Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ba633f42-5294-38fe-a1b2-d61121b8e9f5.roa
File:                     ba633f42-5294-38fe-a1b2-d61121b8e9f5.roa (raw, json)
Hash identifier:          x6rMFp3zaeEnjjZs6xD6R5XzjDdat/98KChbhSO6lyU=
Subject key identifier:   7B:5D:EE:E1:33:2F:D7:76:CA:C1:37:F5:60:2C:B1:AA:4F:E9:67:BD
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EAA5200486D562298C1A5F080
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ba633f42-5294-38fe-a1b2-d61121b8e9f5.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        74.125.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:52:00:48:6d:56:22:98:c1:a5:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=7b74bd17-6c24-4249-94f6-50c1b7c04ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ca:42:fa:da:1c:66:31:6e:86:91:23:a0:4c:
                    a3:98:e4:29:bf:17:fd:23:5e:f2:d8:71:39:22:8c:
                    ec:78:e8:ba:f1:70:5d:4d:13:6a:b7:f1:60:a8:77:
                    d5:94:14:7b:83:cf:bd:5d:60:ce:5d:60:7c:22:aa:
                    6f:21:f1:20:32:9a:5e:44:7b:38:f8:d5:50:b9:22:
                    50:31:3f:69:95:51:4c:ca:ae:fa:86:04:e2:30:6a:
                    1e:13:21:ca:b1:4a:2e:8b:e2:82:36:7c:82:16:ea:
                    6b:5b:be:5f:a5:3e:cf:66:2b:36:5f:c2:28:1d:81:
                    a7:91:92:45:69:28:d9:55:7f:1d:28:00:70:de:76:
                    1d:75:f6:f8:c3:eb:67:0f:f3:60:77:87:25:c3:1b:
                    3f:e1:19:ea:7f:40:6c:1a:66:40:c4:d6:6c:13:72:
                    0a:91:a1:91:32:f9:57:00:4e:11:54:98:bb:f0:d2:
                    0b:e6:6c:40:6f:2b:b9:96:d6:30:29:70:db:ed:bf:
                    a5:61:73:75:c7:2e:fe:bd:36:c3:e1:d8:46:59:04:
                    59:cb:f6:29:8c:ef:f4:7d:64:79:4e:45:85:2d:52:
                    72:45:0a:d7:70:ed:a2:eb:84:fa:c8:4a:d3:42:82:
                    02:ec:6b:e0:5c:fe:07:f8:60:8e:5b:4b:f5:3c:7e:
                    bb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5D:EE:E1:33:2F:D7:76:CA:C1:37:F5:60:2C:B1:AA:4F:E9:67:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ba633f42-5294-38fe-a1b2-d61121b8e9f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.125.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:3d:a4:aa:4f:f4:0f:5e:f0:48:e7:6b:14:68:64:f9:92:ea:
         2c:80:dd:d6:21:ce:1a:ab:59:f9:06:eb:ff:d6:52:ad:d2:1c:
         a0:6d:50:06:46:15:a1:bc:2e:95:a9:e0:35:74:f5:65:6f:00:
         32:20:b8:da:c1:64:ec:b7:5e:f0:98:c0:23:f8:7f:c1:af:da:
         91:86:d1:c5:c6:8d:80:75:cc:7e:a2:87:07:12:3c:ce:6f:a0:
         d7:65:23:9c:61:c4:f1:4b:17:eb:6d:3a:11:07:15:18:ba:64:
         81:ba:12:89:51:04:ae:4f:42:62:ac:2d:35:15:4c:06:00:76:
         5d:31:4e:74:ba:e5:2c:75:26:08:f5:a1:f0:6e:5d:eb:40:22:
         3b:e1:58:2e:9f:f8:89:5f:58:e8:36:e5:ee:72:64:5a:82:34:
         7f:85:f1:6c:52:9e:f4:5f:a4:98:7c:e4:bb:29:1d:ff:cc:2f:
         d3:2d:5d:f3:12:20:7e:00:d0:89:2a:51:7c:bb:3e:3f:1f:56:
         b9:8d:87:fd:47:4e:b5:ac:70:a0:dc:26:d5:6a:b0:21:29:1f:
         21:46:b7:61:17:e3:cc:6a:0f:0b:2b:75:c1:3e:90:42:ce:4e:
         f7:c8:6e:33:0f:ac:9d:ce:4c:96:57:d6:7e:17:a0:1c:94:c2:
         91:3f:d6:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUgBIbVYimMGl8IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk
N2I3NGJkMTctNmMyNC00MjQ5LTk0ZjYtNTBjMWI3YzA0Y2EwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cpC+tocZjFuhpEjoEyjmOQpvxf9I17y2HE5
IozseOi68XBdTRNqt/FgqHfVlBR7g8+9XWDOXWB8IqpvIfEgMppeRHs4+NVQuSJQ
MT9plVFMyq76hgTiMGoeEyHKsUoui+KCNnyCFuprW75fpT7PZis2X8IoHYGnkZJF
aSjZVX8dKABw3nYddfb4w+tnD/Ngd4clwxs/4Rnqf0BsGmZAxNZsE3IKkaGRMvlX
AE4RVJi78NIL5mxAbyu5ltYwKXDb7b+lYXN1xy7+vTbD4dhGWQRZy/YpjO/0fWR5
TkWFLVJyRQrXcO2i64T6yErTQoIC7GvgXP4H+GCOW0v1PH67vQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHtd7uEzL9d2ysE39WAssapP6We9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmE2MzNmNDItNTI5NC0z
OGZlLWExYjItZDYxMTIxYjhlOWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEk9pKpP9A9e8EjnaxRoZPmS6iyA3dYhzhqrWfkG6//WUq3SHKBtUAZG
FaG8LpWp4DV09WVvADIguNrBZOy3XvCYwCP4f8Gv2pGG0cXGjYB1zH6ihwcSPM5v
oNdlI5xhxPFLF+ttOhEHFRi6ZIG6EolRBK5PQmKsLTUVTAYAdl0xTnS65Sx1Jgj1
ofBuXetAIjvhWC6f+IlfWOg25e5yZFqCNH+F8WxSnvRfpJh85LspHf/ML9MtXfMS
IH4A0IkqUXy7Pj8fVrmNh/1HTrWscKDcJtVqsCEpHyFGt2EX48xqDwsrdcE+kELO
TvfIbjMPrJ3OTJZX1n4XoByUwpE/1j8=
-----END CERTIFICATE-----
Generated at Fri Aug 7 21:45:38 2026 by rpki-client