Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a742e57e-7b69-32d5-aa25-66a29c33b04c.roa
File:                     a742e57e-7b69-32d5-aa25-66a29c33b04c.roa (raw, json)
Hash identifier:          F6QolnN9ZRVs7kQZ/T3uJEik8b5BHSq7jZuce1Ulou4=
Subject key identifier:   C4:99:74:6E:E2:9C:14:7B:D7:6A:F1:43:63:37:BB:B3:B4:43:C9:E1
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B821CD7A6CE28387167C12300
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a742e57e-7b69-32d5-aa25-66a29c33b04c.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     33490
IP address blocks:        74.49.229.0/24 maxlen: 24
                          74.49.241.0/24 maxlen: 24
                          74.49.243.0/24 maxlen: 24
                          74.49.245.0/24 maxlen: 24
                          74.49.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:d7:a6:ce:28:38:71:67:c1:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=aa5a1ced-2707-41d4-b58c-f4c64e547499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3e:98:7e:23:87:74:af:80:bf:b7:fb:75:7d:
                    fb:aa:f6:be:8d:85:de:0b:a4:d3:a4:24:f2:f9:a9:
                    7d:8c:cb:51:b1:95:bd:09:a6:b0:6d:07:e4:11:5c:
                    f6:f7:2f:37:6f:0d:e0:f7:a4:fe:da:bc:7e:81:58:
                    a6:b6:59:3a:9b:cb:1b:9b:cc:9b:00:cf:0b:27:28:
                    42:b5:82:2e:8b:c8:cf:4f:de:ab:0b:14:ea:50:51:
                    b5:6f:70:ca:29:2e:12:2c:c3:13:40:ba:33:77:7f:
                    c1:70:d7:c4:fd:07:40:7b:db:ce:b4:5f:5b:15:6a:
                    52:de:03:bb:05:91:b9:33:bd:71:da:e8:a8:e8:c1:
                    1f:df:83:c0:83:53:19:41:a1:c5:76:44:30:31:34:
                    69:6e:69:9a:69:ff:d8:ef:99:35:06:a8:42:5b:53:
                    18:8e:49:6b:6b:b9:be:28:cf:ca:dc:12:d0:23:53:
                    78:f3:eb:9c:04:88:c6:21:24:0b:49:98:2d:3e:6c:
                    64:b8:3f:43:a0:01:f2:b5:b6:1b:85:19:dd:26:f4:
                    3c:24:a9:85:4f:ad:3d:c0:c1:b1:96:75:c5:cd:8b:
                    36:39:0e:98:86:15:37:b7:d4:f0:6c:fb:b3:63:79:
                    e0:2e:71:85:93:46:0f:b7:de:0a:f3:5d:47:80:57:
                    bb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:99:74:6E:E2:9C:14:7B:D7:6A:F1:43:63:37:BB:B3:B4:43:C9:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a742e57e-7b69-32d5-aa25-66a29c33b04c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.49.229.0/24
                  74.49.241.0/24
                  74.49.243.0/24
                  74.49.245.0/24
                  74.49.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:77:b5:e0:3c:4b:d9:91:37:9e:22:d5:81:2c:79:04:e9:80:
         b7:af:52:a6:4d:77:ae:c7:d0:7d:2c:d2:5a:63:13:b2:fa:4f:
         0b:84:d7:e2:dc:b2:88:45:70:f7:bb:ea:36:5c:d3:55:e9:33:
         67:07:7f:38:b8:91:c4:9e:cd:0d:a8:28:1f:58:3b:41:5b:27:
         b2:22:1b:4f:6a:33:2b:c2:23:f5:9f:9b:e0:b5:36:2e:4f:33:
         78:d6:02:c1:9d:7e:dd:f1:65:33:8a:de:c8:62:01:bb:54:8f:
         38:a6:d1:cb:c7:e6:18:51:1c:d8:68:d6:ff:30:e8:18:e9:a1:
         8b:68:a1:47:ad:cb:a8:ea:cd:0d:9c:4d:c5:18:69:a4:86:15:
         86:e5:bb:f5:b7:f8:69:84:e4:86:1c:69:d8:66:40:35:c0:93:
         ce:84:ab:70:8a:7d:29:99:49:e0:da:26:72:86:f4:06:29:9b:
         80:c0:10:3e:ae:b4:0d:04:e5:50:e2:92:6d:82:e4:1d:2f:9e:
         be:7a:75:42:a3:39:42:db:49:f5:02:7b:4b:a1:9f:0e:03:58:
         1f:3d:e8:aa:66:9b:c8:2a:07:f7:40:40:c8:b0:e1:0e:95:a1:
         20:f7:62:31:12:58:0c:63:dc:8f:63:27:21:ef:e8:f2:f3:d1:
         b4:55:be:9f
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEuCHNemzig4cWfBIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
YWE1YTFjZWQtMjcwNy00MWQ0LWI1OGMtZjRjNjRlNTQ3NDk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgT6YfiOHdK+Av7f7dX37qva+jYXeC6TTpCTy
+al9jMtRsZW9CaawbQfkEVz29y83bw3g96T+2rx+gVimtlk6m8sbm8ybAM8LJyhC
tYIui8jPT96rCxTqUFG1b3DKKS4SLMMTQLozd3/BcNfE/QdAe9vOtF9bFWpS3gO7
BZG5M71x2uio6MEf34PAg1MZQaHFdkQwMTRpbmmaaf/Y75k1BqhCW1MYjklra7m+
KM/K3BLQI1N48+ucBIjGISQLSZgtPmxkuD9DoAHytbYbhRndJvQ8JKmFT609wMGx
lnXFzYs2OQ6YhhU3t9TwbPuzY3ngLnGFk0YPt94K811HgFe7dQIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFMSZdG7inBR712rxQ2M3u7O0Q8nhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYTc0MmU1N2UtN2I2OS0z
MmQ1LWFhMjUtNjZhMjljMzNiMDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQASjHlAwQA
SjHxAwQASjHzAwQASjH1AwQASjH3MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAMl3teA8S9mRN54i1YEseQTp
gLevUqZNd67H0H0s0lpjE7L6TwuE1+LcsohFcPe76jZc01XpM2cHfzi4kcSezQ2o
KB9YO0FbJ7IiG09qMyvCI/Wfm+C1Ni5PM3jWAsGdft3xZTOK3shiAbtUjzim0cvH
5hhRHNho1v8w6BjpoYtooUety6jqzQ2cTcUYaaSGFYblu/W3+GmE5IYcadhmQDXA
k86Eq3CKfSmZSeDaJnKG9AYpm4DAED6utA0E5VDikm2C5B0vnr56dUKjOULbSfUC
e0uhnw4DWB896Kpmm8gqB/dAQMiw4Q6VoSD3YjESWAxj3I9jJyHv6PLz0bRVvp8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:28:59 2025 by rpki-client