Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/c6399336-9b00-3da6-b859-c1e1382086e6.roa
File:                     c6399336-9b00-3da6-b859-c1e1382086e6.roa (raw, json)
Hash identifier:          x8rW7ZABfM2f0Opf40dHGat3Qisiox/kNVLfVZw0+0w=
Subject key identifier:   23:4F:B8:95:1F:B1:87:12:AF:87:ED:8D:A9:7D:79:B2:83:96:7C:F7
Certificate issuer:       /CN=0a846bda-a477-4fe0-8f13-997253568b7e
Certificate serial:       010D0C9F4328584AF8C2DE44CBC3E61F564D8A10
Authority key identifier: DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/c6399336-9b00-3da6-b859-c1e1382086e6.roa
Signing time:             Mon 25 Aug 2025 08:13:52 +0000
ROA not before:           Mon 25 Aug 2025 08:13:52 +0000
ROA not after:            Sun 23 Nov 2025 09:13:52 +0000
asID:                     55201
IP address blocks:        74.122.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f8:c2:de:44:cb:c3:e6:1f:56:4d:8a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a846bda-a477-4fe0-8f13-997253568b7e
        Validity
            Not Before: Aug 25 08:13:52 2025 GMT
            Not After : Nov 23 09:13:52 2025 GMT
        Subject: CN=f57e3e21-55bc-42f3-9bbf-a058d4713c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f7:ef:a6:c0:db:bb:a6:e2:5d:a8:01:ee:da:
                    88:83:77:fd:a6:ed:06:af:16:ee:f2:60:da:51:26:
                    85:8f:29:16:60:f2:84:6e:c3:ba:39:07:7b:b4:79:
                    84:9d:df:10:7f:6c:70:db:e6:f8:7c:f9:90:94:11:
                    dc:d6:d0:ab:ec:d5:13:ac:4c:18:54:2c:22:87:0a:
                    89:65:ef:19:ed:f5:d8:1d:53:ce:e2:65:d0:7c:d2:
                    c1:43:50:93:35:19:db:95:db:d0:e6:46:8c:6d:08:
                    3c:18:d8:63:1b:c2:25:ae:cc:63:f8:d4:ca:4c:e0:
                    1f:d9:8e:29:99:22:4f:26:4c:fa:8d:12:e7:b1:7e:
                    46:5a:8a:a7:e4:14:ba:b0:7e:06:87:9f:10:e4:b1:
                    cb:2f:61:a7:14:bb:e2:8b:c5:fa:e9:5a:5f:28:08:
                    ee:d5:43:0e:89:30:a1:51:eb:2a:55:0f:05:bd:78:
                    c9:50:93:a1:5c:43:87:26:5b:56:5f:01:a3:9c:49:
                    30:39:de:c8:64:d5:50:3b:55:2d:0d:a4:e8:1a:7e:
                    35:7a:52:60:f3:38:f1:8b:f7:a5:00:82:f4:08:35:
                    8b:7e:05:30:f5:88:39:85:c9:ed:6c:1e:ae:dd:7b:
                    68:c4:bb:0a:10:06:b9:9b:50:43:21:95:b3:a1:72:
                    0a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4F:B8:95:1F:B1:87:12:AF:87:ED:8D:A9:7D:79:B2:83:96:7C:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/c6399336-9b00-3da6-b859-c1e1382086e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.122.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:6f:e4:a0:46:5e:9d:01:fa:b1:3a:27:cc:5b:fa:d0:d1:d3:
         fb:0b:34:ef:36:e7:32:1b:12:8e:a2:1e:7b:1f:d1:83:d8:af:
         44:65:8e:ec:24:af:41:2e:56:b7:59:06:67:27:ce:b1:c3:47:
         95:16:af:d9:9b:4d:b4:8f:3a:01:72:0f:62:09:87:45:9d:59:
         a4:ab:af:82:d7:48:17:90:fc:93:61:00:a0:74:bb:a9:92:39:
         2f:09:df:7a:48:7e:02:8f:03:15:1e:0c:19:42:93:dc:24:a7:
         20:b3:d0:0c:5d:1e:29:ec:c7:75:52:c2:90:a2:f3:a1:1f:a0:
         8d:73:22:46:6b:89:12:21:a6:5b:d2:dc:ad:75:eb:44:54:b6:
         51:1d:e1:a9:71:4b:62:0e:2e:bf:3d:7f:53:99:04:df:71:b8:
         f3:16:b6:45:2d:b4:59:c1:f7:30:c9:9e:56:e7:4e:ec:72:c2:
         0f:5d:5b:ef:b1:e9:92:60:38:bc:2c:1d:7e:9c:74:ca:5b:f5:
         a3:4d:dc:c4:7f:05:27:ef:53:df:b6:6c:c8:b0:83:eb:07:17:
         42:09:a4:b3:7e:ba:03:9a:6a:fa:d3:36:d7:fa:f6:aa:11:42:
         a7:ea:34:84:c0:90:c9:d0:48:62:d1:8d:ea:29:ee:ea:5f:fe:
         1e:aa:76:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4wt5Ey8PmH1ZNihAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE4NDZiZGEtYTQ3Ny00ZmUwLThmMTMtOTk3MjUzNTY4
YjdlMB4XDTI1MDgyNTA4MTM1MloXDTI1MTEyMzA5MTM1MlowLzEtMCsGA1UEAxMk
ZjU3ZTNlMjEtNTViYy00MmYzLTliYmYtYTA1OGQ0NzEzYzY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvfvpsDbu6biXagB7tqIg3f9pu0Grxbu8mDa
USaFjykWYPKEbsO6OQd7tHmEnd8Qf2xw2+b4fPmQlBHc1tCr7NUTrEwYVCwihwqJ
Ze8Z7fXYHVPO4mXQfNLBQ1CTNRnbldvQ5kaMbQg8GNhjG8Ilrsxj+NTKTOAf2Y4p
mSJPJkz6jRLnsX5GWoqn5BS6sH4Gh58Q5LHLL2GnFLvii8X66VpfKAju1UMOiTCh
UesqVQ8FvXjJUJOhXEOHJltWXwGjnEkwOd7IZNVQO1UtDaToGn41elJg8zjxi/el
AIL0CDWLfgUw9Yg5hcntbB6u3XtoxLsKEAa5m1BDIZWzoXIKTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCNPuJUfsYcSr4ftjal9ebKDlnz3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYTg0
NmJkYS1hNDc3LTRmZTAtOGYxMy05OTcyNTM1NjhiN2UvYzYzOTkzMzYtOWIwMC0z
ZGE2LWI4NTktYzFlMTM4MjA4NmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGE4NDZiZGEtYTQ3Ny00ZmUwLThm
MTMtOTk3MjUzNTY4YjdlLzBhODQ2YmRhLWE0NzctNGZlMC04ZjEzLTk5NzI1MzU2
OGI3ZS5jcmwwHwYDVR0jBBgwFoAU3LrnlLaBpZJ3YNrck1IDjYXwuGkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYTg0NmJkYS1hNDc3LTRmZTAtOGYxMy05OTcy
NTM1NjhiN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnokMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGNv5KBGXp0B+rE6J8xb+tDR0/sLNO825zIbEo6iHnsf0YPYr0Rljuwk
r0EuVrdZBmcnzrHDR5UWr9mbTbSPOgFyD2IJh0WdWaSrr4LXSBeQ/JNhAKB0u6mS
OS8J33pIfgKPAxUeDBlCk9wkpyCz0AxdHinsx3VSwpCi86EfoI1zIkZriRIhplvS
3K1160RUtlEd4alxS2IOLr89f1OZBN9xuPMWtkUttFnB9zDJnlbnTuxywg9dW++x
6ZJgOLwsHX6cdMpb9aNN3MR/BSfvU9+2bMiwg+sHF0IJpLN+ugOaavrTNtf69qoR
QqfqNITAkMnQSGLRjeop7upf/h6qdpc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:55:18 2025 by rpki-client