Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/81da55c0-e4d8-4f54-a846-3081b08d8dad/36e34fea-616d-354d-bc52-5659d61d4f87.roa
File:                     36e34fea-616d-354d-bc52-5659d61d4f87.roa (raw, json)
Hash identifier:          XrRcjSoppvxpgGxm36GDnqNXOvSnnYMNlXgrVebLOpE=
Subject key identifier:   75:E5:99:B8:06:EE:B5:B6:66:D3:60:97:D0:E4:20:76:EC:E7:C9:27
Certificate issuer:       /CN=81da55c0-e4d8-4f54-a846-3081b08d8dad
Certificate serial:       010D0C9F4328584AE1968BFA571FACB4DA72B000
Authority key identifier: B2:B1:82:D8:F2:82:F4:BC:08:82:9E:FB:AA:F4:76:A3:7F:FF:D1:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/81da55c0-e4d8-4f54-a846-3081b08d8dad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/81da55c0-e4d8-4f54-a846-3081b08d8dad/36e34fea-616d-354d-bc52-5659d61d4f87.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     54714
IP address blocks:        74.122.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/81da55c0-e4d8-4f54-a846-3081b08d8dad/81da55c0-e4d8-4f54-a846-3081b08d8dad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/81da55c0-e4d8-4f54-a846-3081b08d8dad/81da55c0-e4d8-4f54-a846-3081b08d8dad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/81da55c0-e4d8-4f54-a846-3081b08d8dad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:8b:fa:57:1f:ac:b4:da:72:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81da55c0-e4d8-4f54-a846-3081b08d8dad
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=dc0ffe33-dfc2-465b-8b9e-32360a6e291a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:21:f5:58:ce:23:2f:3d:0c:9d:c8:75:34:5f:
                    87:b5:b0:bc:e3:d2:56:c0:5a:15:4b:d2:02:24:21:
                    94:a1:9b:d9:89:00:1c:b3:d2:c8:87:52:89:4b:e3:
                    63:2f:36:be:cf:c5:99:3b:d3:3d:a1:86:d5:1f:b6:
                    30:3b:95:95:14:77:4d:3b:76:8e:3a:25:ef:7d:13:
                    58:7e:88:cb:a3:5a:53:25:62:ec:a0:dd:93:4e:b6:
                    de:1e:8a:67:de:24:ce:56:bc:af:fa:70:00:95:36:
                    4e:e5:1f:e1:40:60:33:73:0b:6d:80:27:f6:71:8e:
                    54:12:5f:72:7d:d6:bd:81:ae:0a:09:44:c6:02:d8:
                    fb:95:29:81:cc:38:2b:df:35:0c:27:ff:67:00:07:
                    05:95:fb:fe:8e:58:6a:70:3e:8b:99:4b:13:a3:00:
                    d7:af:17:f9:2b:37:d3:ba:b6:c0:51:37:d9:75:d9:
                    bc:2b:81:ad:ef:4d:c2:47:fe:04:cf:42:27:e2:aa:
                    d3:b2:a5:be:fb:95:16:aa:ad:4a:28:0f:90:e7:1e:
                    fe:e8:c1:f6:24:92:b9:44:f1:e2:d0:94:56:98:a0:
                    4a:0b:dd:60:1e:a1:a4:00:89:f7:a2:a9:e9:99:9c:
                    2b:f8:96:a3:4c:e3:6a:36:6a:88:db:9b:4e:ca:61:
                    c7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E5:99:B8:06:EE:B5:B6:66:D3:60:97:D0:E4:20:76:EC:E7:C9:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/81da55c0-e4d8-4f54-a846-3081b08d8dad/36e34fea-616d-354d-bc52-5659d61d4f87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/81da55c0-e4d8-4f54-a846-3081b08d8dad/81da55c0-e4d8-4f54-a846-3081b08d8dad.crl

            X509v3 Authority Key Identifier:
                keyid:B2:B1:82:D8:F2:82:F4:BC:08:82:9E:FB:AA:F4:76:A3:7F:FF:D1:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/81da55c0-e4d8-4f54-a846-3081b08d8dad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.122.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:77:2b:eb:9b:cf:a6:46:6a:bf:68:d4:b5:8c:9a:8c:26:72:
         7e:9e:e3:5f:e5:bf:87:3f:15:59:49:67:0c:91:60:13:84:ff:
         40:40:48:c8:b3:74:e9:1c:0d:cd:9e:0d:03:a6:64:04:22:61:
         68:81:71:60:54:0e:5f:70:22:8f:f0:35:07:c9:0c:ed:05:e1:
         88:3b:bd:01:da:c4:f2:3e:3f:25:e5:63:61:40:38:83:5a:b6:
         3c:77:ef:89:0b:68:0d:06:3e:d8:d8:5d:0e:7f:b3:97:d8:65:
         9c:22:7a:8c:e0:bd:44:25:23:bf:fe:bd:ab:36:fc:90:b7:98:
         ce:7f:79:23:73:24:c2:4e:a1:89:4a:13:e8:c5:37:21:73:e7:
         71:02:3e:0b:de:b4:31:0d:d0:5c:69:41:5f:b1:3d:e6:d7:bf:
         89:86:be:43:08:67:0d:50:8c:e8:5c:e0:24:72:03:d6:07:23:
         a0:42:ca:13:9d:75:a9:51:b4:af:e4:a8:a1:99:62:f4:46:85:
         c6:5e:9d:c1:f2:c9:f3:44:48:68:c7:34:a6:ea:cb:50:76:4d:
         fd:22:97:8f:9e:b4:9e:8c:20:40:6e:fe:63:94:6c:5b:69:65:
         d2:3c:86:7f:21:4c:5c:54:b9:33:50:4c:52:f1:f6:48:30:77:
         88:b6:ef:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlov6Vx+stNpysAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODFkYTU1YzAtZTRkOC00ZjU0LWE4NDYtMzA4MWIwOGQ4
ZGFkMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
ZGMwZmZlMzMtZGZjMi00NjViLThiOWUtMzIzNjBhNmUyOTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9yH1WM4jLz0Mnch1NF+HtbC849JWwFoVS9IC
JCGUoZvZiQAcs9LIh1KJS+NjLza+z8WZO9M9oYbVH7YwO5WVFHdNO3aOOiXvfRNY
fojLo1pTJWLsoN2TTrbeHopn3iTOVryv+nAAlTZO5R/hQGAzcwttgCf2cY5UEl9y
fda9ga4KCUTGAtj7lSmBzDgr3zUMJ/9nAAcFlfv+jlhqcD6LmUsTowDXrxf5KzfT
urbAUTfZddm8K4Gt703CR/4Ez0In4qrTsqW++5UWqq1KKA+Q5x7+6MH2JJK5RPHi
0JRWmKBKC91gHqGkAIn3oqnpmZwr+JajTONqNmqI25tOymHHXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHXlmbgG7rW2ZtNgl9DkIHbs58knMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MWRh
NTVjMC1lNGQ4LTRmNTQtYTg0Ni0zMDgxYjA4ZDhkYWQvMzZlMzRmZWEtNjE2ZC0z
NTRkLWJjNTItNTY1OWQ2MWQ0Zjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODFkYTU1YzAtZTRkOC00ZjU0LWE4
NDYtMzA4MWIwOGQ4ZGFkLzgxZGE1NWMwLWU0ZDgtNGY1NC1hODQ2LTMwODFiMDhk
OGRhZC5jcmwwHwYDVR0jBBgwFoAUsrGC2PKC9LwIgp77qvR2o3//0WQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MWRhNTVjMC1lNGQ4LTRmNTQtYTg0Ni0zMDgx
YjA4ZDhkYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnrwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGt3K+ubz6ZGar9o1LWMmowmcn6e41/lv4c/FVlJZwyRYBOE/0BASMiz
dOkcDc2eDQOmZAQiYWiBcWBUDl9wIo/wNQfJDO0F4Yg7vQHaxPI+PyXlY2FAOINa
tjx374kLaA0GPtjYXQ5/s5fYZZwieozgvUQlI7/+vas2/JC3mM5/eSNzJMJOoYlK
E+jFNyFz53ECPgvetDEN0FxpQV+xPebXv4mGvkMIZw1QjOhc4CRyA9YHI6BCyhOd
dalRtK/kqKGZYvRGhcZencHyyfNESGjHNKbqy1B2Tf0il4+etJ6MIEBu/mOUbFtp
ZdI8hn8hTFxUuTNQTFLx9kgwd4i27z8=
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:51:37 2025 by rpki-client