Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a5992985-bd93-3409-a6aa-eaacc45d8e28.roa
File:                     a5992985-bd93-3409-a6aa-eaacc45d8e28.roa (raw, json)
Hash identifier:          Y8LVZUEmldVd+7Ta0qT+FdRCiVdLX3vmQUkOwASKDwg=
Subject key identifier:   62:8E:06:1F:CD:14:B1:45:D2:FE:D2:EA:5C:ED:19:C2:BB:89:80:20
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EA79A4F9E3CD9D67552F87440
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a5992985-bd93-3409-a6aa-eaacc45d8e28.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     209043
IP address blocks:        74.114.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:4f:9e:3c:d9:d6:75:52:f8:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=53f30244-e2a3-4846-af5e-e69402928546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:99:aa:5f:47:94:db:db:d7:76:57:d1:72:67:
                    97:5d:e0:cf:26:66:81:6a:66:17:4b:77:b4:09:d1:
                    97:19:ae:e2:88:54:da:4a:11:1f:92:a7:a2:f0:7b:
                    3a:1e:bf:89:96:22:17:81:6d:a3:1c:b5:c6:5e:dc:
                    05:80:7b:60:6f:49:8d:b7:b5:92:88:08:b0:93:c4:
                    c3:99:20:3e:d3:1d:8f:2a:52:fa:39:8d:9d:22:23:
                    92:f0:aa:4d:2a:32:fe:0d:a9:07:a3:d0:5b:a9:a9:
                    a5:ff:b1:cf:0f:bd:69:9b:f9:72:a4:38:2c:0b:cb:
                    5c:fa:83:2f:7e:a2:65:04:07:82:36:bc:c8:72:b3:
                    4b:00:e6:ec:fc:86:bf:29:22:a3:78:97:1f:57:46:
                    fd:bc:8a:20:c4:dc:b4:d8:34:60:2a:2e:c1:57:e8:
                    82:5b:2f:da:b1:66:f4:cc:c8:08:38:b0:df:48:55:
                    a9:0e:83:7c:bc:ea:92:ed:4b:79:97:3e:8f:5a:7c:
                    14:37:c8:dd:ad:c3:4c:4c:33:68:f6:43:8a:3b:83:
                    55:0e:92:3c:1b:a8:4c:7b:99:bc:1e:33:da:65:3f:
                    50:1d:ae:8a:15:b7:6e:e7:31:67:16:89:63:f9:3c:
                    30:f5:8b:5e:59:82:be:ac:ce:6e:34:6a:80:e8:b9:
                    5f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8E:06:1F:CD:14:B1:45:D2:FE:D2:EA:5C:ED:19:C2:BB:89:80:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a5992985-bd93-3409-a6aa-eaacc45d8e28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:e5:b3:71:75:f8:3e:5d:81:d2:f0:be:47:05:cb:e0:67:d5:
         9e:c7:45:47:6d:ad:c8:14:6a:04:ef:21:e7:b6:e9:fe:e8:cc:
         99:e8:c1:1b:2f:81:bb:ee:41:d2:8e:25:49:2b:72:c3:45:57:
         0d:99:1a:ae:44:1f:77:85:47:87:4d:81:6f:f6:e5:44:2d:fd:
         7b:a1:d1:5a:8e:c3:ff:ae:98:78:43:19:e4:56:81:05:45:0b:
         f7:0d:dd:fa:6b:99:ba:fc:f5:3a:a8:38:c6:6d:6e:8b:25:5d:
         fd:d9:cf:0f:2a:46:5c:9a:73:b4:db:be:ee:16:7e:7a:e0:9f:
         80:37:65:6e:c0:9d:1e:dd:04:27:a8:aa:ed:36:59:6f:9a:30:
         69:51:79:5d:ee:bd:c7:d1:57:fc:90:3a:2a:21:da:c3:99:9f:
         f2:d5:1c:b8:8b:a4:f1:c5:9c:af:4a:a1:b7:ab:ea:8e:ff:0d:
         6b:fd:0b:5a:df:9f:b0:59:d1:22:9e:80:be:c2:20:8c:6a:a4:
         05:39:91:25:f5:e4:bb:1c:0a:91:7f:96:1b:18:7a:f2:00:29:
         af:3e:d3:28:e2:ca:2d:aa:3b:2c:76:62:8f:e4:1e:a4:85:c3:
         1a:d1:58:d4:d6:99:f9:d4:0c:1c:33:bf:5a:54:57:bc:d9:16:
         3e:c9:7f:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmk+ePNnWdVL4dEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NTNmMzAyNDQtZTJhMy00ODQ2LWFmNWUtZTY5NDAyOTI4NTQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJmqX0eU29vXdlfRcmeXXeDPJmaBamYXS3e0
CdGXGa7iiFTaShEfkqei8Hs6Hr+JliIXgW2jHLXGXtwFgHtgb0mNt7WSiAiwk8TD
mSA+0x2PKlL6OY2dIiOS8KpNKjL+DakHo9Bbqaml/7HPD71pm/lypDgsC8tc+oMv
fqJlBAeCNrzIcrNLAObs/Ia/KSKjeJcfV0b9vIogxNy02DRgKi7BV+iCWy/asWb0
zMgIOLDfSFWpDoN8vOqS7Ut5lz6PWnwUN8jdrcNMTDNo9kOKO4NVDpI8G6hMe5m8
HjPaZT9QHa6KFbdu5zFnFolj+Tww9YteWYK+rM5uNGqA6LlfdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGKOBh/NFLFF0v7S6lztGcK7iYAgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvYTU5OTI5ODUtYmQ5My0z
NDA5LWE2YWEtZWFhY2M0NWQ4ZTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnJ0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG/ls3F1+D5dgdLwvkcFy+Bn1Z7HRUdtrcgUagTvIee26f7ozJnowRsv
gbvuQdKOJUkrcsNFVw2ZGq5EH3eFR4dNgW/25UQt/Xuh0VqOw/+umHhDGeRWgQVF
C/cN3fprmbr89TqoOMZtboslXf3Zzw8qRlyac7Tbvu4Wfnrgn4A3ZW7AnR7dBCeo
qu02WW+aMGlReV3uvcfRV/yQOioh2sOZn/LVHLiLpPHFnK9Kober6o7/DWv9C1rf
n7BZ0SKegL7CIIxqpAU5kSX15LscCpF/lhsYevIAKa8+0yjiyi2qOyx2Yo/kHqSF
wxrRWNTWmfnUDBwzv1pUV7zZFj7Jfyw=
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:32:23 2026 by rpki-client