Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/61d8257e-99c5-37ab-8479-9e24510b2be2.roa
File:                     61d8257e-99c5-37ab-8479-9e24510b2be2.roa (raw, json)
Hash identifier:          jFZnXxQeJ8Ie1er5mCZP+SKBfPzbJJb7xyH4IIVkglU=
Subject key identifier:   92:0E:C6:FB:68:02:95:40:91:40:89:A6:A0:E5:30:71:4E:F6:62:49
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584D3F64E0933928C51CF33B1AC0
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/61d8257e-99c5-37ab-8479-9e24510b2be2.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     42
IP address blocks:        74.63.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:e0:93:39:28:c5:1c:f3:3b:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=cd9554b0-245d-42e0-a42b-8879cf487042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:91:b0:15:d7:10:58:4f:64:6c:1e:6d:71:dc:
                    51:29:32:42:3b:95:b2:7b:db:09:90:d2:bc:07:b7:
                    79:59:ae:d6:10:ce:9f:b7:0e:2d:83:1d:14:16:f9:
                    2f:21:85:c1:26:4f:b2:07:f6:6d:bb:6d:98:d1:de:
                    f5:13:9a:fb:fa:f7:bd:42:33:f0:d6:a6:c6:09:6d:
                    cb:9f:35:f4:84:b4:ee:1c:54:51:dd:69:62:25:f6:
                    40:e7:97:32:17:32:bf:8c:04:f3:7e:50:f2:a4:cc:
                    39:20:f0:d3:5b:eb:8f:a3:6c:4e:c3:c6:55:9d:4c:
                    59:cc:bf:e1:9b:b2:3b:21:c8:53:ce:4b:b3:de:45:
                    36:ad:bd:3e:82:1b:ff:f5:10:18:a3:7d:5e:a4:e6:
                    83:6a:47:fd:49:b9:82:47:74:e5:9e:a5:5f:32:2f:
                    bf:31:2e:0e:89:91:30:e3:ad:0d:66:57:ec:99:ab:
                    26:25:4e:33:84:2f:5a:bd:81:82:da:a9:c1:85:3e:
                    c4:d5:9d:2a:25:3b:ad:6c:e3:61:05:39:cb:4a:f3:
                    7f:2a:fe:1d:05:57:53:83:bd:72:a8:40:1c:47:c5:
                    30:63:41:99:de:22:ad:8d:ac:14:ee:72:73:38:15:
                    31:f8:69:d3:63:ba:a2:67:e8:f8:cb:08:18:df:02:
                    44:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0E:C6:FB:68:02:95:40:91:40:89:A6:A0:E5:30:71:4E:F6:62:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/61d8257e-99c5-37ab-8479-9e24510b2be2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.63.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:6f:54:a2:5e:a2:2a:98:d2:0f:fb:78:88:65:a6:a7:d3:2a:
         8e:45:f7:db:a7:fa:22:82:72:2f:30:5b:90:d2:19:56:f1:23:
         45:46:ca:5b:95:dc:5d:88:98:05:a3:27:4b:47:5f:63:06:51:
         d2:d7:8a:19:cc:81:69:77:52:f0:51:14:e0:9d:1a:5f:fc:27:
         b6:c0:a1:ed:b7:24:9e:f9:30:a3:c7:41:44:62:67:4c:ac:62:
         cc:30:67:f4:cf:63:92:52:76:51:81:69:7f:5a:5a:05:5d:0f:
         63:91:dc:b7:d2:70:90:53:cf:37:4f:ad:30:67:d8:42:9b:72:
         bc:86:8f:bb:88:be:9e:e5:cc:43:53:0c:58:dd:a9:aa:ff:95:
         6a:6e:25:5d:a2:f9:bd:a0:e6:ca:9c:9c:f8:19:c4:c2:b0:6d:
         21:d3:32:78:f5:69:db:77:5f:d9:7f:8d:07:5b:a5:e7:1c:93:
         91:5c:55:d2:1c:2a:61:12:95:71:a7:52:d8:9e:cc:82:b9:2c:
         8a:dd:76:b6:0d:70:e3:cd:e9:32:42:b7:b1:49:e4:bc:12:33:
         53:02:5c:a7:95:2c:0a:c9:c0:6c:0a:a9:3f:1b:31:9d:37:1e:
         a7:7c:5c:21:53:00:dd:f5:7b:e6:fa:79:02:e7:a2:b9:28:49:
         5f:de:0d:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZOCTOSjFHPM7GsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3
MTAzMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk
Y2Q5NTU0YjAtMjQ1ZC00MmUwLWE0MmItODg3OWNmNDg3MDQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZGwFdcQWE9kbB5tcdxRKTJCO5Wye9sJkNK8
B7d5Wa7WEM6ftw4tgx0UFvkvIYXBJk+yB/Ztu22Y0d71E5r7+ve9QjPw1qbGCW3L
nzX0hLTuHFRR3WliJfZA55cyFzK/jATzflDypMw5IPDTW+uPo2xOw8ZVnUxZzL/h
m7I7IchTzkuz3kU2rb0+ghv/9RAYo31epOaDakf9SbmCR3TlnqVfMi+/MS4OiZEw
460NZlfsmasmJU4zhC9avYGC2qnBhT7E1Z0qJTutbONhBTnLSvN/Kv4dBVdTg71y
qEAcR8UwY0GZ3iKtjawU7nJzOBUx+GnTY7qiZ+j4ywgY3wJEOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJIOxvtoApVAkUCJpqDlMHFO9mJJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy
NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvNjFkODI1N2UtOTljNS0z
N2FiLTg0NzktOWUyNDUxMGIyYmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4
ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj
NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2
MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESj8QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABZvVKJeoiqY0g/7eIhlpqfTKo5F99un+iKCci8wW5DSGVbxI0VGyluV
3F2ImAWjJ0tHX2MGUdLXihnMgWl3UvBRFOCdGl/8J7bAoe23JJ75MKPHQURiZ0ys
YswwZ/TPY5JSdlGBaX9aWgVdD2OR3LfScJBTzzdPrTBn2EKbcryGj7uIvp7lzENT
DFjdqar/lWpuJV2i+b2g5sqcnPgZxMKwbSHTMnj1adt3X9l/jQdbpecck5FcVdIc
KmESlXGnUtiezIK5LIrddrYNcOPN6TJCt7FJ5LwSM1MCXKeVLArJwGwKqT8bMZ03
Hqd8XCFTAN31e+b6eQLnorkoSV/eDQI=
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:38:00 2026 by rpki-client