Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/e1a7be4a-5c75-3cfe-a4f3-ae01e91101d1.roa
File:                     e1a7be4a-5c75-3cfe-a4f3-ae01e91101d1.roa (raw, json)
Hash identifier:          X1ClXkOSBLYX8DzH28xKvgHF8ogLAHo6b+M8tBqOSk8=
Subject key identifier:   EA:B7:6A:C2:ED:89:78:68:FF:8B:8C:DA:D2:BE:F4:DB:6C:00:6D:22
Certificate issuer:       /CN=b9ea3438-4142-4de2-a912-7b081a51b42d
Certificate serial:       010D0C9F4328584B891764B1CB926C1C835B1880
Authority key identifier: 24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/e1a7be4a-5c75-3cfe-a4f3-ae01e91101d1.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     19210
IP address blocks:        74.116.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:64:b1:cb:92:6c:1c:83:5b:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ea3438-4142-4de2-a912-7b081a51b42d
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=fd288d42-bb91-46cc-921c-2d6fb7c0a946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3d:df:75:af:20:58:66:cf:1e:fe:32:ca:1f:
                    bf:57:8f:f5:11:b9:e1:44:18:c5:22:0c:4c:67:77:
                    37:5e:02:39:8c:5f:68:bc:00:11:08:34:5f:b4:63:
                    7a:54:ab:62:f0:eb:63:a9:46:3c:45:96:9c:d0:5e:
                    03:35:be:ec:19:d4:49:07:15:1b:c6:cc:18:9d:a8:
                    c6:82:dc:6b:13:1b:98:4b:1c:bf:d8:42:99:27:64:
                    8a:6b:6c:d5:94:1c:c2:de:57:46:52:47:2a:7f:f1:
                    ac:e9:bf:97:c4:3b:43:3c:41:4e:57:3f:3b:97:82:
                    32:0b:e1:05:75:1b:29:8d:1c:24:a0:a1:e3:52:68:
                    22:fa:d6:d3:09:9f:34:50:bc:f3:cd:c1:9e:69:63:
                    08:11:43:69:a3:d4:b2:8f:5d:a3:fe:7a:fa:65:01:
                    fb:07:a1:89:87:2c:5f:e3:7c:ec:41:f7:02:c4:87:
                    5e:c9:47:46:9e:d1:71:fc:3c:4a:76:a6:92:34:a9:
                    44:99:0e:8a:a1:39:b7:6d:39:20:d4:de:09:8a:5e:
                    90:ee:db:93:f6:65:91:bb:34:72:28:54:ca:8c:33:
                    62:b3:b2:f3:cd:9d:8b:88:39:54:df:d1:d8:d7:34:
                    a2:ec:16:fa:05:ed:b8:88:2f:d7:64:04:8b:77:f1:
                    d5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B7:6A:C2:ED:89:78:68:FF:8B:8C:DA:D2:BE:F4:DB:6C:00:6D:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/e1a7be4a-5c75-3cfe-a4f3-ae01e91101d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.crl

            X509v3 Authority Key Identifier:
                keyid:24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:8f:2b:8a:14:0c:60:9b:2f:a3:8c:eb:5d:7a:60:8f:7b:84:
         46:a0:6c:fa:eb:88:1f:1e:db:ca:82:c4:b4:2f:6b:d9:68:45:
         47:5c:20:3e:fd:3e:79:88:84:ff:8c:8c:38:fd:78:be:8f:b8:
         ca:4a:40:74:71:bf:3b:89:78:17:f7:fd:8a:11:cc:d0:7f:d1:
         58:ae:38:b1:f3:4e:6e:62:66:90:17:7f:e4:b3:a7:3d:eb:8e:
         7c:c8:e8:a3:b8:da:4e:90:77:06:a4:8c:55:8d:31:6a:ca:82:
         93:a0:28:1d:d4:61:3d:ad:9c:2a:37:d3:0e:41:c3:b7:13:e0:
         8e:41:44:62:e5:d0:d1:7f:28:05:80:18:c3:ab:1d:13:7e:f9:
         c1:53:7a:90:14:4e:7c:42:2e:91:20:22:01:19:7a:8c:9f:73:
         0e:a6:97:d3:bb:3e:66:c1:1f:f1:58:cd:d9:0c:9c:d7:1b:06:
         1e:60:0b:43:3c:ec:65:ac:1f:18:92:fe:87:32:15:89:6d:6d:
         d1:bd:4b:a9:a9:73:14:0d:2c:d6:46:75:7d:cc:a4:e3:cb:cb:
         15:bd:b4:17:9b:41:19:35:db:27:01:84:50:e9:0d:50:e1:e9:
         31:2c:b7:4b:42:55:26:24:59:2a:ea:52:e7:85:6a:bc:05:ee:
         86:22:bb:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF2Sxy5JsHINbGIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjllYTM0MzgtNDE0Mi00ZGUyLWE5MTItN2IwODFhNTFi
NDJkMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk
ZmQyODhkNDItYmI5MS00NmNjLTkyMWMtMmQ2ZmI3YzBhOTQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT3fda8gWGbPHv4yyh+/V4/1EbnhRBjFIgxM
Z3c3XgI5jF9ovAARCDRftGN6VKti8OtjqUY8RZac0F4DNb7sGdRJBxUbxswYnajG
gtxrExuYSxy/2EKZJ2SKa2zVlBzC3ldGUkcqf/Gs6b+XxDtDPEFOVz87l4IyC+EF
dRspjRwkoKHjUmgi+tbTCZ80ULzzzcGeaWMIEUNpo9Syj12j/nr6ZQH7B6GJhyxf
43zsQfcCxIdeyUdGntFx/DxKdqaSNKlEmQ6KoTm3bTkg1N4Jil6Q7tuT9mWRuzRy
KFTKjDNis7LzzZ2LiDlU39HY1zSi7Bb6Be24iC/XZASLd/HVbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOq3asLtiXho/4uM2tK+9NtsAG0iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOWVh
MzQzOC00MTQyLTRkZTItYTkxMi03YjA4MWE1MWI0MmQvZTFhN2JlNGEtNWM3NS0z
Y2ZlLWE0ZjMtYWUwMWU5MTEwMWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjllYTM0MzgtNDE0Mi00ZGUyLWE5
MTItN2IwODFhNTFiNDJkL2I5ZWEzNDM4LTQxNDItNGRlMi1hOTEyLTdiMDgxYTUx
YjQyZC5jcmwwHwYDVR0jBBgwFoAUJDliXoh2ePZzmBGt5EgWbTk2r20wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOWVhMzQzOC00MTQyLTRkZTItYTkxMi03YjA4
MWE1MWI0MmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnRpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEKPK4oUDGCbL6OM6116YI97hEagbPrriB8e28qCxLQva9loRUdcID79
PnmIhP+MjDj9eL6PuMpKQHRxvzuJeBf3/YoRzNB/0ViuOLHzTm5iZpAXf+Szpz3r
jnzI6KO42k6QdwakjFWNMWrKgpOgKB3UYT2tnCo30w5Bw7cT4I5BRGLl0NF/KAWA
GMOrHRN++cFTepAUTnxCLpEgIgEZeoyfcw6ml9O7PmbBH/FYzdkMnNcbBh5gC0M8
7GWsHxiS/ocyFYltbdG9S6mpcxQNLNZGdX3MpOPLyxW9tBebQRk12ycBhFDpDVDh
6TEst0tCVSYkWSrqUueFarwF7oYiu+I=
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:19:02 2025 by rpki-client