Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5fc8961c-2dab-3775-844e-f57a2a2e2826.roa
File:                     5fc8961c-2dab-3775-844e-f57a2a2e2826.roa (raw, json)
Hash identifier:          Hk/2uBoswVBQVneeo2j0DEUBZzpNoWQomKkz697f1xI=
Subject key identifier:   B5:A6:E7:F8:83:7A:B2:FE:D9:11:09:D0:66:E5:46:98:60:C3:E2:2F
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B3F1C572DFB0AB6DFA029E680
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5fc8961c-2dab-3775-844e-f57a2a2e2826.roa
Signing time:             Fri 19 Sep 2025 13:00:41 +0000
ROA not before:           Fri 19 Sep 2025 13:00:41 +0000
ROA not after:            Thu 18 Dec 2025 14:00:41 +0000
asID:                     215724
IP address blocks:        74.114.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:1c:57:2d:fb:0a:b6:df:a0:29:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 19 13:00:41 2025 GMT
            Not After : Dec 18 14:00:41 2025 GMT
        Subject: CN=22ca5c69-c3a6-411d-b512-dfeb91920589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:78:9c:00:ab:45:70:ad:48:c3:04:c7:c9:de:
                    51:af:62:f8:9d:9d:4c:46:2f:3e:c3:4c:0b:17:16:
                    7e:55:cc:7b:83:36:1c:2c:87:f3:35:29:d0:17:59:
                    bc:86:d6:f3:1a:c1:7e:17:8f:18:4e:f1:4c:c3:90:
                    48:76:62:ad:fe:3f:ce:6d:71:46:09:3b:31:f3:33:
                    2a:02:e6:4c:e3:c4:34:77:e6:d9:0e:4b:f8:1e:af:
                    6e:ba:85:18:83:fe:2f:7d:ef:d0:a7:ea:6f:3d:36:
                    7f:fd:55:83:75:d4:be:5e:2b:6e:6e:1a:b7:22:77:
                    c0:30:f8:cb:4e:be:e2:65:7d:04:e7:97:b4:2f:2d:
                    42:98:b8:63:52:c0:65:43:d0:06:de:a0:ca:ff:4f:
                    4b:98:61:11:9a:3c:6f:36:fa:81:6e:12:7d:b5:dd:
                    d6:15:fd:d2:47:e4:f3:8b:52:58:6e:74:8b:a2:0b:
                    e1:c0:7c:f9:38:6b:a3:8f:40:22:83:4b:68:06:cb:
                    91:0a:76:08:36:03:3d:d4:ce:d2:5d:82:26:0a:ef:
                    f2:5d:2a:a0:1d:bf:03:b7:25:5e:84:6b:32:df:c1:
                    25:04:25:43:c5:48:93:21:b4:19:27:18:cc:f5:67:
                    46:49:67:60:87:0d:69:74:fc:3e:1a:bc:5f:aa:18:
                    0d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A6:E7:F8:83:7A:B2:FE:D9:11:09:D0:66:E5:46:98:60:C3:E2:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5fc8961c-2dab-3775-844e-f57a2a2e2826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:45:a7:3c:87:59:25:ec:38:08:05:71:d1:76:70:9d:1b:86:
         6f:97:08:47:e2:a2:59:92:2c:01:95:46:92:78:53:d5:a0:51:
         90:1b:e2:29:14:36:b8:a3:9e:6d:9d:dd:fd:42:15:d4:97:91:
         19:88:b5:8c:00:27:ea:03:d7:13:ba:81:90:84:48:5f:c2:f5:
         a5:fa:19:81:bb:58:be:36:f7:d9:b7:8b:71:ff:b8:f6:96:c3:
         5a:58:a2:24:fc:cf:ed:3b:e9:42:4e:f5:a4:e0:69:2a:bb:11:
         ca:a0:2c:e4:a7:4b:7f:e9:c9:1e:f6:5d:f2:6c:fb:0e:f0:28:
         9a:41:09:ba:dd:d4:90:8a:64:f8:80:ff:c7:71:1f:e5:60:62:
         52:e8:55:6e:55:43:83:d5:4a:1c:62:93:fa:09:6b:1e:a8:26:
         c2:da:4a:a3:1c:42:ed:f4:59:6d:ee:b4:ca:70:ab:02:bf:3b:
         c5:84:bc:7e:87:62:ee:1b:4d:f2:09:73:18:e0:15:61:b1:36:
         3e:92:27:d5:c0:f7:62:e4:14:5f:19:dc:0b:b8:57:43:fa:04:
         e0:69:3c:2a:46:a4:42:a2:48:e8:47:a2:c4:58:ea:36:38:bd:
         a8:e1:fd:b8:fc:63:a4:cf:97:77:cb:17:3d:1d:87:46:c9:5f:
         29:1e:f3:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HFct+wq236Ap5oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk
MjJjYTVjNjktYzNhNi00MTFkLWI1MTItZGZlYjkxOTIwNTg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknicAKtFcK1IwwTHyd5Rr2L4nZ1MRi8+w0wL
FxZ+Vcx7gzYcLIfzNSnQF1m8htbzGsF+F48YTvFMw5BIdmKt/j/ObXFGCTsx8zMq
AuZM48Q0d+bZDkv4Hq9uuoUYg/4vfe/Qp+pvPTZ//VWDddS+Xitubhq3InfAMPjL
Tr7iZX0E55e0Ly1CmLhjUsBlQ9AG3qDK/09LmGERmjxvNvqBbhJ9td3WFf3SR+Tz
i1JYbnSLogvhwHz5OGujj0Aig0toBsuRCnYINgM91M7SXYImCu/yXSqgHb8DtyVe
hGsy38ElBCVDxUiTIbQZJxjM9WdGSWdghw1pdPw+GrxfqhgN8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLWm5/iDerL+2REJ0GblRphgw+IvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNWZjODk2MWMtMmRhYi0z
Nzc1LTg0NGUtZjU3YTJhMmUyODI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnJ3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAxFpzyHWSXsOAgFcdF2cJ0bhm+XCEfiolmSLAGVRpJ4U9WgUZAb4ikU
Nrijnm2d3f1CFdSXkRmItYwAJ+oD1xO6gZCESF/C9aX6GYG7WL4299m3i3H/uPaW
w1pYoiT8z+076UJO9aTgaSq7EcqgLOSnS3/pyR72XfJs+w7wKJpBCbrd1JCKZPiA
/8dxH+VgYlLoVW5VQ4PVShxik/oJax6oJsLaSqMcQu30WW3utMpwqwK/O8WEvH6H
Yu4bTfIJcxjgFWGxNj6SJ9XA92LkFF8Z3Au4V0P6BOBpPCpGpEKiSOhHosRY6jY4
vajh/bj8Y6TPl3fLFz0dh0bJXyke85E=
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:46:36 2025 by rpki-client