Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/6c5f2e7d-b301-37e5-a815-c9eceb9f9d8a.roa
File:                     6c5f2e7d-b301-37e5-a815-c9eceb9f9d8a.roa (raw, json)
Hash identifier:          67v9+HMe9DPzYAeJ+q4zn9ZzdNhMxqOgJpE0o0fCV2o=
Subject key identifier:   72:89:88:16:82:BD:5C:E6:F3:2F:9F:AD:00:06:65:87:23:5A:1D:F9
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584B8BE22D7EC1CCF4CF81AF2E80
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/6c5f2e7d-b301-37e5-a815-c9eceb9f9d8a.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     1288
IP address blocks:        66.185.119.0/24 maxlen: 24
                          74.80.105.0/24 maxlen: 24
                          2620:171:36::/48 maxlen: 48
                          2620:171:e7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:2d:7e:c1:cc:f4:cf:81:af:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=4e094c4d-106a-476d-af0b-9fd60dd92fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bb:46:76:73:2f:3a:93:17:0c:f0:fb:4e:37:
                    52:a5:22:ec:8a:dd:02:69:d3:a4:86:07:cb:f8:d1:
                    2a:eb:a3:89:a5:3a:b6:00:a3:fc:ff:24:9e:44:58:
                    6c:ec:be:26:ff:6d:3c:06:88:35:00:17:51:4c:5f:
                    c3:f5:72:3d:7a:a8:28:bd:33:e5:0e:ec:15:b9:93:
                    fd:4d:a4:96:c5:73:74:9b:08:d3:73:ff:8c:0e:2f:
                    b8:de:87:e1:7a:8d:e2:19:19:bd:6f:e3:93:f9:4c:
                    77:b5:45:89:6e:97:da:ad:c7:e7:1b:cd:7e:da:e9:
                    8d:f7:ae:0e:85:1b:50:e6:5e:1c:8d:0c:b0:6b:44:
                    fe:67:92:23:37:66:e1:ea:8e:c8:49:e0:4a:23:fe:
                    2c:ba:40:36:cf:26:24:1b:dd:d6:93:e1:33:9d:d0:
                    10:89:20:c0:21:01:6f:60:e0:64:3c:e4:35:56:0b:
                    ff:2d:fe:a5:8a:be:35:6b:36:b6:5e:13:03:d8:6f:
                    8e:e4:1d:63:f7:df:d1:ec:37:2c:00:50:5e:77:86:
                    3e:b3:b5:25:f6:fe:8d:8f:16:39:75:3f:c1:d1:f2:
                    20:6d:72:5f:bf:5a:98:78:ff:5b:35:54:1f:61:63:
                    19:83:83:5e:5f:c8:8a:3a:7b:3d:0c:ac:b8:7f:5a:
                    a1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:89:88:16:82:BD:5C:E6:F3:2F:9F:AD:00:06:65:87:23:5A:1D:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/6c5f2e7d-b301-37e5-a815-c9eceb9f9d8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.185.119.0/24
                  74.80.105.0/24
                IPv6:
                  2620:171:36::/48
                  2620:171:e7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:65:9f:6b:ef:59:85:15:9c:1f:66:e1:1e:89:e6:c7:0c:f1:
         ac:4d:c8:61:13:d2:b2:79:03:dc:86:77:6e:f0:02:de:1b:74:
         7c:b5:4a:5f:c1:dc:bf:ed:8c:98:3b:ff:e3:e2:07:21:95:68:
         bf:40:8f:d7:f7:e4:06:32:28:a1:55:cd:63:df:45:f5:b9:42:
         dd:53:31:1a:16:17:5f:80:35:19:3e:db:3a:48:81:2c:77:64:
         04:81:76:18:ae:1d:cc:bb:fc:42:10:b0:53:e5:b6:fa:46:a8:
         b6:ee:d3:a0:e0:29:8a:71:bc:15:0d:9c:a2:71:cf:94:dc:0b:
         0e:70:cb:8a:0c:5a:e6:cd:99:35:25:bc:04:f6:ca:06:dc:91:
         4b:ae:75:5d:a4:c6:49:84:0e:b0:74:ff:5d:c0:f9:a1:5b:83:
         9b:09:b3:1d:90:c1:fd:ba:70:fe:c5:48:0f:d1:d3:d3:1c:92:
         64:45:9c:1d:8b:c4:b4:a3:a4:73:0c:f5:21:58:74:66:88:f5:
         fd:3c:df:a9:52:8e:01:85:fd:fb:e0:de:b9:dd:86:31:f3:61:
         eb:5d:2a:9b:06:ae:6b:01:84:d6:99:50:ad:ad:1b:77:bc:d3:
         7b:56:d0:6e:39:af:e9:05:1b:e4:95:21:25:21:dc:5b:4b:35:
         63:03:c9:37
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEuL4i1+wcz0z4GvLoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3
MTAzMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk
NGUwOTRjNGQtMTA2YS00NzZkLWFmMGItOWZkNjBkZDkyZmUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrtGdnMvOpMXDPD7TjdSpSLsit0CadOkhgfL
+NEq66OJpTq2AKP8/ySeRFhs7L4m/208Bog1ABdRTF/D9XI9eqgovTPlDuwVuZP9
TaSWxXN0mwjTc/+MDi+43ofheo3iGRm9b+OT+Ux3tUWJbpfarcfnG81+2umN964O
hRtQ5l4cjQywa0T+Z5IjN2bh6o7ISeBKI/4sukA2zyYkG93Wk+EzndAQiSDAIQFv
YOBkPOQ1Vgv/Lf6lir41aza2XhMD2G+O5B1j99/R7DcsAFBed4Y+s7Ul9v6NjxY5
dT/B0fIgbXJfv1qYeP9bNVQfYWMZg4NeX8iKOns9DKy4f1qhUQIDAQABo4IDdTCC
A3EwHQYDVR0OBBYEFHKJiBaCvVzm8y+frQAGZYcjWh35MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy
NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvNmM1ZjJlN2QtYjMwMS0z
N2U1LWE4MTUtYzllY2ViOWY5ZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4
ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj
NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2
MGRlYzcxMDMuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAQrl3AwQA
SlBpMBgEAgACMBIDBwAmIAFxADYDBwAmIAFxAOcwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADmWfa+9ZhRWc
H2bhHonmxwzxrE3IYRPSsnkD3IZ3bvAC3ht0fLVKX8Hcv+2MmDv/4+IHIZVov0CP
1/fkBjIooVXNY99F9blC3VMxGhYXX4A1GT7bOkiBLHdkBIF2GK4dzLv8QhCwU+W2
+kaotu7ToOApinG8FQ2conHPlNwLDnDLigxa5s2ZNSW8BPbKBtyRS651XaTGSYQO
sHT/XcD5oVuDmwmzHZDB/bpw/sVID9HT0xySZEWcHYvEtKOkcwz1IVh0Zoj1/Tzf
qVKOAYX9++Deud2GMfNh610qmwauawGE1plQra0bd7zTe1bQbjmv6QUb5JUhJSHc
W0s1YwPJNw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:26:35 2025 by rpki-client