Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/e87834f7-fccc-3d54-b691-86c753624379.roa
File:                     e87834f7-fccc-3d54-b691-86c753624379.roa (raw, json)
Hash identifier:          q7snfIMFKWqjr96zGFEKPZ+n+YpmC13eAq6udzuhPY8=
Subject key identifier:   51:F9:8E:B5:7F:BA:F9:CA:C7:26:4E:69:03:3E:4A:8C:9A:21:72:05
Certificate issuer:       /CN=22d4b872-8325-44d1-958d-897bd254f68b
Certificate serial:       010D0C9F4328584A63F5B5D8FF6C6F41B1758DC0
Authority key identifier: A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/e87834f7-fccc-3d54-b691-86c753624379.roa
Signing time:             Thu 03 Jul 2025 01:00:48 +0000
ROA not before:           Thu 03 Jul 2025 01:00:48 +0000
ROA not after:            Wed 01 Oct 2025 01:00:48 +0000
asID:                     272814
IP address blocks:        74.118.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:f5:b5:d8:ff:6c:6f:41:b1:75:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d4b872-8325-44d1-958d-897bd254f68b
        Validity
            Not Before: Jul  3 01:00:48 2025 GMT
            Not After : Oct  1 01:00:48 2025 GMT
        Subject: CN=5526117d-3914-4d1b-90e1-ab3842af8493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f7:88:07:b2:0c:cb:e1:d4:40:27:31:31:f7:
                    b8:27:b8:90:ec:f3:c5:43:e9:3c:f6:b6:3c:fb:8a:
                    37:2b:8e:43:74:4f:be:7d:38:45:24:b8:fc:2e:cc:
                    76:04:3f:87:29:14:55:5a:00:e4:5f:8b:e0:30:1b:
                    eb:a3:ba:7e:f4:94:fb:04:8c:0b:7e:ba:b8:38:0d:
                    02:bb:59:32:dd:54:ff:d1:8e:af:48:2d:3a:8b:4f:
                    8b:24:ef:94:e3:72:f2:49:6b:44:fe:b6:78:c5:36:
                    26:76:0a:5e:b6:92:2b:8f:58:1e:f7:ea:7e:37:4f:
                    40:6f:7f:81:db:fc:5a:a4:8a:3e:78:a8:e6:eb:35:
                    a6:0d:f0:66:43:2e:fc:d3:57:29:77:d0:a1:5f:b4:
                    ab:8e:0a:2a:35:ec:b9:a0:90:75:a2:af:96:a5:48:
                    8a:49:b2:20:4b:7a:2d:e3:82:8a:08:da:16:fb:4e:
                    6b:61:d9:1e:13:ee:80:fa:b7:a2:45:8b:60:c0:5e:
                    9e:31:a5:4f:1b:9c:6a:c0:95:6e:f6:15:d5:8a:ba:
                    8e:52:df:b2:c7:d0:00:3f:88:ab:19:85:03:68:68:
                    6f:4c:05:52:f6:d1:1d:eb:05:78:6b:51:b1:be:50:
                    c9:3c:85:a9:eb:fe:30:f9:f3:3a:17:f1:f4:43:e7:
                    c8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F9:8E:B5:7F:BA:F9:CA:C7:26:4E:69:03:3E:4A:8C:9A:21:72:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/e87834f7-fccc-3d54-b691-86c753624379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl

            X509v3 Authority Key Identifier:
                keyid:A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:1f:2f:aa:4f:86:ca:38:12:8b:52:59:a8:47:c7:2f:82:60:
         46:96:fc:f6:e3:5d:79:d7:c1:d8:a5:dd:0f:06:83:27:6b:bd:
         59:62:a3:66:c9:ee:b7:43:7d:15:f3:b7:75:c3:5e:45:18:8f:
         13:cb:c0:4c:94:35:4f:9b:a1:d4:9b:ac:ed:5b:3d:49:84:42:
         8e:56:8a:42:3b:3a:44:13:8d:a8:e2:2f:79:f2:73:81:7c:de:
         b0:73:77:84:83:7f:c5:7b:81:f9:79:3a:a2:a9:f7:19:d9:23:
         d0:d9:3f:53:7a:e5:40:e0:a4:1e:bc:f2:3a:a9:30:39:d7:9c:
         62:df:46:a0:f4:96:22:b1:4b:50:a6:36:56:12:34:17:4a:9e:
         d9:ea:bf:ac:8c:55:fa:34:8b:38:95:2e:94:4c:03:40:fd:60:
         7b:4a:4f:21:af:10:d0:6e:51:86:6c:0c:20:c8:a1:bd:5a:5f:
         e2:67:55:c1:54:4c:3c:df:cc:3b:c4:04:7d:f1:0d:a9:fa:84:
         78:0c:91:d9:c8:64:58:12:64:5b:fd:4a:ff:08:8d:0d:dd:99:
         ea:cf:1d:85:e8:68:57:7b:9c:28:d6:5c:a5:ad:59:b0:da:83:
         c7:2c:3c:52:bd:81:ee:7a:3c:5e:6a:7c:28:aa:b8:58:8d:21:
         87:75:dd:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpj9bXY/2xvQbF1jcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJkNGI4NzItODMyNS00NGQxLTk1OGQtODk3YmQyNTRm
NjhiMB4XDTI1MDcwMzAxMDA0OFoXDTI1MTAwMTAxMDA0OFowLzEtMCsGA1UEAxMk
NTUyNjExN2QtMzkxNC00ZDFiLTkwZTEtYWIzODQyYWY4NDkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/eIB7IMy+HUQCcxMfe4J7iQ7PPFQ+k89rY8
+4o3K45DdE++fThFJLj8Lsx2BD+HKRRVWgDkX4vgMBvro7p+9JT7BIwLfrq4OA0C
u1ky3VT/0Y6vSC06i0+LJO+U43LySWtE/rZ4xTYmdgpetpIrj1ge9+p+N09Ab3+B
2/xapIo+eKjm6zWmDfBmQy7801cpd9ChX7SrjgoqNey5oJB1oq+WpUiKSbIgS3ot
44KKCNoW+05rYdkeE+6A+reiRYtgwF6eMaVPG5xqwJVu9hXVirqOUt+yx9AAP4ir
GYUDaGhvTAVS9tEd6wV4a1GxvlDJPIWp6/4w+fM6F/H0Q+fIPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFH5jrV/uvnKxyZOaQM+SoyaIXIFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMmQ0
Yjg3Mi04MzI1LTQ0ZDEtOTU4ZC04OTdiZDI1NGY2OGIvZTg3ODM0ZjctZmNjYy0z
ZDU0LWI2OTEtODZjNzUzNjI0Mzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjJkNGI4NzItODMyNS00NGQxLTk1
OGQtODk3YmQyNTRmNjhiLzIyZDRiODcyLTgzMjUtNDRkMS05NThkLTg5N2JkMjU0
ZjY4Yi5jcmwwHwYDVR0jBBgwFoAUoesnN2ifyJue4jDjyAXH4u6NjvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMmQ0Yjg3Mi04MzI1LTQ0ZDEtOTU4ZC04OTdi
ZDI1NGY2OGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnY8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIkfL6pPhso4EotSWahHxy+CYEaW/PbjXXnXwdil3Q8GgydrvVlio2bJ
7rdDfRXzt3XDXkUYjxPLwEyUNU+bodSbrO1bPUmEQo5WikI7OkQTjajiL3nyc4F8
3rBzd4SDf8V7gfl5OqKp9xnZI9DZP1N65UDgpB688jqpMDnXnGLfRqD0liKxS1Cm
NlYSNBdKntnqv6yMVfo0iziVLpRMA0D9YHtKTyGvENBuUYZsDCDIob1aX+JnVcFU
TDzfzDvEBH3xDan6hHgMkdnIZFgSZFv9Sv8IjQ3dmerPHYXoaFd7nCjWXKWtWbDa
g8csPFK9ge56PF5qfCiquFiNIYd13WY=
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:33:25 2025 by rpki-client