Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d56af0ad-8d93-3c51-ba24-acd8c1ac1b14.roa
File:                     d56af0ad-8d93-3c51-ba24-acd8c1ac1b14.roa (raw, json)
Hash identifier:          5jYfkB3dmOWme2wJtXibOZbu1C2D4GCBl0/vtryEFDE=
Subject key identifier:   E9:05:F1:1D:EC:A5:3E:F1:F4:03:73:53:C4:B5:1A:12:0E:98:89:30
Certificate issuer:       /CN=ae61ef28-fe03-45bb-a38f-17e4725b6c25
Certificate serial:       010D0C9F4328584F67BD99D186BE88FDBE9AC180
Authority key identifier: AC:9C:DD:19:64:FA:91:50:77:CA:9F:DF:E1:53:16:6B:53:5A:2C:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d56af0ad-8d93-3c51-ba24-acd8c1ac1b14.roa
Signing time:             Mon 05 Oct 2026 21:25:44 +0000
ROA not before:           Mon 05 Oct 2026 21:25:44 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        74.220.48.0/24 maxlen: 24
                          74.220.49.0/24 maxlen: 24
                          74.220.50.0/24 maxlen: 24
                          74.220.51.0/24 maxlen: 24
                          74.220.52.0/24 maxlen: 24
                          74.220.53.0/24 maxlen: 24
                          74.220.54.0/24 maxlen: 24
                          74.220.55.0/24 maxlen: 24
                          74.220.61.0/24 maxlen: 24
                          74.220.62.0/24 maxlen: 24
                          74.220.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:67:bd:99:d1:86:be:88:fd:be:9a:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae61ef28-fe03-45bb-a38f-17e4725b6c25
        Validity
            Not Before: Oct  5 21:25:44 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c1b07608-436e-457c-bc17-7b0369ceaf43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8c:37:a0:6e:f0:ef:1c:32:ea:75:7f:42:f2:
                    58:6a:56:16:ed:e3:a7:4c:15:4f:5d:aa:81:d6:68:
                    d2:aa:4f:3b:52:ce:05:14:46:58:85:57:91:2a:64:
                    97:5e:c0:3e:3b:41:69:a8:78:a0:be:31:0d:75:7c:
                    d3:7a:07:ee:74:1c:b6:c7:4a:41:75:53:e6:33:29:
                    7f:81:20:57:75:f7:07:d8:c1:e2:69:8f:ac:37:7c:
                    0e:5d:72:10:22:47:8f:6b:f3:6e:76:9c:86:ef:2c:
                    b5:ed:4f:3c:92:69:f5:f3:86:d1:37:06:91:54:4b:
                    2c:b0:55:64:c6:a1:be:91:f9:74:ed:b8:18:3e:07:
                    c6:9e:ae:e6:13:64:04:61:05:5d:3f:0e:77:74:3f:
                    0b:21:87:b8:89:72:08:86:64:de:bd:d1:f6:8c:6d:
                    b3:a5:39:1f:d5:a6:92:d7:25:1c:29:70:32:1f:82:
                    04:a9:0f:2f:61:1b:cd:e2:66:95:d0:4a:38:3d:97:
                    b3:0a:e2:4b:e2:91:4a:a1:fe:51:6c:31:2f:37:1f:
                    3d:aa:67:21:b3:6d:83:c3:64:14:56:a0:90:e9:61:
                    8d:d6:e2:fa:b9:ce:b3:3a:9a:45:b9:53:af:2b:f7:
                    c1:10:98:85:82:ac:18:7f:3b:f2:67:38:bc:49:53:
                    ad:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:05:F1:1D:EC:A5:3E:F1:F4:03:73:53:C4:B5:1A:12:0E:98:89:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d56af0ad-8d93-3c51-ba24-acd8c1ac1b14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.crl

            X509v3 Authority Key Identifier:
                keyid:AC:9C:DD:19:64:FA:91:50:77:CA:9F:DF:E1:53:16:6B:53:5A:2C:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.220.48.0/21
                  74.220.61.0-74.220.63.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:3a:c8:55:80:61:5e:2e:ad:98:28:3f:52:69:2b:82:9f:12:
         73:f0:83:d3:a3:8f:2c:bb:b0:e6:ac:03:9b:47:a1:51:3b:10:
         49:ff:36:81:01:1e:24:38:25:9b:41:98:63:a4:6f:13:fc:48:
         68:c1:53:a1:6a:86:9b:aa:7b:d2:d8:24:aa:4d:4f:9d:7b:2a:
         bb:99:22:2b:70:6f:6b:98:59:4d:69:c6:8f:68:c6:9e:97:0b:
         38:c1:ef:58:d1:44:4b:f9:3a:8e:ea:71:27:1d:b5:d0:52:83:
         a6:3f:5f:1a:f4:44:40:b1:bb:2e:92:02:28:ed:a5:23:9e:84:
         b5:fe:26:10:d8:08:51:a2:f6:84:c3:d6:28:c3:ee:6d:80:bc:
         b6:19:f8:dc:c1:fa:bc:70:86:0d:09:9a:aa:a9:79:7b:7f:f6:
         c3:a3:3a:11:85:7d:4c:f9:7b:b1:7a:4c:58:48:51:ac:9e:f5:
         30:a4:07:18:7f:59:90:04:5f:97:e0:10:f3:0b:bb:c1:3f:10:
         d7:d2:cf:12:93:dd:0e:6f:e6:72:0e:31:a5:50:f3:b3:80:8d:
         d5:da:d3:77:8a:01:86:48:a9:20:8a:55:7f:53:fa:6f:70:64:
         b3:73:72:b2:d1:7d:c8:27:5a:49:9d:64:f5:e1:64:92:7d:2a:
         10:90:49:95
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE9nvZnRhr6I/b6awYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWU2MWVmMjgtZmUwMy00NWJiLWEzOGYtMTdlNDcyNWI2
YzI1MB4XDTI2MTAwNTIxMjU0NFoXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YzFiMDc2MDgtNDM2ZS00NTdjLWJjMTctN2IwMzY5Y2VhZjQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqow3oG7w7xwy6nV/QvJYalYW7eOnTBVPXaqB
1mjSqk87Us4FFEZYhVeRKmSXXsA+O0FpqHigvjENdXzTegfudBy2x0pBdVPmMyl/
gSBXdfcH2MHiaY+sN3wOXXIQIkePa/NudpyG7yy17U88kmn184bRNwaRVEsssFVk
xqG+kfl07bgYPgfGnq7mE2QEYQVdPw53dD8LIYe4iXIIhmTevdH2jG2zpTkf1aaS
1yUcKXAyH4IEqQ8vYRvN4maV0Eo4PZezCuJL4pFKof5RbDEvNx89qmchs22Dw2QU
VqCQ6WGN1uL6uc6zOppFuVOvK/fBEJiFgqwYfzvyZzi8SVOthwIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFOkF8R3spT7x9ANzU8S1GhIOmIkwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZTYx
ZWYyOC1mZTAzLTQ1YmItYTM4Zi0xN2U0NzI1YjZjMjUvZDU2YWYwYWQtOGQ5My0z
YzUxLWJhMjQtYWNkOGMxYWMxYjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWU2MWVmMjgtZmUwMy00NWJiLWEz
OGYtMTdlNDcyNWI2YzI1L2FlNjFlZjI4LWZlMDMtNDViYi1hMzhmLTE3ZTQ3MjVi
NmMyNS5jcmwwHwYDVR0jBBgwFoAUrJzdGWT6kVB3yp/f4VMWa1NaLLYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hZTYxZWYyOC1mZTAzLTQ1YmItYTM4Zi0xN2U0
NzI1YjZjMjUuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQDStwwMAwD
BABK3D0DBAZK3AAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAIjrIVYBhXi6tmCg/Umkrgp8Sc/CD06OPLLuw
5qwDm0ehUTsQSf82gQEeJDglm0GYY6RvE/xIaMFToWqGm6p70tgkqk1PnXsqu5ki
K3Bva5hZTWnGj2jGnpcLOMHvWNFES/k6jupxJx210FKDpj9fGvREQLG7LpICKO2l
I56Etf4mENgIUaL2hMPWKMPubYC8thn43MH6vHCGDQmaqql5e3/2w6M6EYV9TPl7
sXpMWEhRrJ71MKQHGH9ZkARfl+AQ8wu7wT8Q19LPEpPdDm/mcg4xpVDzs4CN1drT
d4oBhkipIIpVf1P6b3Bks3NystF9yCdaSZ1k9eFkkn0qEJBJlQ==
-----END CERTIFICATE-----
Generated at Sat Oct 10 23:22:46 2026 by rpki-client