Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/83df6527-ea07-3578-af70-41de2a6da837.roa
File:                     83df6527-ea07-3578-af70-41de2a6da837.roa (raw, json)
Hash identifier:          5jhf8PELOajzlA/vuVnc28WCr1RLEuJ0KADJQAmBYy0=
Subject key identifier:   2E:EF:58:11:12:E2:F7:8B:12:B0:DD:6E:0B:89:F0:CD:45:B1:C1:A9
Certificate issuer:       /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial:       010D0C9F4328584A58CB0568B5F007E8869C8388
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/83df6527-ea07-3578-af70-41de2a6da837.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     398420
IP address blocks:        74.126.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:05:68:b5:f0:07:e8:86:9c:83:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=99c51ae0-f330-46fd-b624-4c1a5fe7ae12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:75:e5:48:bb:eb:e4:3a:ac:43:3b:d9:cd:4c:
                    38:c2:19:69:e8:43:22:7d:2e:89:90:75:55:80:86:
                    1b:f3:0c:f3:12:a2:fa:13:43:0a:83:7b:a1:ef:b7:
                    af:5b:38:a2:c2:f8:83:83:27:b0:89:47:09:40:d6:
                    7c:a4:f5:e4:bc:a8:e8:48:30:4e:ab:cf:69:23:a0:
                    c6:57:27:dc:16:a3:ee:75:f0:a0:3a:1d:21:bd:5b:
                    06:9b:3a:94:0f:f5:57:d9:e9:f9:71:25:e1:e8:3e:
                    7d:60:fe:c3:06:89:68:09:e3:e5:7e:de:ce:9a:b4:
                    a5:d9:57:0a:15:b8:0f:33:37:b7:e8:19:b2:78:c4:
                    a1:5d:b7:7f:ab:b6:4d:7d:8e:db:ea:a2:c8:be:95:
                    f2:06:69:ab:25:fa:e0:9c:de:49:74:95:c4:7c:a5:
                    32:7b:6c:3c:5c:4b:74:79:a8:39:72:8d:da:21:1e:
                    60:5c:a3:a1:2e:42:ad:a1:5b:87:e6:19:2c:e5:8e:
                    32:27:3d:81:fe:00:44:e7:81:74:4d:f4:e2:0e:4f:
                    17:76:16:3b:f4:a9:59:90:c5:ad:62:8a:16:86:b5:
                    32:20:5b:78:1f:a9:b3:e6:a7:12:53:18:b4:43:c0:
                    66:7b:25:9d:cb:a4:16:df:b7:e2:72:9d:16:dd:87:
                    58:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:EF:58:11:12:E2:F7:8B:12:B0:DD:6E:0B:89:F0:CD:45:B1:C1:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/83df6527-ea07-3578-af70-41de2a6da837.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl

            X509v3 Authority Key Identifier:
                keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.126.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:e4:5a:0f:61:df:b0:7d:ba:ae:d7:6c:3d:76:72:cb:e6:c2:
         ec:60:8d:8b:fa:4c:81:b5:81:6b:ff:37:8d:bb:02:d9:22:02:
         78:67:4f:b7:c2:48:d4:1a:f3:ba:11:b0:42:6f:d0:62:21:b1:
         61:ae:95:c3:c2:ca:d1:a7:30:4a:0e:c2:13:09:f6:62:72:eb:
         91:0f:2c:c2:a1:e1:6b:9c:5d:c8:b5:b8:83:bb:1f:22:42:8f:
         c8:e0:8b:0a:1b:29:c7:56:ec:33:16:39:a9:f4:10:41:27:18:
         c5:f0:91:d6:2d:7f:8c:5d:a8:00:f9:3d:6b:b4:e0:59:f4:8d:
         cd:00:1d:2a:76:2a:23:96:89:15:4d:51:43:c3:bd:8e:1f:2a:
         98:15:a2:17:6e:21:53:3b:b6:ee:02:97:38:fd:07:4f:b4:99:
         36:c1:48:4d:b3:a1:83:35:c0:a0:a9:0f:96:93:f4:3d:b7:1d:
         64:ba:91:72:26:c2:98:4c:c0:df:a3:94:a6:fc:bd:73:f8:4e:
         87:6e:96:e2:92:c7:ff:a5:d3:5f:cc:da:02:38:52:93:24:a6:
         c0:3f:ec:4d:8e:ea:a9:dc:e8:fb:23:b9:43:20:bb:24:7d:d5:
         cf:d5:ba:b5:f9:07:84:1e:2d:7f:0f:bf:6f:85:56:78:e9:27:
         cd:61:09:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYywVotfAH6Iacg4gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3
OTU5MB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk
OTljNTFhZTAtZjMzMC00NmZkLWI2MjQtNGMxYTVmZTdhZTEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HXlSLvr5DqsQzvZzUw4whlp6EMifS6JkHVV
gIYb8wzzEqL6E0MKg3uh77evWziiwviDgyewiUcJQNZ8pPXkvKjoSDBOq89pI6DG
VyfcFqPudfCgOh0hvVsGmzqUD/VX2en5cSXh6D59YP7DBoloCePlft7OmrSl2VcK
FbgPMze36BmyeMShXbd/q7ZNfY7b6qLIvpXyBmmrJfrgnN5JdJXEfKUye2w8XEt0
eag5co3aIR5gXKOhLkKtoVuH5hks5Y4yJz2B/gBE54F0TfTiDk8XdhY79KlZkMWt
YooWhrUyIFt4H6mz5qcSUxi0Q8BmeyWdy6QW37ficp0W3YdYuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC7vWBES4veLErDdbguJ8M1FscGpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz
ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvODNkZjY1MjctZWEwNy0z
NTc4LWFmNzAtNDFkZTJhNmRhODM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0
ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0
Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw
M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSn6gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAzkWg9h37B9uq7XbD12csvmwuxgjYv6TIG1gWv/N427AtkiAnhnT7fC
SNQa87oRsEJv0GIhsWGulcPCytGnMEoOwhMJ9mJy65EPLMKh4WucXci1uIO7HyJC
j8jgiwobKcdW7DMWOan0EEEnGMXwkdYtf4xdqAD5PWu04Fn0jc0AHSp2KiOWiRVN
UUPDvY4fKpgVohduIVM7tu4Clzj9B0+0mTbBSE2zoYM1wKCpD5aT9D23HWS6kXIm
wphMwN+jlKb8vXP4ToduluKSx/+l01/M2gI4UpMkpsA/7E2O6qnc6PsjuUMguyR9
1c/VurX5B4QeLX8Pv2+FVnjpJ81hCQc=
-----END CERTIFICATE-----
Generated at Sat Jul 5 01:20:19 2025 by rpki-client