Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/a6e5acc9-5bc8-349a-9aea-d0741522ed34.roa
File:                     a6e5acc9-5bc8-349a-9aea-d0741522ed34.roa (raw, json)
Hash identifier:          keTvX+dJM1bh+DiVC5v/W9wUadN7kROFmYnUhYaSaoE=
Subject key identifier:   84:10:BD:C9:24:65:FD:14:E0:C7:A1:CA:9D:8C:44:83:BD:EB:9B:48
Certificate issuer:       /CN=e2311284-478e-4111-8d73-27148a01fa21
Certificate serial:       010D0C9F4328584B4D11DE5560DC13CC378EC680
Authority key identifier: 8C:F0:68:8D:CD:E2:2E:A8:36:9C:31:30:10:0F:98:75:1A:87:DB:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/a6e5acc9-5bc8-349a-9aea-d0741522ed34.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     17056
IP address blocks:        74.115.114.0/24 maxlen: 24
                          74.115.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:de:55:60:dc:13:cc:37:8e:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2311284-478e-4111-8d73-27148a01fa21
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=e35b2256-21c2-4667-8160-a28d2e598913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1f:04:72:85:00:90:b0:a7:57:a1:28:b4:b3:
                    a7:4c:17:f9:e6:6c:8b:68:f4:b2:89:ae:8a:33:5e:
                    8d:28:a0:07:d3:c3:d5:53:f6:eb:ee:e7:ea:c2:fa:
                    47:27:cd:f3:51:eb:73:d3:d1:bc:6d:28:f8:46:9e:
                    e4:f2:fa:14:16:c5:e8:20:96:13:f9:5c:93:b2:09:
                    21:f7:93:22:9e:6c:12:24:17:b6:a7:45:20:22:ba:
                    a3:b4:46:46:de:7e:e1:57:e6:14:28:20:71:84:e4:
                    c3:97:5b:8e:a4:63:d1:7b:76:2d:3f:9d:a6:d7:3b:
                    c1:ca:43:cf:93:a7:ca:0c:36:f5:25:b6:94:c6:ea:
                    72:8f:c8:bc:b5:66:28:bd:d3:34:35:0f:8a:bb:d3:
                    7e:66:62:20:f6:3c:13:89:76:78:53:b8:a5:18:ce:
                    32:55:66:66:af:36:3b:0d:d2:8e:5e:a0:9e:25:46:
                    92:a5:26:72:31:8e:fe:d6:49:4d:2a:9b:5e:5d:15:
                    7c:00:82:58:b9:27:e1:a9:e9:75:03:af:d6:9c:f2:
                    e8:9c:87:98:3a:89:b6:d1:3c:0c:97:98:1b:70:8b:
                    25:aa:76:8d:fa:a3:09:54:0e:ff:03:2d:89:fc:fc:
                    ad:37:4e:f7:ec:e7:69:84:19:af:41:e2:f2:5e:8e:
                    bf:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:10:BD:C9:24:65:FD:14:E0:C7:A1:CA:9D:8C:44:83:BD:EB:9B:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/a6e5acc9-5bc8-349a-9aea-d0741522ed34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.crl

            X509v3 Authority Key Identifier:
                keyid:8C:F0:68:8D:CD:E2:2E:A8:36:9C:31:30:10:0F:98:75:1A:87:DB:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.114.0/24
                  74.115.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:bf:45:68:79:90:dd:bf:f9:7c:e4:52:72:99:d3:76:36:e0:
         94:2e:42:d7:33:05:22:8e:80:25:77:4a:fc:5f:44:09:6f:0e:
         00:37:56:4e:a4:2c:65:2f:e5:fc:fe:6b:0d:9e:0c:ce:be:d5:
         7a:43:27:10:d0:1f:83:e5:89:62:3f:b2:52:3f:bc:09:4f:53:
         b8:59:3e:a1:62:dd:fa:ce:86:27:ea:58:a0:9a:98:b3:ad:f3:
         f2:13:89:a4:52:ff:49:46:eb:c9:a3:6a:a8:d7:66:f5:fb:46:
         8c:51:ec:79:5d:6d:18:49:5a:a6:c1:e3:1d:f8:05:99:aa:7c:
         57:39:69:7d:be:d9:e0:b2:86:b1:66:aa:d8:e2:44:80:50:6f:
         48:77:a0:c1:e7:10:41:82:b6:92:39:d0:20:9c:09:f0:4e:ce:
         13:01:57:98:94:91:af:f7:ad:82:ff:d0:81:22:0d:b5:5e:a1:
         a8:99:33:f7:e7:10:85:9f:54:ae:2c:86:bb:a8:c5:f2:e6:a8:
         86:f4:94:ac:44:2a:63:dc:01:61:3c:24:e2:08:53:bc:3c:b9:
         83:4e:66:d2:1d:b3:8a:8f:a2:a3:de:38:40:c0:db:cc:c4:f5:
         8b:3c:5e:25:70:ec:78:92:ab:15:17:87:92:6d:d6:95:1c:e1:
         8c:2f:a0:3c
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtNEd5VYNwTzDeOxoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIzMTEyODQtNDc4ZS00MTExLThkNzMtMjcxNDhhMDFm
YTIxMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk
ZTM1YjIyNTYtMjFjMi00NjY3LTgxNjAtYTI4ZDJlNTk4OTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0R8EcoUAkLCnV6EotLOnTBf55myLaPSyia6K
M16NKKAH08PVU/br7ufqwvpHJ83zUetz09G8bSj4Rp7k8voUFsXoIJYT+VyTsgkh
95MinmwSJBe2p0UgIrqjtEZG3n7hV+YUKCBxhOTDl1uOpGPRe3YtP52m1zvBykPP
k6fKDDb1JbaUxupyj8i8tWYovdM0NQ+Ku9N+ZmIg9jwTiXZ4U7ilGM4yVWZmrzY7
DdKOXqCeJUaSpSZyMY7+1klNKpteXRV8AIJYuSfhqel1A6/WnPLonIeYOom20TwM
l5gbcIslqnaN+qMJVA7/Ay2J/PytN0737OdphBmvQeLyXo6/wwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFIQQvckkZf0U4Mehyp2MRIO965tIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lMjMx
MTI4NC00NzhlLTQxMTEtOGQ3My0yNzE0OGEwMWZhMjEvYTZlNWFjYzktNWJjOC0z
NDlhLTlhZWEtZDA3NDE1MjJlZDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTIzMTEyODQtNDc4ZS00MTExLThk
NzMtMjcxNDhhMDFmYTIxL2UyMzExMjg0LTQ3OGUtNDExMS04ZDczLTI3MTQ4YTAx
ZmEyMS5jcmwwHwYDVR0jBBgwFoAUjPBojc3iLqg2nDEwEA+YdRqH274wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lMjMxMTI4NC00NzhlLTQxMTEtOGQ3My0yNzE0
OGEwMWZhMjEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQASnNyAwQA
SnN1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAH2/RWh5kN2/+XzkUnKZ03Y24JQuQtczBSKOgCV3SvxfRAlv
DgA3Vk6kLGUv5fz+aw2eDM6+1XpDJxDQH4PliWI/slI/vAlPU7hZPqFi3frOhifq
WKCamLOt8/ITiaRS/0lG68mjaqjXZvX7RoxR7HldbRhJWqbB4x34BZmqfFc5aX2+
2eCyhrFmqtjiRIBQb0h3oMHnEEGCtpI50CCcCfBOzhMBV5iUka/3rYL/0IEiDbVe
oaiZM/fnEIWfVK4shruoxfLmqIb0lKxEKmPcAWE8JOIIU7w8uYNOZtIds4qPoqPe
OEDA28zE9Ys8XiVw7HiSqxUXh5Jt1pUc4YwvoDw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:07:55 2025 by rpki-client