Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/75514b72-83e5-35a6-9825-0eb41d6ecb7e.roa
File:                     75514b72-83e5-35a6-9825-0eb41d6ecb7e.roa (raw, json)
Hash identifier:          wGJzfX2joDhtJV5cEyfNICI6gFMwTzzdGfRa7cNT2ic=
Subject key identifier:   35:FA:A3:A7:78:71:CF:88:F6:2E:1D:51:95:C4:57:35:80:2B:B5:B6
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821DB8BABA03828E498D2600
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/75514b72-83e5-35a6-9825-0eb41d6ecb7e.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20001
IP address blocks:        74.87.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:b8:ba:ba:03:82:8e:49:8d:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=615b054d-93f0-477f-bec3-f4876e5358c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:50:34:80:1f:ad:8e:1a:e1:6c:b3:7a:d4:85:
                    83:70:59:35:1c:f6:77:e1:66:09:73:f5:3c:00:dc:
                    81:a4:04:97:ee:a6:f8:9b:e0:95:b3:5d:c6:20:42:
                    02:44:bc:e9:e2:c3:98:8d:f0:3a:c4:c9:46:9d:7b:
                    7f:19:c1:38:31:ef:54:3e:84:17:d0:45:e8:b3:e4:
                    98:8d:c4:f4:e3:0a:6a:fa:90:a4:8c:8e:65:76:d8:
                    f9:a4:f0:37:d5:05:df:9a:29:8f:60:0b:ea:97:bb:
                    7e:b4:18:69:80:88:ac:64:4e:f4:64:95:57:f3:dc:
                    14:5e:11:14:00:85:05:ca:b9:12:f3:b3:f1:6b:1d:
                    33:7e:50:ce:87:1f:0f:7a:c3:a1:b2:4a:2d:64:72:
                    02:c1:8f:8a:8c:b2:e9:da:9b:71:13:fd:b7:25:70:
                    24:b4:2c:47:91:b4:78:34:2a:8a:ff:f8:c3:8b:8f:
                    62:f9:36:cb:ff:4f:4c:3c:b5:07:ab:c9:72:cd:b1:
                    17:dc:3b:4a:87:ac:95:2f:1a:c8:9f:bf:fc:da:43:
                    ab:56:12:ca:9f:a0:d2:b7:69:0b:e4:ed:5b:3a:73:
                    d5:1a:08:d9:9b:4b:9b:bd:19:ea:e6:d7:2f:9b:77:
                    31:dc:b8:36:a0:89:73:91:41:63:e8:21:34:da:6b:
                    29:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FA:A3:A7:78:71:CF:88:F6:2E:1D:51:95:C4:57:35:80:2B:B5:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/75514b72-83e5-35a6-9825-0eb41d6ecb7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.87.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:04:74:80:c1:4a:4c:96:a7:27:81:e3:52:6b:a5:44:04:c5:
         15:58:46:bf:a4:0b:7b:6b:7c:32:0d:6f:d2:fe:21:62:06:c4:
         f7:d7:92:2e:ae:00:21:b0:68:61:44:a3:7f:f2:eb:76:1f:e7:
         2e:fd:f4:46:83:1c:7a:d9:2a:ef:09:0e:89:12:2d:8c:9c:9f:
         69:84:1b:30:d1:aa:a1:cc:fa:6e:96:ce:75:17:a9:90:25:76:
         73:f5:5a:f1:8f:9b:b4:65:30:ad:33:da:56:43:07:93:b5:f0:
         ad:56:7f:46:0a:26:40:e9:c8:1c:eb:35:06:ed:07:24:2c:5a:
         96:b7:fd:bf:85:95:a7:9a:4a:98:90:79:51:59:af:98:5f:39:
         51:1e:26:29:0f:a7:d4:d3:eb:42:03:05:25:cd:6a:82:74:44:
         c6:aa:8d:47:e8:a3:f7:5e:25:99:46:c2:69:20:37:a0:3f:09:
         a3:cf:13:ae:46:32:ef:7e:8b:83:a7:30:c5:ee:fa:91:90:d7:
         1d:b8:09:29:97:bb:17:99:5f:c7:f4:40:93:0c:f2:3d:27:34:
         cd:dc:41:06:d8:c0:0d:78:fe:d5:a4:bf:e5:08:a2:31:e0:9c:
         c1:30:04:c2:2e:3a:ab:26:1d:f1:f9:5e:af:e8:2d:66:04:4f:
         4d:e5:c8:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHbi6ugOCjkmNJgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
NjE1YjA1NGQtOTNmMC00NzdmLWJlYzMtZjQ4NzZlNTM1OGM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVA0gB+tjhrhbLN61IWDcFk1HPZ34WYJc/U8
ANyBpASX7qb4m+CVs13GIEICRLzp4sOYjfA6xMlGnXt/GcE4Me9UPoQX0EXos+SY
jcT04wpq+pCkjI5ldtj5pPA31QXfmimPYAvql7t+tBhpgIisZE70ZJVX89wUXhEU
AIUFyrkS87Pxax0zflDOhx8PesOhskotZHICwY+KjLLp2ptxE/23JXAktCxHkbR4
NCqK//jDi49i+TbL/09MPLUHq8lyzbEX3DtKh6yVLxrIn7/82kOrVhLKn6DSt2kL
5O1bOnPVGgjZm0ubvRnq5tcvm3cx3Lg2oIlzkUFj6CE02mspqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDX6o6d4cc+I9i4dUZXEVzWAK7W2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNzU1MTRiNzItODNlNS0z
NWE2LTk4MjUtMGViNDFkNmVjYjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlfxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGgEdIDBSkyWpyeB41JrpUQExRVYRr+kC3trfDINb9L+IWIGxPfXki6u
ACGwaGFEo3/y63Yf5y799EaDHHrZKu8JDokSLYycn2mEGzDRqqHM+m6WznUXqZAl
dnP1WvGPm7RlMK0z2lZDB5O18K1Wf0YKJkDpyBzrNQbtByQsWpa3/b+FlaeaSpiQ
eVFZr5hfOVEeJikPp9TT60IDBSXNaoJ0RMaqjUfoo/deJZlGwmkgN6A/CaPPE65G
Mu9+i4OnMMXu+pGQ1x24CSmXuxeZX8f0QJMM8j0nNM3cQQbYwA14/tWkv+UIojHg
nMEwBMIuOqsmHfH5Xq/oLWYET03lyLc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:36:53 2025 by rpki-client