Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/b4d803ba-b6ed-389b-939e-207eb95465fe.roa
File:                     b4d803ba-b6ed-389b-939e-207eb95465fe.roa (raw, json)
Hash identifier:          lsjvJZbaflpU4y8DShvS57uPIc/fLBK6Ln4eRbZ0t24=
Subject key identifier:   A8:F6:C2:38:08:C8:7C:C4:B5:BE:61:47:46:F3:1E:8E:4D:B1:1D:BC
Certificate issuer:       /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
Certificate serial:       010D0C9F4328584E7BCA245F16B53985CE063E00
Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/b4d803ba-b6ed-389b-939e-207eb95465fe.roa
Signing time:             Mon 13 Jul 2026 09:00:12 +0000
ROA not before:           Mon 13 Jul 2026 09:00:12 +0000
ROA not after:            Sun 11 Oct 2026 09:00:12 +0000
asID:                     397412
IP address blocks:        74.51.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7b:ca:24:5f:16:b5:39:85:ce:06:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
        Validity
            Not Before: Jul 13 09:00:12 2026 GMT
            Not After : Oct 11 09:00:12 2026 GMT
        Subject: CN=9bf61a4d-3be9-4562-a5fa-073abe817e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:40:7f:d6:ca:af:a0:f1:f1:65:56:ce:f5:57:
                    60:3f:8f:19:0a:68:c3:c9:99:0b:60:1b:5d:eb:99:
                    bc:2c:8c:57:97:0b:7c:d1:b6:12:6e:d6:37:a8:49:
                    60:0b:4c:76:2b:6b:71:df:f0:41:6b:98:7d:b3:7a:
                    c5:6e:32:69:2d:bf:91:dc:7a:f5:ed:4d:85:26:5c:
                    02:0d:9e:40:a4:3f:a4:a0:fc:40:33:55:aa:b6:32:
                    6e:ab:6a:b8:eb:03:b3:7f:6b:ad:39:d3:7f:4f:d9:
                    28:ac:6f:55:44:ac:c6:20:8f:aa:45:f4:57:9c:f0:
                    30:18:5d:7b:3d:9f:62:fb:f8:5f:9a:07:7c:28:bd:
                    5e:7e:16:85:66:33:f8:06:34:93:c5:79:2b:0e:20:
                    6d:f5:69:e0:0f:fe:f7:9c:6e:f3:85:d7:11:63:3b:
                    ea:c0:cd:a9:89:d6:7d:4e:8f:e8:52:dd:32:d5:c7:
                    e1:16:6d:b6:87:95:5f:43:fe:ca:85:4a:7b:da:79:
                    ea:68:6a:b7:11:39:c9:d5:98:b9:c4:b1:f7:dc:4b:
                    e4:06:22:66:6b:f5:c0:a2:d1:a9:90:07:a0:64:99:
                    d2:4d:89:ab:5d:17:fd:2d:54:76:5b:7d:7e:09:8b:
                    dc:b4:b7:0a:af:1b:92:cc:02:ac:02:fd:70:0b:7a:
                    25:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F6:C2:38:08:C8:7C:C4:B5:BE:61:47:46:F3:1E:8E:4D:B1:1D:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/b4d803ba-b6ed-389b-939e-207eb95465fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl

            X509v3 Authority Key Identifier:
                keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.51.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:a8:31:ab:40:ab:9a:3f:d5:c0:fe:a1:ab:20:a5:11:eb:ec:
         65:81:3a:3d:d9:b5:fe:84:ea:bf:18:2d:5d:f5:8d:d1:d2:f5:
         0e:94:61:9d:8a:da:ca:69:c4:bc:74:8b:ae:10:c4:4c:33:aa:
         00:52:87:24:7b:aa:1c:90:27:27:26:c3:97:fd:41:81:7b:c3:
         36:a6:2f:92:57:c2:cf:35:b1:a5:09:c8:90:c2:6b:1a:7f:2e:
         c3:da:7a:89:b8:bd:20:18:62:83:76:06:57:59:7b:a3:73:ad:
         b2:68:9c:a9:c0:b1:e2:25:56:fd:39:6e:39:84:59:4b:0e:ea:
         e4:04:67:a2:48:34:fe:d6:21:ec:4a:88:5e:38:03:87:30:9a:
         c4:d2:7b:a7:ef:52:34:7c:5a:f3:7a:3f:1f:d9:de:37:09:41:
         6c:a6:cd:93:0f:89:42:b8:9a:e8:b3:c3:08:76:25:02:2e:62:
         99:96:7c:be:3b:25:6e:9c:64:4d:49:d3:ea:d1:fa:f4:05:3f:
         ba:a1:ea:b6:c9:f6:ee:70:5d:ca:21:0b:0d:b5:46:9f:5c:f4:
         14:21:ce:07:c4:45:df:e5:5a:2d:7d:65:83:a3:49:22:bf:67:
         17:29:7a:a8:77:b3:54:c3:d4:56:df:2f:e8:fd:4b:48:19:c7:
         52:5d:6a:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE57yiRfFrU5hc4GPgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2U0YTQ2MDktNmMyZS00N2Q4LThjNjktMWQ4MGEyY2Yz
ZjExMB4XDTI2MDcxMzA5MDAxMloXDTI2MTAxMTA5MDAxMlowLzEtMCsGA1UEAxMk
OWJmNjFhNGQtM2JlOS00NTYyLWE1ZmEtMDczYWJlODE3ZTQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEB/1sqvoPHxZVbO9VdgP48ZCmjDyZkLYBtd
65m8LIxXlwt80bYSbtY3qElgC0x2K2tx3/BBa5h9s3rFbjJpLb+R3Hr17U2FJlwC
DZ5ApD+koPxAM1WqtjJuq2q46wOzf2utOdN/T9korG9VRKzGII+qRfRXnPAwGF17
PZ9i+/hfmgd8KL1efhaFZjP4BjSTxXkrDiBt9WngD/73nG7zhdcRYzvqwM2pidZ9
To/oUt0y1cfhFm22h5VfQ/7KhUp72nnqaGq3ETnJ1Zi5xLH33EvkBiJma/XAotGp
kAegZJnSTYmrXRf9LVR2W31+CYvctLcKrxuSzAKsAv1wC3olpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKj2wjgIyHzEtb5hR0bzHo5NsR28MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTRh
NDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgwYTJjZjNmMTEvYjRkODAzYmEtYjZlZC0z
ODliLTkzOWUtMjA3ZWI5NTQ2NWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2U0YTQ2MDktNmMyZS00N2Q4LThj
NjktMWQ4MGEyY2YzZjExL2NlNGE0NjA5LTZjMmUtNDdkOC04YzY5LTFkODBhMmNm
M2YxMS5jcmwwHwYDVR0jBBgwFoAUaO+Qh8HxiFXOXjq3/4RHO8hZ6c0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9jZTRhNDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgw
YTJjZjNmMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASjPIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAeoMatAq5o/1cD+oasgpRHr7GWBOj3Ztf6E6r8YLV31jdHS9Q6UYZ2K
2sppxLx0i64QxEwzqgBShyR7qhyQJycmw5f9QYF7wzamL5JXws81saUJyJDCaxp/
LsPaeom4vSAYYoN2BldZe6NzrbJonKnAseIlVv05bjmEWUsO6uQEZ6JINP7WIexK
iF44A4cwmsTSe6fvUjR8WvN6Px/Z3jcJQWymzZMPiUK4muizwwh2JQIuYpmWfL47
JW6cZE1J0+rR+vQFP7qh6rbJ9u5wXcohCw21Rp9c9BQhzgfERd/lWi19ZYOjSSK/
Zxcpeqh3s1TD1FbfL+j9S0gZx1JdauI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:09:43 2026 by rpki-client