Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/295450f3-a436-3156-8969-fffa62cde70d.roa
File:                     295450f3-a436-3156-8969-fffa62cde70d.roa (raw, json)
Hash identifier:          q6c+eIfu/snTqyoLe8TChqJLkGiFIHd4SEeZ9SQBd2I=
Subject key identifier:   A4:EC:74:5C:78:69:9C:76:0F:BC:E9:B9:87:7C:19:88:E7:6B:11:DC
Certificate issuer:       /CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
Certificate serial:       010D0C9F4328584AC9DBB103E7C77CD1D06B0180
Authority key identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/295450f3-a436-3156-8969-fffa62cde70d.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     53850
IP address blocks:        74.118.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:b1:03:e7:c7:7c:d1:d0:6b:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=5a1cbae5-19f7-44bf-b882-18ce3c91940c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:85:71:27:2c:05:76:66:ba:a3:fc:b7:cb:66:
                    94:53:64:be:c7:a2:f7:23:78:9f:09:d2:e8:96:f1:
                    64:1f:46:5d:95:c8:3d:f5:c4:57:56:bc:ae:b8:6e:
                    18:8a:de:46:f2:0e:ab:f0:96:fe:72:8e:d8:d5:12:
                    27:46:17:b5:a3:d7:b1:cc:a9:79:a3:d0:72:b8:65:
                    fd:6d:88:03:67:2a:b8:0a:8a:ee:36:2b:9a:79:e4:
                    e1:77:f6:1f:6d:96:a8:e6:1c:75:98:19:75:2a:38:
                    41:13:72:9a:c0:f9:a0:ce:d9:dc:09:3d:4e:f2:b6:
                    e0:14:d3:30:6e:b1:10:10:a7:c1:3b:65:57:5b:08:
                    c1:30:98:a6:5f:5f:5a:3c:37:2a:8d:a5:ae:58:a3:
                    74:21:fe:9f:cd:62:32:76:47:1f:c1:68:23:99:d0:
                    1b:fe:6a:e7:98:f6:38:05:da:d9:f6:86:f9:f3:a4:
                    a4:aa:a5:e0:a8:69:01:6c:1b:c1:9f:91:8f:b1:6d:
                    0b:f1:14:e7:42:b3:ec:55:a5:e3:c4:48:e2:61:48:
                    78:f3:fe:a4:ee:71:25:fe:ff:c3:3a:6a:f0:9d:d6:
                    60:3c:a8:5e:9c:ad:c2:f9:00:2e:11:8e:3f:60:b8:
                    97:5c:5b:93:b4:d1:aa:0e:a6:1a:08:d7:f0:ae:7a:
                    b2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:EC:74:5C:78:69:9C:76:0F:BC:E9:B9:87:7C:19:88:E7:6B:11:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/295450f3-a436-3156-8969-fffa62cde70d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl

            X509v3 Authority Key Identifier:
                keyid:89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:bd:ff:d3:33:99:e7:a8:97:ea:7e:6b:fa:8c:a2:1c:d4:b0:
         5e:6c:c0:bd:73:33:c6:84:87:9d:3a:89:92:30:f4:24:ea:ce:
         41:ef:4b:7b:fe:f2:b0:00:36:a8:63:a1:3a:f1:5a:14:ab:28:
         31:75:8f:bc:54:55:e1:c0:c6:c8:1e:3d:5e:4a:3c:7d:5d:0d:
         ea:94:92:c0:1c:74:9a:23:f9:db:36:47:7e:95:c3:4d:d4:75:
         2e:6e:f1:10:cb:3c:42:94:1f:3f:fc:9d:41:1c:02:df:7c:43:
         c7:0d:60:69:b1:e0:7b:3a:02:dd:cc:8e:70:fd:76:ed:df:f9:
         ce:b2:72:94:83:3c:95:45:19:70:4a:07:b2:f1:42:0b:6f:62:
         a6:7a:28:2b:e1:d8:b8:df:30:cd:3e:11:a5:7d:51:ba:77:17:
         a1:a9:4d:13:e1:cc:2b:1c:b3:20:ca:68:ea:1e:5a:3f:0e:2f:
         ba:af:8c:bd:99:7f:48:da:3d:17:ab:2a:1b:92:ef:83:20:b9:
         9e:11:34:bf:cc:98:b9:be:65:2a:68:65:a5:18:de:90:ca:e6:
         10:df:43:25:a7:97:93:f9:62:5c:58:41:ce:2d:a4:e7:a5:c1:
         75:63:03:3f:37:de:16:a6:83:62:42:e7:e6:27:54:c3:9a:7c:
         e5:e0:5b:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ27ED58d80dBrAYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmIxYmZiOWQtM2NlNS00ZmEwLTg3YTItNzM1M2VlOGNj
MjljMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk
NWExY2JhZTUtMTlmNy00NGJmLWI4ODItMThjZTNjOTE5NDBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYVxJywFdma6o/y3y2aUU2S+x6L3I3ifCdLo
lvFkH0Zdlcg99cRXVryuuG4Yit5G8g6r8Jb+co7Y1RInRhe1o9exzKl5o9ByuGX9
bYgDZyq4CoruNiuaeeThd/YfbZao5hx1mBl1KjhBE3KawPmgztncCT1O8rbgFNMw
brEQEKfBO2VXWwjBMJimX19aPDcqjaWuWKN0If6fzWIydkcfwWgjmdAb/mrnmPY4
BdrZ9ob586SkqqXgqGkBbBvBn5GPsW0L8RTnQrPsVaXjxEjiYUh48/6k7nEl/v/D
OmrwndZgPKhenK3C+QAuEY4/YLiXXFuTtNGqDqYaCNfwrnqy0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKTsdFx4aZx2D7zpuYd8GYjnaxHcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82YjFi
ZmI5ZC0zY2U1LTRmYTAtODdhMi03MzUzZWU4Y2MyOWMvMjk1NDUwZjMtYTQzNi0z
MTU2LTg5NjktZmZmYTYyY2RlNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNmIxYmZiOWQtM2NlNS00ZmEwLTg3
YTItNzM1M2VlOGNjMjljLzZiMWJmYjlkLTNjZTUtNGZhMC04N2EyLTczNTNlZThj
YzI5Yy5jcmwwHwYDVR0jBBgwFoAUiZ7PjIFhGc30CeRkoLh5rVZXgTQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy82YjFiZmI5ZC0zY2U1LTRmYTAtODdhMi03MzUz
ZWU4Y2MyOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnaoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHe9/9Mzmeeol+p+a/qMohzUsF5swL1zM8aEh506iZIw9CTqzkHvS3v+
8rAANqhjoTrxWhSrKDF1j7xUVeHAxsgePV5KPH1dDeqUksAcdJoj+ds2R36Vw03U
dS5u8RDLPEKUHz/8nUEcAt98Q8cNYGmx4Hs6At3MjnD9du3f+c6ycpSDPJVFGXBK
B7LxQgtvYqZ6KCvh2LjfMM0+EaV9Ubp3F6GpTRPhzCscsyDKaOoeWj8OL7qvjL2Z
f0jaPRerKhuS74MguZ4RNL/MmLm+ZSpoZaUY3pDK5hDfQyWnl5P5YlxYQc4tpOel
wXVjAz833hamg2JC5+YnVMOafOXgWxg=
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:59:59 2025 by rpki-client