Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/617cdccc-2b71-3850-b24d-bc66d7589dc6.roa
File:                     617cdccc-2b71-3850-b24d-bc66d7589dc6.roa (raw, json)
Hash identifier:          WiS69ZYVCNfQft8V1PopOAmFzgsrRROeFsEqBYvxmX4=
Subject key identifier:   99:84:03:13:29:E3:6C:73:71:62:AB:41:FF:A6:3D:86:0F:67:11:DA
Certificate issuer:       /CN=44dfb2c2-6b0e-4f2c-956d-497df0881015
Certificate serial:       010D0C9F4328584AD5066086BF491208FFE5D580
Authority key identifier: AC:A8:C2:A7:76:8D:C6:BC:D8:B5:7F:0C:F0:FA:BA:89:43:A8:D8:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/617cdccc-2b71-3850-b24d-bc66d7589dc6.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     16938
IP address blocks:        74.123.144.0/24 maxlen: 24
                          74.123.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:60:86:bf:49:12:08:ff:e5:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44dfb2c2-6b0e-4f2c-956d-497df0881015
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=ec25db90-b964-4962-9d10-3cb782bd4e64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:94:f1:d0:ce:42:b1:be:47:85:3a:9e:b0:b2:
                    9a:07:d0:51:e1:ff:eb:d0:83:a9:78:8f:96:56:64:
                    9a:3b:14:61:25:8c:a5:43:ae:ad:0f:41:64:bd:17:
                    b6:c2:f8:55:8f:1c:cb:97:80:3d:b2:ea:88:b6:02:
                    c6:c4:00:7c:a5:40:3c:5b:14:31:05:cd:3b:90:d4:
                    aa:12:cf:b4:70:46:68:77:2f:1b:97:c0:3c:19:5d:
                    94:4a:61:21:6e:60:bd:72:8c:f2:48:11:cd:1a:41:
                    01:2c:2a:76:68:98:c5:af:26:c3:7f:da:a9:ae:19:
                    11:f1:eb:6a:c8:ca:95:13:cd:d7:cf:2c:e6:9a:0d:
                    8a:06:39:28:29:89:dc:5f:17:8c:da:07:09:d8:7b:
                    5e:81:6f:8c:97:1f:95:fd:34:6e:9b:9f:08:18:12:
                    b5:bc:64:51:bd:93:0e:79:e2:58:2a:ed:b7:c6:5f:
                    3d:28:52:38:19:7a:e4:b3:d1:ac:fe:cc:dd:88:97:
                    71:39:90:56:f8:31:c0:df:39:7c:88:6e:d7:e8:5c:
                    97:db:93:01:b5:90:42:b8:82:2f:d5:95:9d:05:12:
                    f4:95:dd:9a:e5:e0:05:77:ae:e3:87:0b:36:1a:a8:
                    58:a1:34:ae:94:92:55:54:51:79:04:a3:cb:d4:1b:
                    bf:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:84:03:13:29:E3:6C:73:71:62:AB:41:FF:A6:3D:86:0F:67:11:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/617cdccc-2b71-3850-b24d-bc66d7589dc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.crl

            X509v3 Authority Key Identifier:
                keyid:AC:A8:C2:A7:76:8D:C6:BC:D8:B5:7F:0C:F0:FA:BA:89:43:A8:D8:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.144.0/24
                  74.123.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:5a:c3:6c:2a:50:01:b2:9b:20:c3:93:2e:d2:fd:f0:c8:95:
         a8:9c:51:f6:ff:34:1d:27:ce:d3:91:81:5c:8c:c8:f2:20:81:
         5e:9e:13:d8:4b:e7:a8:28:e4:bb:12:bf:37:1b:16:08:86:56:
         44:17:90:b7:97:92:43:a5:ef:11:6f:fe:98:97:93:81:5b:4f:
         18:9e:bb:57:c7:08:2a:12:37:c5:e0:b6:1c:e1:e6:47:49:47:
         d4:39:6c:a8:e0:1f:47:b2:3d:81:f5:55:c9:33:2c:cb:ef:92:
         a6:da:19:14:93:0e:44:07:3c:ec:ad:a6:1d:cd:4e:09:31:7a:
         0e:25:8e:ec:b5:26:60:ab:37:96:13:b6:e5:90:ff:d6:be:47:
         7c:36:16:5d:29:3f:34:0a:89:16:85:63:47:1c:60:ae:10:de:
         9f:c2:da:ea:d5:d4:bc:7c:ac:8b:35:ea:4c:89:50:34:f1:33:
         a4:25:f2:c7:3a:49:36:9e:1a:98:0c:9e:01:52:e7:d2:12:6f:
         55:85:b4:c3:36:e4:f1:88:2b:47:30:dd:c6:97:e5:df:3b:c2:
         6b:51:54:df:78:43:85:1b:13:5e:07:55:a8:6c:98:53:41:6f:
         93:87:8e:ef:5f:c6:70:28:56:6e:fd:a4:2c:61:68:0f:0d:b1:
         11:60:33:53
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErVBmCGv0kSCP/l1YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDRkZmIyYzItNmIwZS00ZjJjLTk1NmQtNDk3ZGYwODgx
MDE1MB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk
ZWMyNWRiOTAtYjk2NC00OTYyLTlkMTAtM2NiNzgyYmQ0ZTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5Tx0M5Csb5HhTqesLKaB9BR4f/r0IOpeI+W
VmSaOxRhJYylQ66tD0FkvRe2wvhVjxzLl4A9suqItgLGxAB8pUA8WxQxBc07kNSq
Es+0cEZody8bl8A8GV2USmEhbmC9cozySBHNGkEBLCp2aJjFrybDf9qprhkR8etq
yMqVE83Xzyzmmg2KBjkoKYncXxeM2gcJ2HtegW+Mlx+V/TRum58IGBK1vGRRvZMO
eeJYKu23xl89KFI4GXrks9Gs/szdiJdxOZBW+DHA3zl8iG7X6FyX25MBtZBCuIIv
1ZWdBRL0ld2a5eAFd67jhws2GqhYoTSulJJVVFF5BKPL1Bu/oQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFJmEAxMp42xzcWKrQf+mPYYPZxHaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NGRm
YjJjMi02YjBlLTRmMmMtOTU2ZC00OTdkZjA4ODEwMTUvNjE3Y2RjY2MtMmI3MS0z
ODUwLWIyNGQtYmM2NmQ3NTg5ZGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDRkZmIyYzItNmIwZS00ZjJjLTk1
NmQtNDk3ZGYwODgxMDE1LzQ0ZGZiMmMyLTZiMGUtNGYyYy05NTZkLTQ5N2RmMDg4
MTAxNS5jcmwwHwYDVR0jBBgwFoAUrKjCp3aNxrzYtX8M8Pq6iUOo2DUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80NGRmYjJjMi02YjBlLTRmMmMtOTU2ZC00OTdk
ZjA4ODEwMTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQASnuQAwQA
SnuSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGVaw2wqUAGymyDDky7S/fDIlaicUfb/NB0nztORgVyMyPIg
gV6eE9hL56go5LsSvzcbFgiGVkQXkLeXkkOl7xFv/piXk4FbTxieu1fHCCoSN8Xg
thzh5kdJR9Q5bKjgH0eyPYH1VckzLMvvkqbaGRSTDkQHPOytph3NTgkxeg4ljuy1
JmCrN5YTtuWQ/9a+R3w2Fl0pPzQKiRaFY0ccYK4Q3p/C2urV1Lx8rIs16kyJUDTx
M6Ql8sc6STaeGpgMngFS59ISb1WFtMM25PGIK0cw3caX5d87wmtRVN94Q4UbE14H
VahsmFNBb5OHju9fxnAoVm79pCxhaA8NsRFgM1M=
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:50:21 2025 by rpki-client