Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/de6df29f-4628-3c6e-aab4-4d25c8220ae6.roa
File:                     de6df29f-4628-3c6e-aab4-4d25c8220ae6.roa (raw, json)
Hash identifier:          QAPBT6GIxJiR6SeNdw6HK49/o1/ioLeQncIFbcvwzyM=
Subject key identifier:   27:44:AE:D3:F9:54:EC:6E:10:B2:2B:65:9D:F2:46:77:DD:03:C6:15
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584A49A426C39B3FBD4471B776C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/de6df29f-4628-3c6e-aab4-4d25c8220ae6.roa
Signing time:             Mon 23 Jun 2025 14:45:31 +0000
ROA not before:           Mon 23 Jun 2025 14:45:31 +0000
ROA not after:            Sun 21 Sep 2025 14:45:31 +0000
asID:                     15290
IP address blocks:        74.216.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:a4:26:c3:9b:3f:bd:44:71:b7:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun 23 14:45:31 2025 GMT
            Not After : Sep 21 14:45:31 2025 GMT
        Subject: CN=cc826201-9624-4b3e-ab08-c4ee0c4ee341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ed:ac:39:92:2b:35:6f:ad:a3:00:f9:cb:47:
                    05:2c:c0:d1:1b:2c:02:d6:b7:8d:20:52:8d:bc:c7:
                    cc:06:4b:b4:27:66:30:82:d6:13:7f:0f:f5:f7:ab:
                    98:07:94:a2:ee:d3:d9:10:45:5d:9f:a1:42:66:b9:
                    9c:26:8b:14:fa:0b:a7:60:99:c0:95:1f:38:1c:d3:
                    08:f3:72:e4:ec:71:ae:53:20:1d:73:d2:92:cc:17:
                    1a:bc:f5:b7:79:74:4e:94:49:2a:f7:18:b5:fb:e5:
                    c8:80:fa:95:df:fc:b2:5b:24:9b:4e:1d:b5:db:9a:
                    57:6e:5d:90:5b:f9:c8:4e:a7:8c:e7:a1:ca:52:1b:
                    88:57:dc:d0:c8:ab:0f:83:c6:4e:6b:a5:da:62:4a:
                    bc:06:74:89:c5:10:c7:d4:b7:e1:26:f6:53:13:86:
                    d6:a9:e6:3f:98:d0:c4:37:3c:9c:6a:38:bd:f0:b2:
                    15:f0:27:26:be:9a:f1:14:9b:fe:5c:ce:d3:f7:1d:
                    b2:1e:87:4e:f9:a1:67:bc:09:4d:46:2b:8a:3e:28:
                    d8:b2:33:ac:99:36:8c:5c:6a:52:c9:f9:89:7b:cb:
                    cd:46:7a:20:92:e4:6f:11:96:d3:3c:90:64:f5:4c:
                    9f:4e:77:7e:fc:6b:10:2a:15:86:2f:22:4a:67:04:
                    03:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:44:AE:D3:F9:54:EC:6E:10:B2:2B:65:9D:F2:46:77:DD:03:C6:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/de6df29f-4628-3c6e-aab4-4d25c8220ae6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.216.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:02:9b:f9:4b:9d:d3:de:63:62:18:44:04:3c:c7:7d:bd:4d:
         4c:a3:fd:9d:fc:8b:54:39:15:f9:b1:a1:24:32:22:b5:fa:e8:
         9c:52:16:c7:0f:45:6d:fa:a6:37:ce:be:dc:24:d6:c2:7c:59:
         67:ff:c9:a6:9a:ef:ea:7f:ee:34:60:7b:6d:11:ab:a2:fd:0f:
         e3:0f:44:90:a4:cb:0a:b0:ec:45:57:69:31:27:42:4a:4b:11:
         24:9c:ca:23:46:f0:58:8e:2d:00:66:33:1d:77:29:79:22:f3:
         59:1f:01:da:fa:e0:60:e3:fd:3a:bc:1c:fb:1f:cf:fd:29:f1:
         41:81:2f:48:a0:87:d3:70:9f:04:ae:77:97:c3:de:dc:18:72:
         3a:d3:99:02:39:54:e8:1d:42:37:d7:75:38:7d:2b:e5:59:73:
         f6:aa:15:ae:ab:21:cf:75:2d:01:4f:5b:c9:95:a7:3f:aa:7e:
         6c:fa:6d:d4:83:52:a1:d3:05:fc:dd:9c:7b:aa:5f:a6:22:21:
         1a:b8:34:f7:14:6b:da:93:31:ad:e4:ff:dd:fd:c4:78:7c:66:
         64:ee:a5:ac:a1:bf:84:bf:f2:be:de:34:77:b6:ed:22:be:29:
         e9:b3:53:d9:34:29:02:a7:40:e4:f3:d5:cc:48:60:21:35:07:
         a1:cb:ef:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJpCbDmz+9RHG3dsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDYyMzE0NDUzMVoXDTI1MDkyMTE0NDUzMVowLzEtMCsGA1UEAxMk
Y2M4MjYyMDEtOTYyNC00YjNlLWFiMDgtYzRlZTBjNGVlMzQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+2sOZIrNW+towD5y0cFLMDRGywC1reNIFKN
vMfMBku0J2YwgtYTfw/196uYB5Si7tPZEEVdn6FCZrmcJosU+gunYJnAlR84HNMI
83Lk7HGuUyAdc9KSzBcavPW3eXROlEkq9xi1++XIgPqV3/yyWySbTh2125pXbl2Q
W/nITqeM56HKUhuIV9zQyKsPg8ZOa6XaYkq8BnSJxRDH1LfhJvZTE4bWqeY/mNDE
Nzycaji98LIV8CcmvprxFJv+XM7T9x2yHodO+aFnvAlNRiuKPijYsjOsmTaMXGpS
yfmJe8vNRnogkuRvEZbTPJBk9UyfTnd+/GsQKhWGLyJKZwQDPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCdErtP5VOxuELIrZZ3yRnfdA8YVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvZGU2ZGYyOWYtNDYyOC0z
YzZlLWFhYjQtNGQyNWM4MjIwYWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAStjhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJACm/lLndPeY2IYRAQ8x329TUyj/Z38i1Q5FfmxoSQyIrX66JxSFscP
RW36pjfOvtwk1sJ8WWf/yaaa7+p/7jRge20Rq6L9D+MPRJCkywqw7EVXaTEnQkpL
ESScyiNG8FiOLQBmMx13KXki81kfAdr64GDj/Tq8HPsfz/0p8UGBL0igh9NwnwSu
d5fD3twYcjrTmQI5VOgdQjfXdTh9K+VZc/aqFa6rIc91LQFPW8mVpz+qfmz6bdSD
UqHTBfzdnHuqX6YiIRq4NPcUa9qTMa3k/939xHh8ZmTupayhv4S/8r7eNHe27SK+
KemzU9k0KQKnQOTz1cxIYCE1B6HL7zg=
-----END CERTIFICATE-----
Generated at Sun Jun 29 10:20:38 2025 by rpki-client