Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/7c56b4a2-b398-32b1-a50a-75d93e0d8321.roa
File:                     7c56b4a2-b398-32b1-a50a-75d93e0d8321.roa (raw, json)
Hash identifier:          3AWBzJHtT1cV/WhHFY4rOstbAFCL6TLEPRQj0dPAytY=
Subject key identifier:   DD:41:31:E5:A5:69:65:F9:55:AC:09:10:F4:40:6C:F7:B6:9A:55:81
Certificate issuer:       /CN=677759b4-a247-47ea-badb-bb809bc80a31
Certificate serial:       010D0C9F4328584E4DBA2AAC9A246323B09C9D78
Authority key identifier: 49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/7c56b4a2-b398-32b1-a50a-75d93e0d8321.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     14955
IP address blocks:        74.221.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:2a:ac:9a:24:63:23:b0:9c:9d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677759b4-a247-47ea-badb-bb809bc80a31
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=aa1be254-c800-4e93-abc9-09d7cf53484a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:45:26:ec:02:1d:31:a8:ab:df:32:86:78:0f:
                    28:df:6b:34:b5:8f:14:dd:8e:d8:3c:18:de:f9:18:
                    c8:92:26:69:b8:b3:d1:b2:ea:77:56:2d:1a:8e:c1:
                    27:e4:56:8c:e5:7c:2a:6f:78:06:ed:19:4b:a7:59:
                    c0:ad:d6:09:88:14:11:ce:f4:2f:d6:5e:8e:01:24:
                    9e:7b:02:42:ac:38:dd:1e:c2:53:5d:d4:82:38:73:
                    49:f3:f9:b0:31:d5:ff:a6:96:aa:66:14:b5:08:f8:
                    68:1b:c8:3b:75:61:26:8a:cc:45:97:53:b2:b3:b2:
                    23:f4:b6:9d:61:cd:44:47:fa:a2:19:f8:32:8b:d7:
                    2e:19:63:81:32:75:f7:1b:f6:3a:b8:6e:78:75:38:
                    bc:0b:db:6d:55:76:2e:2c:59:d8:fc:c2:e6:f7:9c:
                    ae:87:e4:a5:58:7e:a1:4e:78:6c:e8:5f:e6:51:30:
                    ab:b1:2c:36:4f:f7:58:f5:01:31:fd:79:25:40:e8:
                    de:6b:da:27:52:44:17:0c:4f:1a:11:e2:67:28:66:
                    29:f5:c1:60:f8:b8:d0:bf:fb:5d:ec:8f:6a:29:95:
                    4b:6a:da:d1:a3:9b:72:96:71:94:4c:2c:08:ac:e5:
                    0c:55:49:7c:b6:69:f7:71:70:cb:f3:73:a5:95:3b:
                    ff:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:41:31:E5:A5:69:65:F9:55:AC:09:10:F4:40:6C:F7:B6:9A:55:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/7c56b4a2-b398-32b1-a50a-75d93e0d8321.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl

            X509v3 Authority Key Identifier:
                keyid:49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.221.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:69:f8:a9:dd:c2:3f:01:20:54:90:ad:3d:84:6e:ab:dc:d2:
         0e:dc:0a:f1:bd:94:bf:cf:c6:e9:d2:f9:08:ae:90:7d:99:4a:
         08:93:51:b5:6a:ba:86:d4:ed:e8:ef:ba:d5:58:6a:5c:e6:f6:
         08:eb:3d:86:72:b4:c6:4d:c3:b0:df:63:7f:10:f1:ab:63:a6:
         2d:b4:9d:cb:23:9d:46:b5:7f:83:58:2e:ee:53:0c:a8:54:85:
         2f:00:7d:a2:a9:7c:04:b0:c6:15:d3:63:b2:66:e3:ed:d6:69:
         01:af:70:a3:b7:ad:90:7b:7c:05:42:b2:fa:66:ba:01:66:8a:
         49:56:dd:08:dd:58:84:87:98:c7:31:5d:31:c5:f3:fe:4d:4c:
         de:ec:a5:f0:24:e8:ce:81:68:55:f6:ae:38:c2:38:6c:e0:0a:
         a9:5a:42:ec:af:39:cd:b9:7d:69:c9:e6:e5:95:9c:60:9c:ec:
         e1:d0:e1:ec:50:ed:e2:a3:ad:aa:00:a1:8d:16:bb:69:fa:85:
         d1:0c:5e:ce:1a:e6:00:21:4c:02:69:cf:b9:15:60:9f:90:5f:
         02:fd:29:d7:1b:ec:48:34:f7:c5:82:f3:6e:b1:f0:3a:80:c9:
         69:bc:72:f8:26:e8:90:68:12:d8:1e:de:3b:e5:62:08:b3:1c:
         43:e5:e5:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5NuiqsmiRjI7CcnXgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc3NzU5YjQtYTI0Ny00N2VhLWJhZGItYmI4MDliYzgw
YTMxMB4XDTI2MDYyNjIxMDAxMVoXDTI2MDkyNDIxMDAxMVowLzEtMCsGA1UEAxMk
YWExYmUyNTQtYzgwMC00ZTkzLWFiYzktMDlkN2NmNTM0ODRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0Um7AIdMair3zKGeA8o32s0tY8U3Y7YPBje
+RjIkiZpuLPRsup3Vi0ajsEn5FaM5Xwqb3gG7RlLp1nArdYJiBQRzvQv1l6OASSe
ewJCrDjdHsJTXdSCOHNJ8/mwMdX/ppaqZhS1CPhoG8g7dWEmisxFl1Oys7Ij9Lad
Yc1ER/qiGfgyi9cuGWOBMnX3G/Y6uG54dTi8C9ttVXYuLFnY/MLm95yuh+SlWH6h
Tnhs6F/mUTCrsSw2T/dY9QEx/XklQOjea9onUkQXDE8aEeJnKGYp9cFg+LjQv/td
7I9qKZVLatrRo5tylnGUTCwIrOUMVUl8tmn3cXDL83OllTv/oQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN1BMeWlaWX5VawJEPRAbPe2mlWBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82Nzc3
NTliNC1hMjQ3LTQ3ZWEtYmFkYi1iYjgwOWJjODBhMzEvN2M1NmI0YTItYjM5OC0z
MmIxLWE1MGEtNzVkOTNlMGQ4MzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjc3NzU5YjQtYTI0Ny00N2VhLWJh
ZGItYmI4MDliYzgwYTMxLzY3Nzc1OWI0LWEyNDctNDdlYS1iYWRiLWJiODA5YmM4
MGEzMS5jcmwwHwYDVR0jBBgwFoAUSYDsXxW6YmUcIIY+JjxTmnHJOiwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82Nzc3NTliNC1hMjQ3LTQ3ZWEtYmFkYi1iYjgw
OWJjODBhMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSt2gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAxp+Kndwj8BIFSQrT2Ebqvc0g7cCvG9lL/PxunS+QiukH2ZSgiTUbVq
uobU7ejvutVYalzm9gjrPYZytMZNw7DfY38Q8atjpi20ncsjnUa1f4NYLu5TDKhU
hS8AfaKpfASwxhXTY7Jm4+3WaQGvcKO3rZB7fAVCsvpmugFmiklW3QjdWISHmMcx
XTHF8/5NTN7spfAk6M6BaFX2rjjCOGzgCqlaQuyvOc25fWnJ5uWVnGCc7OHQ4exQ
7eKjraoAoY0Wu2n6hdEMXs4a5gAhTAJpz7kVYJ+QXwL9Kdcb7Eg098WC826x8DqA
yWm8cvgm6JBoEtge3jvlYgizHEPl5Ts=
-----END CERTIFICATE-----
Generated at Thu Jul 9 21:03:23 2026 by rpki-client