Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/53c3dbdd-0c59-3fd9-a126-eed617f551ba.roa
File:                     53c3dbdd-0c59-3fd9-a126-eed617f551ba.roa (raw, json)
Hash identifier:          ZqcnV87MD4PjR6c5ngW4i3M7SK0CM1yF7fIYkOSFdq8=
Subject key identifier:   03:59:52:4C:F2:B7:74:45:84:19:D7:1F:B9:9E:C8:F6:E5:83:B6:53
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CA709BFE536A0BE329B000
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/53c3dbdd-0c59-3fd9-a126-eed617f551ba.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     10796
IP address blocks:        74.87.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:70:9b:fe:53:6a:0b:e3:29:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=86f09aa3-8f7a-4512-8821-2a62d8758a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7a:5d:3f:88:5c:df:99:7a:b8:e0:f5:f2:1c:
                    f1:7b:74:74:79:fd:5a:ff:cc:f5:17:b4:9f:fc:61:
                    bb:61:54:03:e9:29:b7:6f:38:44:2a:e0:ef:65:74:
                    92:4a:a4:c4:d6:c8:0a:11:01:75:0b:df:10:8b:97:
                    d6:5f:d2:d3:2b:8e:8a:23:93:4c:91:ea:f4:76:76:
                    9f:4f:87:38:b3:db:38:bb:17:52:ae:a5:3d:86:ea:
                    ff:c1:6e:a5:c9:51:2f:51:4c:b9:0c:af:eb:09:33:
                    c2:bb:f9:ea:0b:f3:bf:db:a4:f1:eb:73:57:ef:61:
                    c7:8c:6f:40:ee:ff:92:67:6f:d7:74:a0:55:2e:c3:
                    05:6d:53:3d:e0:9e:a0:68:e4:ab:73:3b:50:01:2f:
                    e6:ac:84:c1:48:93:4f:7b:a6:c0:e5:38:c8:31:b8:
                    23:08:af:13:07:25:01:0d:7e:6c:32:6c:b9:0d:7f:
                    dc:13:d7:08:20:70:ac:ec:97:3a:13:df:ef:d2:6d:
                    20:6b:7b:3f:0c:b2:48:24:85:df:e0:71:75:8e:ee:
                    cc:96:ba:51:77:14:cc:c1:d4:9b:be:47:0c:f0:99:
                    56:83:42:9c:f8:3d:02:7b:36:6a:9b:d6:14:12:23:
                    05:a1:51:30:b0:cf:c0:df:51:24:f6:eb:7c:73:b5:
                    7b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:59:52:4C:F2:B7:74:45:84:19:D7:1F:B9:9E:C8:F6:E5:83:B6:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/53c3dbdd-0c59-3fd9-a126-eed617f551ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.87.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:e7:72:0b:c7:3c:db:7e:48:2d:4c:1f:6f:d1:81:9e:56:b7:
         5f:a3:e3:39:75:38:b1:ca:d5:76:9e:4c:82:3d:e5:13:6d:49:
         07:da:82:52:a6:2b:5b:fd:35:05:2a:d2:dc:ea:ab:ed:ea:ba:
         3e:80:83:cb:4e:5e:80:99:f1:0d:a1:ed:3f:78:7b:e3:5a:ef:
         3c:46:59:44:86:ab:08:f4:32:fe:8e:5e:d1:d3:f0:27:94:de:
         f2:b6:6f:ea:98:65:11:a3:96:f3:1e:f7:4e:b4:4a:10:93:98:
         66:85:7c:e0:5f:56:f6:27:67:22:5c:21:4f:3f:97:50:71:c5:
         df:9a:05:b8:5c:5a:6b:5e:c1:2e:e1:8e:00:78:91:c6:e9:5d:
         98:0c:4a:34:25:aa:1b:d2:9d:02:0a:10:fc:68:2a:51:9f:ae:
         3d:1b:35:97:74:2c:fd:39:f6:a4:66:ba:98:66:ff:44:df:0b:
         11:49:8b:b2:50:c7:18:85:c1:16:7e:ee:0f:8d:17:39:87:28:
         dc:08:ae:43:04:3b:eb:c1:47:8f:aa:b4:6e:a6:0e:85:8d:81:
         b7:73:c0:35:da:b6:a1:9d:64:e3:82:ee:30:30:03:c5:2b:b3:
         36:8a:ac:bd:06:c9:da:58:f4:5a:49:f3:eb:47:6c:36:3a:72:
         1f:0e:4a:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AynCb/lNqC+MpsAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
ODZmMDlhYTMtOGY3YS00NTEyLTg4MjEtMmE2MmQ4NzU4YTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXpdP4hc35l6uOD18hzxe3R0ef1a/8z1F7Sf
/GG7YVQD6Sm3bzhEKuDvZXSSSqTE1sgKEQF1C98Qi5fWX9LTK46KI5NMker0dnaf
T4c4s9s4uxdSrqU9hur/wW6lyVEvUUy5DK/rCTPCu/nqC/O/26Tx63NX72HHjG9A
7v+SZ2/XdKBVLsMFbVM94J6gaOSrcztQAS/mrITBSJNPe6bA5TjIMbgjCK8TByUB
DX5sMmy5DX/cE9cIIHCs7Jc6E9/v0m0ga3s/DLJIJIXf4HF1ju7MlrpRdxTMwdSb
vkcM8JlWg0Kc+D0CezZqm9YUEiMFoVEwsM/A31Ek9ut8c7V77wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFANZUkzyt3RFhBnXH7meyPblg7ZTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNTNjM2RiZGQtMGM1OS0z
ZmQ5LWExMjYtZWVkNjE3ZjU1MWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSlf4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADLncgvHPNt+SC1MH2/RgZ5Wt1+j4zl1OLHK1XaeTII95RNtSQfaglKm
K1v9NQUq0tzqq+3quj6Ag8tOXoCZ8Q2h7T94e+Na7zxGWUSGqwj0Mv6OXtHT8CeU
3vK2b+qYZRGjlvMe9060ShCTmGaFfOBfVvYnZyJcIU8/l1Bxxd+aBbhcWmtewS7h
jgB4kcbpXZgMSjQlqhvSnQIKEPxoKlGfrj0bNZd0LP059qRmuphm/0TfCxFJi7JQ
xxiFwRZ+7g+NFzmHKNwIrkMEO+vBR4+qtG6mDoWNgbdzwDXatqGdZOOC7jAwA8Ur
szaKrL0GydpY9FpJ8+tHbDY6ch8OSrs=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:49:19 2026 by rpki-client