Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/6b6a20f0-3836-3d36-8af4-840a97c4fb8b.roa
File:                     6b6a20f0-3836-3d36-8af4-840a97c4fb8b.roa (raw, json)
Hash identifier:          1I/rePcgMbdiMDIYuJzQrtHYDy/ZRYEjYPLrGrLfE1k=
Subject key identifier:   A6:05:EE:80:33:ED:08:3F:2D:7E:53:99:96:5D:8F:23:E7:99:AE:70
Certificate issuer:       /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial:       010D0C9F4328584B4081AA4253FECC91158E07C0
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/6b6a20f0-3836-3d36-8af4-840a97c4fb8b.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     63240
IP address blocks:        74.119.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:aa:42:53:fe:cc:91:15:8e:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=394d4d04-b7f0-4266-a81f-39739cbb2907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cd:13:68:be:64:c9:1f:63:57:c8:79:8a:3e:
                    32:b0:a9:62:f8:90:af:96:14:96:4d:e6:43:aa:93:
                    e5:a2:f5:03:c0:a9:2e:ed:2b:9f:35:51:cd:95:40:
                    ff:0a:bd:1c:a9:0b:69:f3:d4:83:24:20:65:2c:44:
                    ad:59:10:19:06:54:20:ae:1c:28:08:77:47:87:45:
                    68:06:57:d9:30:dc:93:ba:c9:62:05:da:59:61:a3:
                    ce:e1:f5:36:c3:34:ef:d5:b6:8e:b0:1b:92:2a:4b:
                    d0:af:74:c4:6f:65:15:0b:5f:1e:e3:f0:3b:01:6e:
                    98:4d:51:d6:82:d0:86:57:3a:4b:34:21:79:6e:15:
                    9d:0d:c3:e0:9d:22:63:9a:c2:e6:c8:fb:8e:96:5c:
                    15:c2:46:54:4a:0d:2f:20:d2:78:76:89:42:cc:d0:
                    c4:04:83:29:cd:77:ac:e4:65:c4:09:c3:db:26:19:
                    c9:73:b8:32:f9:25:e2:7c:ce:31:ea:fe:0a:71:ea:
                    33:f1:d2:8d:7b:72:06:f1:6a:d0:55:40:2a:78:81:
                    d1:0e:be:c1:51:6c:e3:db:1a:04:d2:43:e0:24:19:
                    37:a0:e8:fd:e1:33:28:11:e6:4e:66:60:10:8e:3c:
                    73:c0:66:b3:68:b5:79:b6:07:70:1d:4b:8c:71:06:
                    14:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:05:EE:80:33:ED:08:3F:2D:7E:53:99:96:5D:8F:23:E7:99:AE:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/6b6a20f0-3836-3d36-8af4-840a97c4fb8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl

            X509v3 Authority Key Identifier:
                keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:37:42:43:3f:53:37:cf:5f:38:0c:cd:26:08:8b:6c:dc:40:
         cc:71:75:d1:2a:29:a8:04:da:6e:41:02:29:bc:e3:04:22:ab:
         06:91:41:90:2c:b8:cb:7c:0e:ab:58:c1:09:7b:14:e0:5c:98:
         22:c3:d0:d4:71:62:f6:17:39:a7:e6:fd:45:ba:fa:7d:98:54:
         59:7e:46:25:74:ac:d8:9f:57:09:ba:ab:d1:a1:af:d2:07:c8:
         90:4b:f7:4e:33:c5:30:86:f0:24:77:2e:1f:c2:a7:58:f4:c6:
         1b:87:e2:59:34:9e:09:79:44:49:98:f8:7b:fb:05:46:93:04:
         72:25:09:b6:9e:47:6e:fb:b7:8b:b1:2c:5f:07:5b:fa:e1:cd:
         2f:85:91:56:22:cd:85:44:fe:b2:fa:a4:0d:3f:a2:ce:b9:45:
         93:e4:3a:f9:15:32:de:50:0f:d1:25:d6:25:36:88:6a:0e:68:
         b1:cc:66:55:a0:65:26:57:fa:77:61:ef:cf:d6:48:99:71:1b:
         8a:15:03:25:7b:ec:3e:55:c3:04:15:bd:f0:57:c1:77:f9:4e:
         28:2b:66:03:09:1f:4d:af:ee:85:88:49:8f:89:86:41:5f:44:
         1d:c4:87:9f:fa:aa:21:db:98:be:e0:e9:74:92:93:2c:3d:4e:
         cb:60:eb:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgapCU/7MkRWOB8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg4Y2JiMGItOWUxOS00ZWYwLTljMWMtMDYyZGYwNzI5
ZDVhMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk
Mzk0ZDRkMDQtYjdmMC00MjY2LWE4MWYtMzk3MzljYmIyOTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr80TaL5kyR9jV8h5ij4ysKli+JCvlhSWTeZD
qpPlovUDwKku7SufNVHNlUD/Cr0cqQtp89SDJCBlLEStWRAZBlQgrhwoCHdHh0Vo
BlfZMNyTusliBdpZYaPO4fU2wzTv1baOsBuSKkvQr3TEb2UVC18e4/A7AW6YTVHW
gtCGVzpLNCF5bhWdDcPgnSJjmsLmyPuOllwVwkZUSg0vINJ4dolCzNDEBIMpzXes
5GXECcPbJhnJc7gy+SXifM4x6v4Kceoz8dKNe3IG8WrQVUAqeIHRDr7BUWzj2xoE
0kPgJBk3oOj94TMoEeZOZmAQjjxzwGazaLV5tgdwHUuMcQYUjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKYF7oAz7Qg/LX5TmZZdjyPnma5wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODhj
YmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJkZjA3MjlkNWEvNmI2YTIwZjAtMzgzNi0z
ZDM2LThhZjQtODQwYTk3YzRmYjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg4Y2JiMGItOWUxOS00ZWYwLTlj
MWMtMDYyZGYwNzI5ZDVhL2Y4OGNiYjBiLTllMTktNGVmMC05YzFjLTA2MmRmMDcy
OWQ1YS5jcmwwHwYDVR0jBBgwFoAUumtvErjf7FdMpuDrBh2cPZWqzL4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mODhjYmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJk
ZjA3MjlkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASncYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADw3QkM/UzfPXzgMzSYIi2zcQMxxddEqKagE2m5BAim84wQiqwaRQZAs
uMt8DqtYwQl7FOBcmCLD0NRxYvYXOafm/UW6+n2YVFl+RiV0rNifVwm6q9Ghr9IH
yJBL904zxTCG8CR3Lh/Cp1j0xhuH4lk0ngl5REmY+Hv7BUaTBHIlCbaeR277t4ux
LF8HW/rhzS+FkVYizYVE/rL6pA0/os65RZPkOvkVMt5QD9El1iU2iGoOaLHMZlWg
ZSZX+ndh78/WSJlxG4oVAyV77D5VwwQVvfBXwXf5TigrZgMJH02v7oWISY+JhkFf
RB3Eh5/6qiHbmL7g6XSSkyw9Tstg6/c=
-----END CERTIFICATE-----
Generated at Tue Oct 21 22:25:35 2025 by rpki-client