Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/0a9a3fee-e5c1-3ee4-9ec9-0f30fc7c8ce2.roa
File:                     0a9a3fee-e5c1-3ee4-9ec9-0f30fc7c8ce2.roa (raw, json)
Hash identifier:          ZeMsKhZyO5EjyugqKuofIRPbyQFulU2QbPtLOGWZx7M=
Subject key identifier:   97:A9:F5:24:FC:0D:CD:73:69:6A:B6:BA:F9:35:BE:39:7A:55:CE:52
Certificate issuer:       /CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
Certificate serial:       010D0C9F4328584A653451812F1B049F98132980
Authority key identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/0a9a3fee-e5c1-3ee4-9ec9-0f30fc7c8ce2.roa
Signing time:             Thu 03 Jul 2025 11:42:49 +0000
ROA not before:           Thu 03 Jul 2025 11:42:49 +0000
ROA not after:            Wed 01 Oct 2025 11:42:49 +0000
asID:                     36530
IP address blocks:        74.118.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:65:34:51:81:2f:1b:04:9f:98:13:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
        Validity
            Not Before: Jul  3 11:42:49 2025 GMT
            Not After : Oct  1 11:42:49 2025 GMT
        Subject: CN=e787d435-7891-4f04-aa65-9f6cb019eb58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:03:d1:3e:45:3c:d9:45:22:9f:e7:bb:ea:87:
                    73:e1:f7:69:d1:e0:33:24:0a:5b:63:87:46:57:a3:
                    08:90:e2:40:e5:16:96:72:02:b4:90:73:6a:6b:6b:
                    b6:74:88:63:91:de:dd:5c:97:62:f9:42:86:df:41:
                    ae:22:15:27:1c:6e:8a:b2:f1:db:bb:42:b7:55:29:
                    5f:04:83:7d:3c:21:28:a3:cf:d3:9c:3f:7a:41:22:
                    a2:6d:19:53:3e:9f:ea:4f:2c:99:fa:e1:d8:94:98:
                    d0:ad:c4:67:0a:05:31:5c:b8:d1:dd:8e:47:36:ba:
                    5d:5e:b2:04:b5:8f:50:81:a9:fd:b0:59:7f:13:aa:
                    51:08:bf:e0:fe:70:3d:7f:10:d7:03:d7:c9:31:80:
                    33:29:23:9c:b8:09:04:17:d9:ff:fd:06:cb:c2:c6:
                    36:1c:4b:7c:be:55:72:c5:27:18:a2:eb:26:04:34:
                    e2:d0:f0:3e:28:fb:6e:d9:06:d7:e9:8c:f0:bc:8b:
                    0a:65:9a:21:63:eb:a9:e1:c6:df:e5:b3:62:a8:7c:
                    d1:96:53:27:d8:06:f5:79:9a:e1:4a:6f:72:3a:91:
                    f0:61:15:c8:b3:8c:b1:ea:0a:c8:da:c0:84:63:09:
                    0d:d4:3a:ff:92:a1:3c:82:cf:ef:47:2e:be:b1:e7:
                    c0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A9:F5:24:FC:0D:CD:73:69:6A:B6:BA:F9:35:BE:39:7A:55:CE:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/0a9a3fee-e5c1-3ee4-9ec9-0f30fc7c8ce2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl

            X509v3 Authority Key Identifier:
                keyid:89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:ac:cf:02:a7:47:dc:79:8a:7f:fb:8e:03:58:c0:60:1c:de:
         63:0b:b3:35:25:7e:25:5e:ae:34:9f:e8:39:88:8f:0d:cd:f9:
         17:23:5a:8b:af:70:ee:db:bb:d0:6e:f5:50:0a:d4:cd:99:b7:
         35:ca:4b:fb:cb:14:18:d3:37:b9:3e:b5:a6:dc:30:69:72:f6:
         13:ff:5b:df:ee:8e:9f:a6:a2:b9:08:fa:67:10:06:75:d8:00:
         74:0c:75:15:b6:bb:12:ba:de:74:c5:af:51:01:28:db:9c:35:
         0c:a5:60:80:f3:36:3c:da:46:31:82:26:94:b2:92:5d:3a:30:
         8e:c3:da:a3:fe:d2:c1:2f:4a:d7:0a:c5:e2:86:95:fc:38:41:
         da:19:14:9c:b7:91:20:39:c7:74:1c:2a:81:ae:c5:ab:b7:e2:
         ae:38:10:4d:00:5c:72:c9:d4:de:39:50:90:6c:18:c9:c6:e6:
         13:cb:30:f8:33:ce:20:8e:a8:c1:d2:67:05:74:ce:24:fb:19:
         d2:8e:14:c6:21:96:65:ed:8c:88:90:1a:ae:11:e2:06:b1:e3:
         d7:34:e4:6a:dd:0e:c9:7e:95:8a:d9:42:81:0c:3b:7e:fd:4a:
         ef:c5:83:f6:4f:5e:b4:44:64:42:2f:6d:17:5d:ab:53:ae:d6:
         ee:ff:3a:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEplNFGBLxsEn5gTKYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmIxYmZiOWQtM2NlNS00ZmEwLTg3YTItNzM1M2VlOGNj
MjljMB4XDTI1MDcwMzExNDI0OVoXDTI1MTAwMTExNDI0OVowLzEtMCsGA1UEAxMk
ZTc4N2Q0MzUtNzg5MS00ZjA0LWFhNjUtOWY2Y2IwMTllYjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAPRPkU82UUin+e76odz4fdp0eAzJApbY4dG
V6MIkOJA5RaWcgK0kHNqa2u2dIhjkd7dXJdi+UKG30GuIhUnHG6KsvHbu0K3VSlf
BIN9PCEoo8/TnD96QSKibRlTPp/qTyyZ+uHYlJjQrcRnCgUxXLjR3Y5HNrpdXrIE
tY9Qgan9sFl/E6pRCL/g/nA9fxDXA9fJMYAzKSOcuAkEF9n//QbLwsY2HEt8vlVy
xScYousmBDTi0PA+KPtu2QbX6YzwvIsKZZohY+up4cbf5bNiqHzRllMn2Ab1eZrh
Sm9yOpHwYRXIs4yx6grI2sCEYwkN1Dr/kqE8gs/vRy6+sefA6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJep9ST8Dc1zaWq2uvk1vjl6Vc5SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82YjFi
ZmI5ZC0zY2U1LTRmYTAtODdhMi03MzUzZWU4Y2MyOWMvMGE5YTNmZWUtZTVjMS0z
ZWU0LTllYzktMGYzMGZjN2M4Y2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNmIxYmZiOWQtM2NlNS00ZmEwLTg3
YTItNzM1M2VlOGNjMjljLzZiMWJmYjlkLTNjZTUtNGZhMC04N2EyLTczNTNlZThj
YzI5Yy5jcmwwHwYDVR0jBBgwFoAUiZ7PjIFhGc30CeRkoLh5rVZXgTQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy82YjFiZmI5ZC0zY2U1LTRmYTAtODdhMi03MzUz
ZWU4Y2MyOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnapMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEiszwKnR9x5in/7jgNYwGAc3mMLszUlfiVerjSf6DmIjw3N+RcjWouv
cO7bu9Bu9VAK1M2ZtzXKS/vLFBjTN7k+tabcMGly9hP/W9/ujp+morkI+mcQBnXY
AHQMdRW2uxK63nTFr1EBKNucNQylYIDzNjzaRjGCJpSykl06MI7D2qP+0sEvStcK
xeKGlfw4QdoZFJy3kSA5x3QcKoGuxau34q44EE0AXHLJ1N45UJBsGMnG5hPLMPgz
ziCOqMHSZwV0ziT7GdKOFMYhlmXtjIiQGq4R4gax49c05GrdDsl+lYrZQoEMO379
Su/Fg/ZPXrREZEIvbRddq1Ou1u7/OlA=
-----END CERTIFICATE-----
Generated at Thu Jul 10 01:23:02 2025 by rpki-client