Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/222cb51a-84e4-3e45-99bc-c76317e8e710.roa
File:                     222cb51a-84e4-3e45-99bc-c76317e8e710.roa (raw, json)
Hash identifier:          KnaGs9ubqEha9t4B+pDF+lrDALu6rt09IVAqTK4CM6k=
Subject key identifier:   FB:A2:19:4E:A0:A6:E1:99:B4:65:D7:B9:24:04:23:1E:F3:1C:E3:33
Certificate issuer:       /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial:       010D0C9F4328584B80B75F33F513BE13D2524C00
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/222cb51a-84e4-3e45-99bc-c76317e8e710.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     1403
IP address blocks:        74.116.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:5f:33:f5:13:be:13:d2:52:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=f69cdcd0-61a5-4c5c-a574-0108cc332585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:dc:d4:82:16:1b:72:1b:8d:6b:d5:59:06:
                    b2:19:33:d1:05:fe:c2:79:b2:a3:d6:8c:ff:fe:29:
                    12:a4:0f:a9:af:c7:f3:32:49:1b:f9:45:16:4a:c5:
                    ad:64:97:5b:30:3b:32:0b:1a:29:73:7c:86:d5:68:
                    1a:a5:f6:90:29:2c:32:d8:9e:66:1b:6e:7d:13:bb:
                    d0:db:81:4e:d6:98:57:66:cf:f6:9b:ea:26:1e:75:
                    a6:8e:4c:08:c5:6d:82:3a:38:35:b4:3c:73:d5:d9:
                    c8:b1:fe:87:3c:cf:3b:4d:dd:bc:24:40:fe:79:83:
                    02:b7:86:07:3d:56:8c:17:c4:e9:5d:55:65:bb:9b:
                    f6:5c:60:dd:7c:36:c8:4d:3b:5a:1e:2e:c2:78:21:
                    eb:bb:59:d3:2b:b7:39:11:a2:75:6a:f0:23:d1:1b:
                    41:c1:9a:46:6d:f1:7f:32:79:8d:c5:67:9e:9b:ad:
                    9b:91:f7:71:b7:74:b9:bc:3b:a3:27:41:5b:e5:a7:
                    99:59:6c:ee:5f:4d:36:e2:75:52:cc:ae:d0:0c:21:
                    5c:a3:b2:71:81:b1:19:dc:86:52:24:ea:30:01:0a:
                    3d:b3:fb:1d:d7:8c:dd:ff:73:05:41:5b:f9:8d:5d:
                    56:cb:57:a4:5f:79:7b:bb:cd:a3:43:c9:af:c4:42:
                    81:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A2:19:4E:A0:A6:E1:99:B4:65:D7:B9:24:04:23:1E:F3:1C:E3:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/222cb51a-84e4-3e45-99bc-c76317e8e710.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl

            X509v3 Authority Key Identifier:
                keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:0c:af:1a:cb:32:1a:00:d4:05:92:f4:22:ba:fc:74:c5:a0:
         0f:72:9b:02:29:15:9b:ad:10:51:3a:8c:9a:79:50:25:e9:53:
         ed:a2:56:c8:b2:b2:4f:86:23:d8:1a:16:a4:58:c4:7c:e8:2f:
         43:47:15:1e:97:bb:40:74:13:fe:44:8f:31:56:d8:a8:31:2b:
         c4:2a:26:b2:61:69:2a:3b:af:8e:bf:b7:45:fc:c4:f2:d4:75:
         bd:6a:6a:23:97:74:37:b9:5e:c2:2c:9c:b3:1d:43:ba:b7:54:
         3e:63:96:e4:bc:5d:eb:ba:23:05:a7:c4:3c:66:44:92:20:2d:
         e2:7c:71:7b:b0:2d:22:04:11:78:43:d7:0a:88:03:e0:0e:92:
         7b:d7:fa:bf:68:fc:d4:7f:6e:dd:3b:38:f9:3d:35:fb:ec:04:
         c5:b9:89:3a:db:ca:a9:93:36:7a:1e:43:9b:97:5e:c6:b8:9f:
         db:78:9e:b8:14:9e:7c:cd:2b:10:31:39:f4:3a:63:90:66:0d:
         9f:6c:d5:9c:82:34:7e:f2:27:ac:d3:fe:94:b3:e4:1c:c7:94:
         fd:24:fd:ff:70:f5:30:a0:c6:dd:4b:04:e7:fa:6e:64:1b:ed:
         96:4c:3a:84:83:a2:37:cc:39:fc:10:71:e6:29:71:d7:4c:84:
         c4:b1:ce:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt18z9RO+E9JSTAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg0YWI1MmQtOTE1ZS00ZDhhLWIzN2ItNDk2ZWE0OWM2
Nzk4MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk
ZjY5Y2RjZDAtNjFhNS00YzVjLWE1NzQtMDEwOGNjMzMyNTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYbc1IIWG3IbjWvVWQayGTPRBf7CebKj1oz/
/ikSpA+pr8fzMkkb+UUWSsWtZJdbMDsyCxopc3yG1WgapfaQKSwy2J5mG259E7vQ
24FO1phXZs/2m+omHnWmjkwIxW2COjg1tDxz1dnIsf6HPM87Td28JED+eYMCt4YH
PVaMF8TpXVVlu5v2XGDdfDbITTtaHi7CeCHru1nTK7c5EaJ1avAj0RtBwZpGbfF/
MnmNxWeem62bkfdxt3S5vDujJ0Fb5aeZWWzuX0024nVSzK7QDCFco7JxgbEZ3IZS
JOowAQo9s/sd14zd/3MFQVv5jV1Wy1ekX3l7u82jQ8mvxEKBhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPuiGU6gpuGZtGXXuSQEIx7zHOMzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRh
YjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5YzY3OTgvMjIyY2I1MWEtODRlNC0z
ZTQ1LTk5YmMtYzc2MzE3ZThlNzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjg0YWI1MmQtOTE1ZS00ZDhhLWIz
N2ItNDk2ZWE0OWM2Nzk4L2I4NGFiNTJkLTkxNWUtNGQ4YS1iMzdiLTQ5NmVhNDlj
Njc5OC5jcmwwHwYDVR0jBBgwFoAU3bUy71MQu1ndgStV6Nv35hADJHwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZl
YTQ5YzY3OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSnS4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANsMrxrLMhoA1AWS9CK6/HTFoA9ymwIpFZutEFE6jJp5UCXpU+2iVsiy
sk+GI9gaFqRYxHzoL0NHFR6Xu0B0E/5EjzFW2KgxK8QqJrJhaSo7r46/t0X8xPLU
db1qaiOXdDe5XsIsnLMdQ7q3VD5jluS8Xeu6IwWnxDxmRJIgLeJ8cXuwLSIEEXhD
1wqIA+AOknvX+r9o/NR/bt07OPk9NfvsBMW5iTrbyqmTNnoeQ5uXXsa4n9t4nrgU
nnzNKxAxOfQ6Y5BmDZ9s1ZyCNH7yJ6zT/pSz5BzHlP0k/f9w9TCgxt1LBOf6bmQb
7ZZMOoSDojfMOfwQceYpcddMhMSxzkw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:23:16 2025 by rpki-client