Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/59a8a64f-08aa-3759-bc61-2e2185fe4e49.roa
File:                     59a8a64f-08aa-3759-bc61-2e2185fe4e49.roa (raw, json)
Hash identifier:          /Pm3ei/bEFcB90BBv6ElkxaVBQLc2aHRxuXESgh/JQQ=
Subject key identifier:   BC:A0:74:7E:19:53:B8:A5:9B:AE:9F:30:BC:B2:6D:92:28:AC:94:5B
Certificate issuer:       /CN=560494a5-3dff-416d-b8a7-cf5cad5f05f6
Certificate serial:       010D0C9F4328584F4976D82F58975418A4705140
Authority key identifier: 56:98:2D:5F:6F:FD:A8:FB:6C:BE:31:3F:18:06:D8:43:1B:C7:A8:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/59a8a64f-08aa-3759-bc61-2e2185fe4e49.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     53309
IP address blocks:        74.116.252.0/24 maxlen: 24
                          74.116.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/560494a5-3dff-416d-b8a7-cf5cad5f05f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/560494a5-3dff-416d-b8a7-cf5cad5f05f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:d8:2f:58:97:54:18:a4:70:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560494a5-3dff-416d-b8a7-cf5cad5f05f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=45d18f70-3f69-4fbb-8a9e-9213f6320fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7b:c3:a8:18:d9:24:82:93:9f:b6:1d:75:8c:
                    81:86:31:43:83:58:6d:1b:3b:45:e2:cc:b2:31:8d:
                    33:6e:a7:3e:f6:44:d8:82:14:87:8a:a9:a6:fa:c2:
                    29:79:c8:4d:7e:be:97:32:31:0a:52:02:99:83:1f:
                    26:90:e2:54:e2:61:14:4f:08:3f:f8:da:95:a2:45:
                    e6:4a:b7:cf:ad:34:45:3e:ff:d0:88:8d:bb:bf:fb:
                    97:ea:e0:7b:f4:bd:83:79:1b:be:15:fa:b4:74:69:
                    df:cc:6a:93:4c:9f:af:0a:7a:b7:76:d8:dd:da:bb:
                    12:f1:de:e1:ed:b4:55:b0:da:2a:7c:ed:03:82:cf:
                    d3:f8:af:3d:86:11:13:ca:59:34:d5:02:24:f5:65:
                    a1:f7:e6:3d:f4:d9:a9:9d:1e:dc:bd:78:7d:12:14:
                    fd:d7:91:2c:ca:6b:6c:bb:49:e4:35:e2:5e:9d:c1:
                    28:28:f0:ce:fa:a0:12:82:48:12:c8:49:29:a0:65:
                    ca:22:b0:46:fb:6b:e3:28:d7:e6:ac:d8:81:12:cb:
                    63:9b:d7:9d:6d:42:62:d3:0c:d1:a9:30:b4:4a:88:
                    0a:6d:13:f9:0e:59:17:26:b4:27:da:9f:20:86:53:
                    fc:a2:d9:20:83:08:be:bc:02:18:7b:11:97:e3:de:
                    ef:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A0:74:7E:19:53:B8:A5:9B:AE:9F:30:BC:B2:6D:92:28:AC:94:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/59a8a64f-08aa-3759-bc61-2e2185fe4e49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6/560494a5-3dff-416d-b8a7-cf5cad5f05f6.crl

            X509v3 Authority Key Identifier:
                keyid:56:98:2D:5F:6F:FD:A8:FB:6C:BE:31:3F:18:06:D8:43:1B:C7:A8:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/560494a5-3dff-416d-b8a7-cf5cad5f05f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:76:e1:b2:33:31:b3:3d:cf:89:4a:71:fb:f5:73:16:97:83:
         7d:68:1f:8d:28:60:56:ed:7a:e3:84:12:68:37:a0:73:ea:f5:
         6f:29:c9:ea:87:aa:13:c4:30:f1:bc:39:9f:85:76:4f:0b:2c:
         35:41:de:a8:44:58:1a:e9:a8:9f:b6:9e:de:a9:a0:b8:05:61:
         fb:dd:3e:cd:a7:a1:5e:df:1f:1a:5b:67:24:55:06:a5:26:a0:
         4f:6c:38:65:7a:f7:04:ec:b7:0e:fb:6e:37:e9:1a:fa:2b:8f:
         65:5d:ef:b5:a3:1e:da:03:f0:d3:e9:57:9f:45:aa:f5:fe:ae:
         22:8a:dc:1e:eb:5f:14:2e:39:7e:17:10:7d:a4:a2:b6:80:19:
         37:3f:85:2e:4b:39:9b:24:17:51:ab:ab:e4:ba:bc:83:10:29:
         b7:cb:28:b5:67:94:6d:03:38:9e:96:8c:00:34:e4:b0:49:a5:
         7f:85:24:e6:ac:59:2e:72:27:d4:80:f0:9e:3e:5d:ba:6e:3a:
         96:4e:24:5d:34:61:dc:cc:0b:52:f1:c8:ca:1c:2b:21:8f:00:
         8a:64:47:ae:c4:88:71:83:4f:b9:19:0d:ab:3c:6c:3b:c7:ba:
         7c:8b:39:3b:84:86:0c:b6:79:c8:66:d6:3d:39:46:af:6b:70:
         67:e0:14:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdtgvWJdUGKRwUUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTYwNDk0YTUtM2RmZi00MTZkLWI4YTctY2Y1Y2FkNWYw
NWY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NDVkMThmNzAtM2Y2OS00ZmJiLThhOWUtOTIxM2Y2MzIwZmIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnvDqBjZJIKTn7YddYyBhjFDg1htGztF4syy
MY0zbqc+9kTYghSHiqmm+sIpechNfr6XMjEKUgKZgx8mkOJU4mEUTwg/+NqVokXm
SrfPrTRFPv/QiI27v/uX6uB79L2DeRu+Ffq0dGnfzGqTTJ+vCnq3dtjd2rsS8d7h
7bRVsNoqfO0Dgs/T+K89hhETylk01QIk9WWh9+Y99NmpnR7cvXh9EhT915Esymts
u0nkNeJencEoKPDO+qASgkgSyEkpoGXKIrBG+2vjKNfmrNiBEstjm9edbUJi0wzR
qTC0SogKbRP5DlkXJrQn2p8ghlP8otkggwi+vAIYexGX497vPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLygdH4ZU7ilm66fMLyybZIorJRbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81NjA0
OTRhNS0zZGZmLTQxNmQtYjhhNy1jZjVjYWQ1ZjA1ZjYvNTlhOGE2NGYtMDhhYS0z
NzU5LWJjNjEtMmUyMTg1ZmU0ZTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTYwNDk0YTUtM2RmZi00MTZkLWI4
YTctY2Y1Y2FkNWYwNWY2LzU2MDQ5NGE1LTNkZmYtNDE2ZC1iOGE3LWNmNWNhZDVm
MDVmNi5jcmwwHwYDVR0jBBgwFoAUVpgtX2/9qPtsvjE/GAbYQxvHqLUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81NjA0OTRhNS0zZGZmLTQxNmQtYjhhNy1jZjVj
YWQ1ZjA1ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSnT8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJp24bIzMbM9z4lKcfv1cxaXg31oH40oYFbteuOEEmg3oHPq9W8pyeqH
qhPEMPG8OZ+Fdk8LLDVB3qhEWBrpqJ+2nt6poLgFYfvdPs2noV7fHxpbZyRVBqUm
oE9sOGV69wTstw77bjfpGvorj2Vd77WjHtoD8NPpV59FqvX+riKK3B7rXxQuOX4X
EH2koraAGTc/hS5LOZskF1Grq+S6vIMQKbfLKLVnlG0DOJ6WjAA05LBJpX+FJOas
WS5yJ9SA8J4+XbpuOpZOJF00YdzMC1LxyMocKyGPAIpkR67EiHGDT7kZDas8bDvH
unyLOTuEhgy2echm1j05Rq9rcGfgFOQ=
-----END CERTIFICATE-----
Generated at Sat Sep 26 18:23:35 2026 by rpki-client