Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/0256e4dd-8481-3bb0-9a9c-255ae4ab3148.roa
File:                     0256e4dd-8481-3bb0-9a9c-255ae4ab3148.roa (raw, json)
Hash identifier:          84L0+NG2yMNmsfCQx88X45vDaXpXCARPqRvrytaauJo=
Subject key identifier:   0A:43:5E:7A:05:78:46:17:8C:A8:B4:4F:F0:39:12:6C:EB:47:0D:9D
Certificate issuer:       /CN=77fda34c-14d4-40e5-b350-895a343d3b87
Certificate serial:       010D0C9F4328584B1806C078EA962F4078C7C180
Authority key identifier: 61:31:A5:B8:9A:D0:73:3A:6E:75:AA:9B:A8:0B:95:B2:0C:4B:13:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/0256e4dd-8481-3bb0-9a9c-255ae4ab3148.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     60707
IP address blocks:        74.122.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/77fda34c-14d4-40e5-b350-895a343d3b87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/77fda34c-14d4-40e5-b350-895a343d3b87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:c0:78:ea:96:2f:40:78:c7:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77fda34c-14d4-40e5-b350-895a343d3b87
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=5c34d531-4882-47ac-8b03-a1631ab6ef88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:10:f5:9d:7e:55:dc:c7:1b:5d:08:4e:6b:1f:
                    a8:93:9a:a7:dc:10:e2:f1:00:c7:9d:02:33:03:79:
                    fd:9c:a9:05:c5:d1:59:09:25:ba:4f:a5:ce:48:c1:
                    52:67:75:ab:0a:a1:0d:f7:67:7f:38:5c:b7:aa:e4:
                    cc:09:c5:04:16:c4:d6:4f:f6:90:46:04:b1:5f:a1:
                    d0:55:3d:07:e6:8c:57:85:2c:52:ee:27:13:2e:53:
                    a3:0d:59:3f:09:b9:78:b8:b2:81:40:8f:13:48:d0:
                    3d:73:21:69:65:4b:87:0c:c3:fd:0e:d0:91:df:4d:
                    d4:de:33:42:cc:c3:39:6a:ff:b7:34:ff:1d:32:b1:
                    d8:6c:71:1d:b2:9e:57:c6:ba:42:a2:13:e7:8d:aa:
                    4d:e1:c0:bd:c7:48:ed:c9:b5:c9:0f:cb:36:16:f5:
                    62:0c:16:f0:45:22:7d:dd:92:f2:a1:74:c5:fe:b6:
                    95:15:dd:a6:62:30:65:8c:df:6c:24:48:fa:43:f8:
                    bd:ee:28:ba:2b:20:d8:3c:03:d2:21:4e:1d:5a:42:
                    73:34:d4:5f:f5:7f:75:35:54:0a:da:6a:6d:de:bb:
                    c5:18:c8:31:16:4b:9c:6a:c3:53:b0:46:f7:b3:fd:
                    31:54:c6:56:4e:81:eb:bd:73:03:b5:86:43:de:0a:
                    fd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:43:5E:7A:05:78:46:17:8C:A8:B4:4F:F0:39:12:6C:EB:47:0D:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/0256e4dd-8481-3bb0-9a9c-255ae4ab3148.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/77fda34c-14d4-40e5-b350-895a343d3b87.crl

            X509v3 Authority Key Identifier:
                keyid:61:31:A5:B8:9A:D0:73:3A:6E:75:AA:9B:A8:0B:95:B2:0C:4B:13:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.122.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:09:76:97:06:a6:fb:6c:49:25:6e:56:09:80:72:9b:5b:00:
         13:13:d2:82:4d:14:08:b1:55:b4:49:fb:e9:0d:97:c0:d8:33:
         d5:39:9f:55:71:11:7e:99:21:8d:5b:8d:85:c9:8d:0d:7c:7f:
         bf:73:a5:ca:95:4d:62:35:dc:82:ee:27:0a:05:b1:b9:b5:85:
         70:8b:58:67:ed:81:2a:fe:6e:82:c9:e5:73:f0:ee:fa:dd:b0:
         88:53:d9:52:2e:fa:8a:e6:40:1e:40:31:e7:b4:fe:7d:41:cb:
         92:31:6a:fe:c4:6f:e6:e0:fd:d7:b7:24:76:6d:ac:ae:4f:5c:
         11:d4:61:aa:a9:bd:c9:79:c0:56:98:90:22:39:71:1a:ce:b5:
         a0:e9:7c:1b:3a:e6:37:ad:99:5c:92:2f:a4:13:c1:2b:a1:fb:
         eb:32:fc:ae:56:6c:9e:3b:62:3b:e5:0c:da:be:a5:86:7a:d2:
         cc:11:6d:91:8b:e4:1b:1d:31:ab:34:97:e7:7b:05:7c:35:42:
         67:d5:ee:75:2b:ef:68:95:b5:36:11:0d:fc:31:99:47:39:1f:
         73:1e:c5:3a:36:d4:f3:58:b7:51:a1:f4:7c:96:17:d6:eb:98:
         17:f8:0e:f8:3b:67:1d:f3:5b:c6:20:26:bf:69:e0:5e:9b:34:
         7a:9a:6e:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBsB46pYvQHjHwYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzdmZGEzNGMtMTRkNC00MGU1LWIzNTAtODk1YTM0M2Qz
Yjg3MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
NWMzNGQ1MzEtNDg4Mi00N2FjLThiMDMtYTE2MzFhYjZlZjg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xD1nX5V3McbXQhOax+ok5qn3BDi8QDHnQIz
A3n9nKkFxdFZCSW6T6XOSMFSZ3WrCqEN92d/OFy3quTMCcUEFsTWT/aQRgSxX6HQ
VT0H5oxXhSxS7icTLlOjDVk/Cbl4uLKBQI8TSNA9cyFpZUuHDMP9DtCR303U3jNC
zMM5av+3NP8dMrHYbHEdsp5XxrpCohPnjapN4cC9x0jtybXJD8s2FvViDBbwRSJ9
3ZLyoXTF/raVFd2mYjBljN9sJEj6Q/i97ii6KyDYPAPSIU4dWkJzNNRf9X91NVQK
2mpt3rvFGMgxFkucasNTsEb3s/0xVMZWToHrvXMDtYZD3gr9ewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFApDXnoFeEYXjKi0T/A5EmzrRw2dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83N2Zk
YTM0Yy0xNGQ0LTQwZTUtYjM1MC04OTVhMzQzZDNiODcvMDI1NmU0ZGQtODQ4MS0z
YmIwLTlhOWMtMjU1YWU0YWIzMTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzdmZGEzNGMtMTRkNC00MGU1LWIz
NTAtODk1YTM0M2QzYjg3Lzc3ZmRhMzRjLTE0ZDQtNDBlNS1iMzUwLTg5NWEzNDNk
M2I4Ny5jcmwwHwYDVR0jBBgwFoAUYTGluJrQczpudaqbqAuVsgxLE8MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS83N2ZkYTM0Yy0xNGQ0LTQwZTUtYjM1MC04OTVh
MzQzZDNiODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnplMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGIJdpcGpvtsSSVuVgmAcptbABMT0oJNFAixVbRJ++kNl8DYM9U5n1Vx
EX6ZIY1bjYXJjQ18f79zpcqVTWI13ILuJwoFsbm1hXCLWGftgSr+boLJ5XPw7vrd
sIhT2VIu+ormQB5AMee0/n1By5Ixav7Eb+bg/de3JHZtrK5PXBHUYaqpvcl5wFaY
kCI5cRrOtaDpfBs65jetmVySL6QTwSuh++sy/K5WbJ47YjvlDNq+pYZ60swRbZGL
5BsdMas0l+d7BXw1QmfV7nUr72iVtTYRDfwxmUc5H3MexTo21PNYt1Gh9HyWF9br
mBf4Dvg7Zx3zW8YgJr9p4F6bNHqabnU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:36:26 2025 by rpki-client