                    44:a4:29:8b:e9:de:c4:d3:9a:f5:49:d4:f4:54:5e:
                    3f:16:5c:0c:4f:f3:cf:0a:04:80:bd:41:a6:56:73:
                    77:40:4b:ae:21:f6:47:7a:fe:74:64:f0:72:e9:7a:
                    6b:f6:cd:85:1a:f4:ae:ac:a9:fe:98:6a:3a:bb:0e:
                    b2:b8:bc:85:07:b7:37:31:5c:db:69:06:a0:f0:88:
                    d1:c8:a1:b6:7c:f0:ee:74:83:cf:7e:bd:c2:cb:07:
                    ff:e6:54:5b:3c:fd:b3:87:f2:e1:1d:48:f6:57:f6:
                    d9:c1:3b:ba:c2:d1:3a:7d:1c:75:9d:db:7e:c0:d6:
                    93:b1:01:bd:44:49:e2:e9:ec:9b:44:40:01:69:dd:
                    b3:05:7a:47:a4:75:0e:7f:56:f7:36:17:17:e3:46:
                    b5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AA:E7:9E:71:64:44:A9:31:B6:5D:E9:98:23:75:9A:C4:75:51:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/f8ffaf0f-d9ca-34f5-9961-b6ec959fc727.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl

            X509v3 Authority Key Identifier:
                keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:64:04:62:3c:36:c1:ee:f9:f1:1c:77:4c:b3:2f:86:d2:1a:
         a2:8f:0a:6e:8d:50:04:3b:cb:7e:ff:5b:d0:3b:95:f4:fb:ab:
         e2:41:72:74:71:fa:96:e7:1c:02:b2:08:31:46:ae:ed:30:5a:
         c8:ac:79:5f:ff:0c:ab:5e:cb:bd:22:12:d2:e3:f3:59:7f:77:
         11:03:5e:97:f1:af:29:59:60:0c:f0:4f:71:aa:5f:f1:cb:28:
         54:e2:97:ac:da:9e:9c:fc:b3:d7:f6:39:12:d3:8a:47:72:d1:
         28:85:ed:ee:e3:a4:9e:0b:84:1b:76:fd:3f:47:f8:b5:c9:30:
         d2:60:c1:69:22:cf:f9:97:2d:1f:55:b8:ea:10:d9:4a:c5:51:
         74:11:ee:57:dd:9a:34:3e:48:0b:dd:32:fb:3f:96:9b:7c:27:
         40:80:b1:f1:87:a0:5b:68:41:65:9e:79:7f:f0:06:ca:4a:4a:
         cb:d3:8a:71:6d:c0:0b:1a:16:fc:91:72:d1:1c:89:a8:e8:18:
         4d:32:36:52:4b:32:38:18:d7:f9:48:6d:1e:b6:0e:5b:ab:b0:
         91:65:99:e9:19:50:af:71:03:c8:3b:1d:87:93:a1:85:74:0c:
         b8:24:3b:f1:84:84:93:b5:df:57:e8:41:bc:94:47:40:dc:8a:
         31:9b:25:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369SsGUDC/uAYsoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjg3Yzg2OWEtZmQ5Yy00ZGI5LThkYWItNTRiNzM3MTAz
NTEzMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk
ZWZkODI1NjctYjc4OC00ODhlLWI2NjEtMjQyNjRkMzFiMzdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTaxsYNNrcxogJSWmCMSpYZLrMQ4JA35mN7E
suM5XqZ8rhkSEbZNRExg6t7+8oYA/5tHWw00+Yg3aln4LRu8m04OGG557A6LbStC
hkoikutc6Wk7mnPOIvPWjBoxZAKhEWB/GsWvvN1EpCmL6d7E05r1SdT0VF4/FlwM
T/PPCgSAvUGmVnN3QEuuIfZHev50ZPBy6Xpr9s2FGvSurKn+mGo6uw6yuLyFB7c3
MVzbaQag8IjRyKG2fPDudIPPfr3Cywf/5lRbPP2zh/LhHUj2V/bZwTu6wtE6fRx1
ndt+wNaTsQG9REni6eybREABad2zBXpHpHUOf1b3NhcX40a1VwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAuq555xZESpMbZd6ZgjdZrEdVERMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ODdj
ODY5YS1mZDljLTRkYjktOGRhYi01NGI3MzcxMDM1MTMvZjhmZmFmMGYtZDljYS0z
NGY1LTk5NjEtYjZlYzk1OWZjNzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjg3Yzg2OWEtZmQ5Yy00ZGI5LThk
YWItNTRiNzM3MTAzNTEzLzY4N2M4NjlhLWZkOWMtNGRiOS04ZGFiLTU0YjczNzEw
MzUxMy5jcmwwHwYDVR0jBBgwFoAU4uiNCUXNrgKVNNtusLIBOCL3Hl4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82ODdjODY5YS1mZDljLTRkYjktOGRhYi01NGI3
MzcxMDM1MTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSnRcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAClkBGI8NsHu+fEcd0yzL4bSGqKPCm6NUAQ7y37/W9A7lfT7q+JBcnRx
+pbnHAKyCDFGru0wWsiseV//DKtey70iEtLj81l/dxEDXpfxrylZYAzwT3GqX/HL
KFTil6zanpz8s9f2ORLTikdy0SiF7e7jpJ4LhBt2/T9H+LXJMNJgwWkiz/mXLR9V
uOoQ2UrFUXQR7lfdmjQ+SAvdMvs/lpt8J0CAsfGHoFtoQWWeeX/wBspKSsvTinFt
wAsaFvyRctEciajoGE0yNlJLMjgY1/lIbR62DlursJFlmekZUK9xA8g7HYeToYV0
DLgkO/GEhJO131foQbyUR0DcijGbJXY=
-----END CERTIFICATE-----
Generated at Fri Sep 19 05:03:39 2025 by rpki-client