Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/1c3b8207-c56f-33ea-8f55-b6d378f06a8c.roa
File:                     1c3b8207-c56f-33ea-8f55-b6d378f06a8c.roa (raw, json)
Hash identifier:          yGjfBZryYqiRQEpHtw4ogUy6gZq/PQVcpzcOfb0C01g=
Subject key identifier:   C8:80:B9:16:CB:06:66:F8:F9:A4:B1:B0:39:B1:95:28:A1:B5:E6:F2
Certificate issuer:       /CN=77fda34c-14d4-40e5-b350-895a343d3b87
Certificate serial:       010D0C9F4328584E97B4FF077E5D88B745D6A100
Authority key identifier: 61:31:A5:B8:9A:D0:73:3A:6E:75:AA:9B:A8:0B:95:B2:0C:4B:13:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/1c3b8207-c56f-33ea-8f55-b6d378f06a8c.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     397563
IP address blocks:        74.122.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/77fda34c-14d4-40e5-b350-895a343d3b87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/77fda34c-14d4-40e5-b350-895a343d3b87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b4:ff:07:7e:5d:88:b7:45:d6:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77fda34c-14d4-40e5-b350-895a343d3b87
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=83634448-6c49-41c5-9b2e-17040c37d31c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:78:4b:63:51:ba:8e:48:1f:c2:bd:4f:df:74:
                    3d:74:b8:8a:fd:97:6e:8f:fc:f7:51:c0:c6:2b:10:
                    49:00:d4:01:56:52:e1:ea:a1:7a:38:71:b9:60:a5:
                    8c:75:6c:8d:9a:1e:75:60:86:82:fe:9b:d7:d4:82:
                    d9:e5:36:ae:f7:9a:b7:94:64:0a:62:5a:8f:c6:9a:
                    5e:f5:a2:ec:12:61:a4:7f:ff:57:62:ff:8d:45:ae:
                    2c:aa:48:b5:cd:00:90:2c:1b:40:0a:87:b7:d1:8f:
                    17:7d:cf:33:6e:af:88:4d:98:6a:42:5a:0d:5b:65:
                    23:57:5c:00:5b:ba:43:ff:12:a2:5c:29:ec:f9:80:
                    ae:ca:4b:c6:5f:6d:5c:b1:11:07:3a:6a:5e:f5:44:
                    25:58:53:cc:96:ce:6b:0a:78:07:c8:08:70:d9:e1:
                    23:93:ab:29:0d:59:cb:de:a5:73:7e:cb:fe:39:b7:
                    16:48:10:cd:c8:09:dc:4b:c9:20:3e:b2:fe:26:59:
                    24:a3:ab:0a:4c:06:0b:7f:5b:db:fd:ca:d3:5f:27:
                    e8:49:36:eb:92:8d:63:4a:b0:bb:ad:8a:c5:cd:b3:
                    3c:0c:35:b8:b5:0c:90:43:1e:45:67:be:2e:8e:ee:
                    d8:49:60:b3:be:ac:cc:66:ed:d2:1a:47:fa:64:27:
                    10:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:80:B9:16:CB:06:66:F8:F9:A4:B1:B0:39:B1:95:28:A1:B5:E6:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/1c3b8207-c56f-33ea-8f55-b6d378f06a8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/77fda34c-14d4-40e5-b350-895a343d3b87.crl

            X509v3 Authority Key Identifier:
                keyid:61:31:A5:B8:9A:D0:73:3A:6E:75:AA:9B:A8:0B:95:B2:0C:4B:13:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.122.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:b5:7e:c0:fe:74:09:36:8c:5d:23:19:1b:66:ce:09:1f:80:
         f5:0e:b2:ff:0a:f0:58:b1:62:d2:56:8e:55:df:bc:57:e3:82:
         e6:b6:99:d0:22:01:3a:c6:08:b8:cf:e3:03:f1:0e:ec:21:1e:
         fe:b7:ab:14:e5:49:b1:f3:b9:77:c7:5f:86:39:76:4f:c8:02:
         df:a6:3e:f4:d2:7d:18:0f:cb:12:67:f0:c6:89:6a:9c:49:6c:
         5c:5b:e9:e6:44:4f:fb:d8:c6:6e:62:78:bd:a5:fe:83:e0:3d:
         43:23:0d:c2:51:77:80:46:69:e9:6f:8f:97:cc:c7:ad:73:a2:
         bd:d5:86:41:7a:75:7b:f6:73:a7:8b:f3:db:19:ed:16:07:8d:
         2e:cd:68:b2:fc:ed:f9:f1:68:d9:7c:49:4f:8d:16:69:d3:e2:
         37:7b:a5:68:00:ca:2a:31:57:12:f3:64:ef:3d:be:83:08:26:
         ae:27:97:96:bf:71:09:f1:f2:f0:88:d3:6b:19:fd:d4:ae:ad:
         46:f7:61:bf:02:50:6c:c0:2e:02:da:07:9d:5a:6f:d8:61:da:
         a8:a6:cf:b5:83:d0:cd:3d:77:6b:f7:de:44:17:9a:6b:48:b8:
         28:47:d5:46:81:49:a2:92:9e:c8:e6:80:84:cc:a8:fb:12:ae:
         5c:bc:f3:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtP8Hfl2It0XWoQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzdmZGEzNGMtMTRkNC00MGU1LWIzNTAtODk1YTM0M2Qz
Yjg3MB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk
ODM2MzQ0NDgtNmM0OS00MWM1LTliMmUtMTcwNDBjMzdkMzFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknhLY1G6jkgfwr1P33Q9dLiK/Zduj/z3UcDG
KxBJANQBVlLh6qF6OHG5YKWMdWyNmh51YIaC/pvX1ILZ5Tau95q3lGQKYlqPxppe
9aLsEmGkf/9XYv+NRa4sqki1zQCQLBtACoe30Y8Xfc8zbq+ITZhqQloNW2UjV1wA
W7pD/xKiXCns+YCuykvGX21csREHOmpe9UQlWFPMls5rCngHyAhw2eEjk6spDVnL
3qVzfsv+ObcWSBDNyAncS8kgPrL+Jlkko6sKTAYLf1vb/crTXyfoSTbrko1jSrC7
rYrFzbM8DDW4tQyQQx5FZ74uju7YSWCzvqzMZu3SGkf6ZCcQfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMiAuRbLBmb4+aSxsDmxlSihtebyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83N2Zk
YTM0Yy0xNGQ0LTQwZTUtYjM1MC04OTVhMzQzZDNiODcvMWMzYjgyMDctYzU2Zi0z
M2VhLThmNTUtYjZkMzc4ZjA2YThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzdmZGEzNGMtMTRkNC00MGU1LWIz
NTAtODk1YTM0M2QzYjg3Lzc3ZmRhMzRjLTE0ZDQtNDBlNS1iMzUwLTg5NWEzNDNk
M2I4Ny5jcmwwHwYDVR0jBBgwFoAUYTGluJrQczpudaqbqAuVsgxLE8MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS83N2ZkYTM0Yy0xNGQ0LTQwZTUtYjM1MC04OTVh
MzQzZDNiODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnpkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABG1fsD+dAk2jF0jGRtmzgkfgPUOsv8K8FixYtJWjlXfvFfjgua2mdAi
ATrGCLjP4wPxDuwhHv63qxTlSbHzuXfHX4Y5dk/IAt+mPvTSfRgPyxJn8MaJapxJ
bFxb6eZET/vYxm5ieL2l/oPgPUMjDcJRd4BGaelvj5fMx61zor3VhkF6dXv2c6eL
89sZ7RYHjS7NaLL87fnxaNl8SU+NFmnT4jd7pWgAyioxVxLzZO89voMIJq4nl5a/
cQnx8vCI02sZ/dSurUb3Yb8CUGzALgLaB51ab9hh2qimz7WD0M09d2v33kQXmmtI
uChH1UaBSaKSnsjmgITMqPsSrly88xM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:40:54 2026 by rpki-client