Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/13f84fff-19e6-3ee1-9735-be0ff4f0b1d8.roa
File:                     13f84fff-19e6-3ee1-9735-be0ff4f0b1d8.roa (raw, json)
Hash identifier:          nxDNNt9F08w9u4A7b4Im3NspeeNNIre5O2Q80tPS7JE=
Subject key identifier:   1D:A7:CB:CF:45:18:BA:E3:AB:25:D2:0C:7F:DF:DB:0C:F5:61:5F:9B
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B8A587A95975C2C9121646F00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/13f84fff-19e6-3ee1-9735-be0ff4f0b1d8.roa
Signing time:             Thu 16 Oct 2025 11:47:32 +0000
ROA not before:           Thu 16 Oct 2025 11:47:32 +0000
ROA not after:            Wed 14 Jan 2026 12:47:32 +0000
asID:                     834
IP address blocks:        74.0.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8a:58:7a:95:97:5c:2c:91:21:64:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 16 11:47:32 2025 GMT
            Not After : Jan 14 12:47:32 2026 GMT
        Subject: CN=d76fe905-e6e8-403f-bfb9-e4962990c724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:47:d6:fd:7f:4f:9e:bb:38:da:ea:4e:0e:f6:
                    d0:e7:97:3d:4f:a4:c6:6d:1a:a4:65:17:16:f2:c3:
                    6d:d5:51:0c:be:fd:11:58:71:c2:04:1d:ed:1e:82:
                    c3:f0:92:c9:e8:d8:f7:01:38:40:c6:91:75:e3:d0:
                    ac:47:b3:98:cd:c3:7f:15:e5:12:0d:9a:93:b1:49:
                    82:ae:2c:4e:33:dc:a2:61:36:14:7e:05:27:2b:02:
                    ba:a8:c6:07:fa:23:f3:f1:c0:02:95:3e:fa:5e:d4:
                    47:35:2c:6e:e6:c4:e7:45:b8:5f:b3:6f:23:09:59:
                    8e:78:78:e0:1a:a6:60:b3:4a:39:35:b6:dd:5a:b7:
                    22:34:0e:3f:38:ab:f7:3b:f0:b8:bd:99:80:f1:63:
                    f8:8d:d4:12:03:f1:c3:a6:26:66:64:c8:3d:2a:b1:
                    98:cd:94:2d:37:87:0a:2a:1f:8e:52:3d:30:37:0c:
                    9c:7a:cf:43:de:95:ca:75:b8:f3:6f:8c:be:c1:13:
                    6e:dc:18:09:cf:d9:43:4a:22:ac:82:18:2c:97:ee:
                    2f:d1:2e:e8:eb:d6:70:70:5c:67:c1:34:ee:15:ca:
                    69:2c:61:53:6e:bb:83:44:0e:ba:fa:73:66:6d:30:
                    fc:ab:9e:a2:70:d5:60:98:4b:5e:38:cc:1e:e5:f9:
                    b4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A7:CB:CF:45:18:BA:E3:AB:25:D2:0C:7F:DF:DB:0C:F5:61:5F:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/13f84fff-19e6-3ee1-9735-be0ff4f0b1d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.0.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:05:a0:9b:70:b2:23:50:c0:a2:02:3d:4a:fa:33:ca:d9:0e:
         c2:07:26:08:76:8b:19:01:7f:4f:23:6c:e5:d6:68:75:82:ee:
         fe:57:6a:32:3c:3f:b3:9f:b1:9f:5a:aa:58:8f:34:41:8f:59:
         d9:58:bf:76:7f:17:ea:44:a2:91:75:6f:1a:1a:af:ad:26:9f:
         c6:80:80:29:dc:08:3e:ab:3e:59:0d:b8:d3:09:02:d1:a0:be:
         d8:7c:be:35:94:f1:75:25:a1:e3:a5:b1:a6:1d:ad:48:e5:a7:
         c0:57:82:65:e5:f8:0c:de:12:43:e9:c6:9f:c3:4b:6f:06:4b:
         57:e2:a8:0d:cf:06:d6:19:89:00:83:c6:7b:5b:7c:4b:eb:20:
         b4:f7:87:3a:ff:6a:2b:0a:55:1c:2e:09:68:43:ac:83:2a:d1:
         c3:e8:c7:8d:ae:45:e9:65:71:64:2c:2d:dc:e2:e5:7d:bb:1d:
         9f:6e:ab:49:32:19:e8:0a:47:d5:1e:d0:fc:5f:19:ae:20:21:
         af:ee:72:72:35:56:e1:5a:99:1e:e9:30:3e:b2:1e:5a:88:80:
         61:bc:d4:55:2f:ce:85:f3:e6:c6:4c:bb:d7:a5:14:be:cb:1d:
         91:54:b6:ab:5a:b7:8e:03:e7:a7:a5:f9:1f:89:3e:ae:31:70:
         57:27:79:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKWHqVl1wskSFkbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI1MTAxNjExNDczMloXDTI2MDExNDEyNDczMlowLzEtMCsGA1UEAxMk
ZDc2ZmU5MDUtZTZlOC00MDNmLWJmYjktZTQ5NjI5OTBjNzI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0fW/X9Pnrs42upODvbQ55c9T6TGbRqkZRcW
8sNt1VEMvv0RWHHCBB3tHoLD8JLJ6Nj3AThAxpF149CsR7OYzcN/FeUSDZqTsUmC
rixOM9yiYTYUfgUnKwK6qMYH+iPz8cAClT76XtRHNSxu5sTnRbhfs28jCVmOeHjg
GqZgs0o5NbbdWrciNA4/OKv3O/C4vZmA8WP4jdQSA/HDpiZmZMg9KrGYzZQtN4cK
Kh+OUj0wNwyces9D3pXKdbjzb4y+wRNu3BgJz9lDSiKsghgsl+4v0S7o69ZwcFxn
wTTuFcppLGFTbruDRA66+nNmbTD8q56icNVgmEteOMwe5fm0mQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB2ny89FGLrjqyXSDH/f2wz1YV+bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMTNmODRmZmYtMTllNi0z
ZWUxLTk3MzUtYmUwZmY0ZjBiMWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSgA8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI4FoJtwsiNQwKICPUr6M8rZDsIHJgh2ixkBf08jbOXWaHWC7v5XajI8
P7OfsZ9aqliPNEGPWdlYv3Z/F+pEopF1bxoar60mn8aAgCncCD6rPlkNuNMJAtGg
vth8vjWU8XUloeOlsaYdrUjlp8BXgmXl+AzeEkPpxp/DS28GS1fiqA3PBtYZiQCD
xntbfEvrILT3hzr/aisKVRwuCWhDrIMq0cPox42uRellcWQsLdzi5X27HZ9uq0ky
GegKR9Ue0PxfGa4gIa/ucnI1VuFamR7pMD6yHlqIgGG81FUvzoXz5sZMu9elFL7L
HZFUtqtat44D56el+R+JPq4xcFcneQs=
-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:39 2025 by rpki-client