Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b65b6491-d543-3cb5-bcc8-0be903ed93fd.roa
File:                     b65b6491-d543-3cb5-bcc8-0be903ed93fd.roa (raw, json)
Hash identifier:          22ZFcg0TfGxScKmp1hSCefMjz3HHzKtNuH2+qINokN0=
Subject key identifier:   B2:3C:6B:5E:02:33:0D:D0:79:F0:66:BC:26:18:49:98:01:A0:8D:14
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B3F1C61EDACDE569766A00C00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b65b6491-d543-3cb5-bcc8-0be903ed93fd.roa
Signing time:             Fri 19 Sep 2025 13:00:41 +0000
ROA not before:           Fri 19 Sep 2025 13:00:41 +0000
ROA not after:            Thu 18 Dec 2025 14:00:41 +0000
asID:                     12271
IP address blocks:        74.68.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:1c:61:ed:ac:de:56:97:66:a0:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep 19 13:00:41 2025 GMT
            Not After : Dec 18 14:00:41 2025 GMT
        Subject: CN=473b9135-7a21-4e19-880f-7dd869a4f8ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:42:41:dc:17:63:86:fd:0a:3c:bb:11:c4:4e:
                    57:89:2a:c8:50:15:d1:d5:51:69:0c:5b:f8:6f:8c:
                    a9:33:5a:ba:60:71:c0:69:fb:1b:f7:4a:f6:b1:b9:
                    a8:9c:b7:f0:8d:b3:59:82:5b:a9:d4:92:2e:67:7a:
                    5c:ac:c0:38:cf:de:cd:ae:5e:a1:b6:97:a5:1a:88:
                    88:00:3a:79:a5:3b:71:0c:6c:24:b3:cf:68:e0:37:
                    c1:60:e4:4b:0c:1f:82:54:5c:82:e6:1f:22:06:f6:
                    56:05:33:a7:09:8a:1b:8a:4a:12:5d:34:04:e3:c6:
                    60:f5:12:b4:a4:6d:be:8e:95:9b:21:ed:78:86:a1:
                    cd:f2:3f:82:ea:97:18:a1:29:d9:24:b0:93:e7:a9:
                    73:1f:fa:57:9c:31:54:7d:cf:fe:fe:f3:0c:59:dd:
                    2b:08:e8:29:cc:31:99:65:72:16:d7:95:33:a3:b2:
                    2e:50:c2:ad:83:27:c7:bb:3a:59:26:a6:ca:12:16:
                    0d:23:fd:70:a6:22:00:8c:04:40:b2:4c:03:83:de:
                    e3:59:6d:b2:3a:e9:c0:20:8a:24:40:f6:ef:54:0d:
                    09:d0:a2:0b:2e:61:f2:c1:e7:a7:a3:52:c9:d5:1c:
                    68:1e:f7:86:95:9a:17:95:72:62:50:42:82:ef:4d:
                    f7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3C:6B:5E:02:33:0D:D0:79:F0:66:BC:26:18:49:98:01:A0:8D:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b65b6491-d543-3cb5-bcc8-0be903ed93fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.68.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:89:3b:09:52:87:b6:1f:bf:e2:fc:66:58:fd:53:b0:b1:d1:
         ea:ab:29:68:28:4c:61:b1:95:20:f5:a7:1a:c6:9e:f0:00:3e:
         6b:2b:5d:8e:59:77:03:32:da:f6:49:cb:f5:f6:c0:65:97:43:
         45:6b:78:45:52:f0:00:6d:6f:bd:cd:db:0f:8f:58:d0:b3:7c:
         d1:c4:b6:7a:93:d6:0a:f4:cf:e6:59:e8:a3:80:4e:d1:8d:83:
         48:1e:dd:a5:67:5f:95:6d:62:ed:21:8e:bd:c7:66:01:44:a3:
         32:50:e0:cb:36:33:53:ed:20:ac:43:ad:2c:ad:c5:69:0f:26:
         fd:23:92:f9:57:d0:72:b5:fe:8c:f2:ca:42:2c:eb:d3:30:10:
         0a:a5:ef:5a:20:b8:32:21:3b:bc:03:10:6a:e6:1d:97:c1:de:
         b3:cd:3d:21:83:b3:52:60:c9:7e:1b:0a:b0:3c:b9:75:4e:d2:
         a2:a3:81:e4:de:1b:17:15:0e:7f:30:14:42:17:e2:6e:80:98:
         77:49:5c:86:7b:e1:d1:2b:18:fc:9c:b9:33:77:e0:b0:7b:c9:
         05:d9:fd:6a:3b:1a:ac:48:73:48:85:a1:b3:b9:d0:b7:2a:b6:
         de:ab:42:02:7e:03:ae:f1:2c:85:38:05:36:0c:d3:ab:13:f4:
         dc:65:73:7b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEs/HGHtrN5Wl2agDAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk
NDczYjkxMzUtN2EyMS00ZTE5LTg4MGYtN2RkODY5YTRmOGVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0JB3Bdjhv0KPLsRxE5XiSrIUBXR1VFpDFv4
b4ypM1q6YHHAafsb90r2sbmonLfwjbNZglup1JIuZ3pcrMA4z97Nrl6htpelGoiI
ADp5pTtxDGwks89o4DfBYORLDB+CVFyC5h8iBvZWBTOnCYobikoSXTQE48Zg9RK0
pG2+jpWbIe14hqHN8j+C6pcYoSnZJLCT56lzH/pXnDFUfc/+/vMMWd0rCOgpzDGZ
ZXIW15Uzo7IuUMKtgyfHuzpZJqbKEhYNI/1wpiIAjARAskwDg97jWW2yOunAIIok
QPbvVA0J0KILLmHyweeno1LJ1RxoHveGlZoXlXJiUEKC7033TwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLI8a14CMw3QefBmvCYYSZgBoI0UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYjY1YjY0OTEtZDU0My0z
Y2I1LWJjYzgtMGJlOTAzZWQ5M2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMASkQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAZok7CVKHth+/4vxmWP1TsLHR6qspaChMYbGVIPWnGsae8AA+aytdjll3
AzLa9knL9fbAZZdDRWt4RVLwAG1vvc3bD49Y0LN80cS2epPWCvTP5lnoo4BO0Y2D
SB7dpWdflW1i7SGOvcdmAUSjMlDgyzYzU+0grEOtLK3FaQ8m/SOS+VfQcrX+jPLK
Qizr0zAQCqXvWiC4MiE7vAMQauYdl8Hes809IYOzUmDJfhsKsDy5dU7SoqOB5N4b
FxUOfzAUQhfiboCYd0lchnvh0SsY/Jy5M3fgsHvJBdn9ajsarEhzSIWhs7nQtyq2
3qtCAn4DrvEshTgFNgzTqxP03GVzew==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:46:09 2025 by rpki-client