Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a62b56a0-2759-346b-a8ad-b27a91c76566.roa
File:                     a62b56a0-2759-346b-a8ad-b27a91c76566.roa (raw, json)
Hash identifier:          wVj4U6HPGzLmeQ6Qz15tWBlHzm+w1zIAoaaXTUVy8Vc=
Subject key identifier:   EE:81:8C:F0:77:E2:3E:44:E3:29:70:12:1C:75:ED:59:E8:A6:1E:67
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E2C944711EB66BE58841AAB44
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a62b56a0-2759-346b-a8ad-b27a91c76566.roa
Signing time:             Mon 15 Jun 2026 00:02:50 +0000
ROA not before:           Mon 15 Jun 2026 00:02:50 +0000
ROA not after:            Sun 13 Sep 2026 00:02:50 +0000
asID:                     834
IP address blocks:        74.2.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2c:94:47:11:eb:66:be:58:84:1a:ab:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun 15 00:02:50 2026 GMT
            Not After : Sep 13 00:02:50 2026 GMT
        Subject: CN=aaf93711-b1ca-4bf1-a811-edad8d465fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7c:77:4c:95:59:3a:7a:c0:42:9b:a8:5f:33:
                    a1:7a:ea:da:02:d8:9f:3c:9a:e0:d3:ed:52:19:82:
                    dc:99:e7:91:3b:bf:e3:04:f0:6d:61:bf:2a:a4:d9:
                    4a:f6:bf:9b:b7:6a:75:05:d2:b1:6f:0e:a1:1b:26:
                    4b:a1:d2:62:ac:61:84:7a:27:61:83:fc:80:97:77:
                    aa:15:85:60:b2:d3:3b:bc:3d:e3:a3:c9:23:5d:e3:
                    b8:bd:19:9d:2b:95:50:b2:8f:3c:bc:42:31:79:ea:
                    fd:82:63:58:11:cc:8a:aa:21:7c:9a:e1:81:a5:74:
                    b4:7e:16:61:d2:78:af:6e:e4:25:5d:39:b5:1c:b8:
                    c1:2e:f1:25:3d:e6:61:9d:28:ee:f2:23:e7:83:57:
                    eb:93:d6:49:27:c2:b9:f6:d3:75:91:ea:ed:da:8d:
                    2b:51:01:2d:2b:04:e4:ef:c9:6a:22:a3:66:78:fd:
                    b5:5c:4f:c2:13:bb:95:c3:ab:54:02:5a:d3:82:12:
                    0e:4b:f7:4d:8f:29:77:bf:52:bd:17:55:67:cb:8f:
                    fa:0a:54:88:ca:78:62:0d:d3:3e:04:72:df:cc:c2:
                    29:06:ce:d4:45:48:49:45:0a:fa:dc:4b:0c:57:9b:
                    c1:c9:a7:e7:3b:49:45:0b:c1:41:c6:ac:d4:bd:10:
                    58:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:81:8C:F0:77:E2:3E:44:E3:29:70:12:1C:75:ED:59:E8:A6:1E:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a62b56a0-2759-346b-a8ad-b27a91c76566.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.2.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:7f:ea:19:9c:6d:a3:c5:c3:9d:65:88:2a:bc:3a:0a:d8:c8:
         ff:ff:4d:16:e1:56:24:fe:a7:8a:4b:b4:83:99:53:7d:6d:4d:
         d4:1e:69:54:f7:c8:80:3d:f9:d2:60:55:64:5a:c9:84:5a:7f:
         ce:a0:9c:03:c2:98:41:55:f8:72:fe:6a:39:dc:06:f4:33:8d:
         4c:8c:ed:83:20:49:28:08:c9:02:e1:21:ca:63:ac:c4:79:61:
         42:01:77:07:71:e3:c1:46:f6:a9:67:e5:61:f2:50:41:a4:df:
         49:87:bf:fa:5a:e9:d3:8b:93:26:aa:87:84:f6:95:5c:13:8f:
         f3:d1:9a:19:11:fa:cf:e3:34:bd:7f:f8:65:17:80:f0:ee:bf:
         59:64:d6:74:e6:41:4f:1b:64:e6:59:3e:86:76:74:ff:54:a2:
         92:b1:55:b2:ec:3f:75:c3:2c:64:ac:b7:c9:59:34:b4:02:ac:
         a0:1c:11:06:7e:b7:77:62:bc:72:61:03:be:df:33:6a:73:61:
         38:ed:40:7d:a6:2f:d0:74:ee:45:9c:34:b4:5c:eb:5a:38:9f:
         9d:29:af:18:4b:bb:f2:3e:d3:98:50:ee:bb:da:21:5d:c1:53:
         ab:a1:69:41:7c:9d:f4:e6:0a:3a:6a:91:f2:ce:88:d9:ea:96:
         a2:4b:73:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4slEcR62a+WIQaq0QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDYxNTAwMDI1MFoXDTI2MDkxMzAwMDI1MFowLzEtMCsGA1UEAxMk
YWFmOTM3MTEtYjFjYS00YmYxLWE4MTEtZWRhZDhkNDY1ZmI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnx3TJVZOnrAQpuoXzOheuraAtifPJrg0+1S
GYLcmeeRO7/jBPBtYb8qpNlK9r+bt2p1BdKxbw6hGyZLodJirGGEeidhg/yAl3eq
FYVgstM7vD3jo8kjXeO4vRmdK5VQso88vEIxeer9gmNYEcyKqiF8muGBpXS0fhZh
0nivbuQlXTm1HLjBLvElPeZhnSju8iPng1frk9ZJJ8K59tN1kert2o0rUQEtKwTk
78lqIqNmeP21XE/CE7uVw6tUAlrTghIOS/dNjyl3v1K9F1Vny4/6ClSIynhiDdM+
BHLfzMIpBs7URUhJRQr63EsMV5vByafnO0lFC8FBxqzUvRBYQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO6BjPB34j5E4ylwEhx17Vnoph5nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTYyYjU2YTAtMjc1OS0z
NDZiLWE4YWQtYjI3YTkxYzc2NTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSgIQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALZ/6hmcbaPFw51liCq8OgrYyP//TRbhViT+p4pLtIOZU31tTdQeaVT3
yIA9+dJgVWRayYRaf86gnAPCmEFV+HL+ajncBvQzjUyM7YMgSSgIyQLhIcpjrMR5
YUIBdwdx48FG9qln5WHyUEGk30mHv/pa6dOLkyaqh4T2lVwTj/PRmhkR+s/jNL1/
+GUXgPDuv1lk1nTmQU8bZOZZPoZ2dP9UopKxVbLsP3XDLGSst8lZNLQCrKAcEQZ+
t3divHJhA77fM2pzYTjtQH2mL9B07kWcNLRc61o4n50prxhLu/I+05hQ7rvaIV3B
U6uhaUF8nfTmCjpqkfLOiNnqlqJLc2o=
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:00:55 2026 by rpki-client