Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74cfa07f-cf86-315f-a460-cf9cc0238c62.roa
File:                     74cfa07f-cf86-315f-a460-cf9cc0238c62.roa (raw, json)
Hash identifier:          qf1k7Dt0nOqLmOUWEvv/ae5BB8O4O2HJnO4tcxl3BPI=
Subject key identifier:   4C:44:D5:D2:D1:F5:7C:12:7A:AB:45:C3:A8:24:30:70:9F:DC:F5:B7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB732D16ED2DCC9F000FC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74cfa07f-cf86-315f-a460-cf9cc0238c62.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     22909
IP address blocks:        76.123.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:32:d1:6e:d2:dc:c9:f0:00:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=6de8efcc-2fae-46d2-abc6-c47d88abb6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:93:7e:e3:cf:bd:d3:95:5f:3f:64:89:d2:fd:
                    df:56:6a:49:f5:ac:2f:3d:06:1f:72:69:5b:83:99:
                    2e:6a:e0:c5:9c:bc:77:00:61:0a:9c:c8:08:f3:37:
                    23:9c:53:2d:4c:00:7d:fd:5c:dd:df:34:73:fe:43:
                    9a:39:54:fe:82:8d:e7:b8:f3:da:00:fe:b4:95:9b:
                    91:83:84:b0:96:51:1c:d7:1c:2d:82:55:f2:9c:14:
                    8d:3f:50:d4:24:01:75:c9:a0:a1:6d:35:cc:74:5f:
                    9b:1b:74:1e:0b:16:b7:c0:c9:82:30:64:70:f4:d8:
                    39:8c:fb:6f:cb:11:e3:73:bc:55:b4:8c:a9:fa:12:
                    2d:a2:33:69:00:f0:1c:c7:2c:ae:13:fa:ab:ab:0f:
                    c7:96:ea:82:26:75:0a:b1:3b:5b:ec:f0:6f:d4:a6:
                    b0:c7:e0:e8:39:d1:f9:31:6c:6c:12:c2:c7:e9:b4:
                    e3:2a:8e:0e:af:d4:08:14:d2:b1:17:55:68:9c:68:
                    14:3b:dc:c5:5e:d0:47:b8:c2:35:c3:1f:fb:d0:65:
                    9d:cb:87:12:73:01:a5:0b:5a:f1:5c:29:1a:44:c8:
                    43:30:e5:f9:04:7e:6f:d4:27:6e:2d:41:70:53:71:
                    03:9f:cf:3c:20:fd:17:b8:8a:db:7f:93:9e:ec:82:
                    60:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:44:D5:D2:D1:F5:7C:12:7A:AB:45:C3:A8:24:30:70:9F:DC:F5:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74cfa07f-cf86-315f-a460-cf9cc0238c62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.123.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:3c:b7:17:9f:68:91:2a:d8:26:ee:fc:1d:92:69:d6:6d:36:
         39:2f:cc:85:20:66:e2:89:63:e0:8c:6a:97:89:fe:7a:64:8f:
         e4:b1:bc:5f:5f:40:df:40:83:eb:b2:54:68:16:f9:d3:0f:1c:
         86:2f:50:51:cb:c1:25:df:7b:ba:40:d0:bd:00:82:22:6d:df:
         19:06:a5:bd:71:0e:71:b0:4d:f6:24:e0:29:f1:1b:5a:12:2e:
         76:20:f6:f0:9f:c5:4f:64:5b:4b:b3:f5:26:c5:5e:2d:71:de:
         c0:b9:f7:69:1d:de:b9:0b:ee:31:58:fd:09:0d:05:93:6e:99:
         db:d1:94:2b:0c:aa:6c:db:d9:8b:31:31:05:7d:5f:cc:27:a8:
         81:d7:e7:19:b7:f3:fb:4a:f5:05:ac:60:be:0e:e9:45:cb:bf:
         18:a2:9a:4c:65:8b:5e:2c:fe:f9:b7:5a:f5:a9:9d:87:ae:b9:
         7e:35:c1:21:98:54:32:67:51:07:a8:9e:9e:26:1d:be:72:d7:
         dc:c1:1b:cd:32:11:36:6a:d8:eb:66:71:7e:ff:b2:00:a9:11:
         0b:e9:25:77:03:a9:fd:a1:21:eb:26:c0:cb:89:0b:6f:2c:cd:
         3c:f5:13:48:6e:0e:7c:65:c5:6a:c3:1b:c8:1c:e4:b3:10:e1:
         1e:c4:e0:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9tzLRbtLcyfAA/IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
NmRlOGVmY2MtMmZhZS00NmQyLWFiYzYtYzQ3ZDg4YWJiNmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZN+48+905VfP2SJ0v3fVmpJ9awvPQYfcmlb
g5kuauDFnLx3AGEKnMgI8zcjnFMtTAB9/Vzd3zRz/kOaOVT+go3nuPPaAP60lZuR
g4SwllEc1xwtglXynBSNP1DUJAF1yaChbTXMdF+bG3QeCxa3wMmCMGRw9Ng5jPtv
yxHjc7xVtIyp+hItojNpAPAcxyyuE/qrqw/HluqCJnUKsTtb7PBv1Kawx+DoOdH5
MWxsEsLH6bTjKo4Or9QIFNKxF1VonGgUO9zFXtBHuMI1wx/70GWdy4cScwGlC1rx
XCkaRMhDMOX5BH5v1CduLUFwU3EDn888IP0XuIrbf5Oe7IJgwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFExE1dLR9XwSeqtFw6gkMHCf3PW3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzRjZmEwN2YtY2Y4Ni0z
MTVmLWE0NjAtY2Y5Y2MwMjM4YzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTHvSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABQ8txefaJEq2Cbu/B2SadZtNjkvzIUgZuKJY+CMapeJ/npkj+SxvF9f
QN9Ag+uyVGgW+dMPHIYvUFHLwSXfe7pA0L0AgiJt3xkGpb1xDnGwTfYk4CnxG1oS
LnYg9vCfxU9kW0uz9SbFXi1x3sC592kd3rkL7jFY/QkNBZNumdvRlCsMqmzb2Ysx
MQV9X8wnqIHX5xm38/tK9QWsYL4O6UXLvxiimkxli14s/vm3WvWpnYeuuX41wSGY
VDJnUQeonp4mHb5y19zBG80yETZq2OtmcX7/sgCpEQvpJXcDqf2hIesmwMuJC28s
zTz1E0huDnxlxWrDG8gc5LMQ4R7E4Ik=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:27:20 2025 by rpki-client