Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/19822356-e034-3090-ae51-30b76ce7fbe2.roa
File:                     19822356-e034-3090-ae51-30b76ce7fbe2.roa (raw, json)
Hash identifier:          kwAltMqqVotCo2qJjKk8lXMeiweuja1T95q84vzvOwc=
Subject key identifier:   52:9B:07:99:32:2D:D4:52:E1:A9:1D:FC:39:D2:A6:C9:B0:4F:8B:14
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821DACEEAE2020EE93DB3B00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/19822356-e034-3090-ae51-30b76ce7fbe2.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11427
IP address blocks:        74.87.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:ac:ee:ae:20:20:ee:93:db:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=fa7e60a7-20d9-4989-b44e-483508b8d584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ca:a6:59:18:d8:16:fa:67:b9:78:e5:2a:3d:
                    62:5d:c1:b1:1e:1d:98:cb:55:4d:71:88:93:71:a4:
                    6a:47:bc:17:aa:81:be:1c:50:80:5a:e2:a2:8a:30:
                    80:de:86:7b:f5:c8:da:5c:8d:88:69:5d:44:ac:97:
                    1e:f8:29:6e:44:7d:ce:e1:40:7d:ab:d6:27:49:e5:
                    e4:61:a2:f2:0f:28:a2:e4:ee:54:21:e0:cb:6f:ab:
                    d0:37:0e:4e:81:14:dc:30:50:09:13:98:ad:c3:e3:
                    5c:3f:c3:f1:30:49:5e:16:1e:b3:d8:f4:57:c8:6d:
                    0f:11:ae:db:e0:65:df:8e:19:e1:9d:8d:f9:f6:e9:
                    52:e4:e2:e1:86:89:d5:68:d7:34:7b:0a:a8:47:24:
                    f2:71:77:e0:af:6e:cc:6c:d2:3e:3f:f6:a9:bf:9b:
                    36:08:6c:e3:bd:52:03:58:a8:78:aa:b7:f0:cb:44:
                    d9:d9:e4:fb:e1:ee:b4:b8:2e:9b:3c:23:44:fa:0a:
                    ad:de:65:8f:b7:9a:9d:1b:9b:f5:53:3d:7e:86:bb:
                    ac:1f:1e:82:6c:02:4b:eb:6c:67:ac:4d:8b:95:3b:
                    8f:d4:d3:22:2a:e6:89:3c:25:0a:48:7c:5f:3d:96:
                    eb:d7:56:a9:a5:6c:ec:80:72:cf:f1:29:43:26:3c:
                    3e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9B:07:99:32:2D:D4:52:E1:A9:1D:FC:39:D2:A6:C9:B0:4F:8B:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/19822356-e034-3090-ae51-30b76ce7fbe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.87.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:fb:37:60:72:f1:a2:39:ac:bb:6b:d6:e3:42:68:73:93:64:
         5b:f3:44:ad:1b:15:12:55:7a:e1:27:0d:53:65:05:3d:be:d8:
         9e:27:62:e1:99:de:fd:a5:93:67:70:2f:b6:7b:6f:30:e0:63:
         33:76:ad:5c:3d:3b:5a:1a:f7:29:7f:85:d9:d6:8d:64:bc:79:
         95:ae:91:c6:f9:35:fc:96:ab:f8:49:54:b1:d5:a6:26:4c:50:
         e5:ee:32:61:f5:f9:88:7f:e1:09:3a:55:33:a0:b6:05:08:c2:
         d2:ba:89:24:e7:83:39:4d:48:a3:2a:4a:f8:4a:28:e2:bc:cb:
         16:a4:3c:f9:aa:21:09:a6:72:64:45:df:62:b6:1f:b0:2f:70:
         e0:15:4b:d1:1a:45:04:95:f8:79:0b:42:c1:9a:61:10:6f:6f:
         b0:55:86:4f:87:09:ed:1f:e0:72:4e:2e:69:eb:58:e2:f9:dd:
         9e:17:21:86:81:36:9a:39:95:84:52:26:d1:ac:40:ba:b1:a2:
         a0:ea:12:13:93:a4:4b:a3:c1:04:8f:9c:f8:5a:c7:e5:30:6b:
         10:61:c0:a4:8f:80:38:e7:c8:9e:db:bf:be:e3:90:a3:ec:21:
         7c:d3:dc:d6:1c:ad:b5:0a:6c:b2:d3:64:75:ba:74:7a:18:d4:
         bd:36:72:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHazuriAg7pPbOwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
ZmE3ZTYwYTctMjBkOS00OTg5LWI0NGUtNDgzNTA4YjhkNTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusqmWRjYFvpnuXjlKj1iXcGxHh2Yy1VNcYiT
caRqR7wXqoG+HFCAWuKiijCA3oZ79cjaXI2IaV1ErJce+CluRH3O4UB9q9YnSeXk
YaLyDyii5O5UIeDLb6vQNw5OgRTcMFAJE5itw+NcP8PxMEleFh6z2PRXyG0PEa7b
4GXfjhnhnY359ulS5OLhhonVaNc0ewqoRyTycXfgr27MbNI+P/apv5s2CGzjvVID
WKh4qrfwy0TZ2eT74e60uC6bPCNE+gqt3mWPt5qdG5v1Uz1+hrusHx6CbAJL62xn
rE2LlTuP1NMiKuaJPCUKSHxfPZbr11appWzsgHLP8SlDJjw+YwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFKbB5kyLdRS4akd/DnSpsmwT4sUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMTk4MjIzNTYtZTAzNC0z
MDkwLWFlNTEtMzBiNzZjZTdmYmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSldoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADf7N2By8aI5rLtr1uNCaHOTZFvzRK0bFRJVeuEnDVNlBT2+2J4nYuGZ
3v2lk2dwL7Z7bzDgYzN2rVw9O1oa9yl/hdnWjWS8eZWukcb5NfyWq/hJVLHVpiZM
UOXuMmH1+Yh/4Qk6VTOgtgUIwtK6iSTngzlNSKMqSvhKKOK8yxakPPmqIQmmcmRF
32K2H7AvcOAVS9EaRQSV+HkLQsGaYRBvb7BVhk+HCe0f4HJOLmnrWOL53Z4XIYaB
Npo5lYRSJtGsQLqxoqDqEhOTpEujwQSPnPhax+UwaxBhwKSPgDjnyJ7bv77jkKPs
IXzT3NYcrbUKbLLTZHW6dHoY1L02cns=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:00:41 2025 by rpki-client