Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/3a6750b4-c868-3858-8626-471d5e1d412a.roa
File:                     3a6750b4-c868-3858-8626-471d5e1d412a.roa (raw, json)
Hash identifier:          XhlbqM5Megozi84mgacs0PQ3tHcc9MHfWcSKDPPRXm8=
Subject key identifier:   28:51:12:2F:7B:C2:EE:3A:B6:5D:76:8F:88:CA:A0:A7:D8:05:25:99
Certificate issuer:       /CN=d057304d-4312-43aa-92a7-91bbd7043aab
Certificate serial:       010D0C9F4328584A4AD58F07D957B95ADB06A280
Authority key identifier: 91:3E:68:78:2A:B7:8C:27:CC:4B:07:99:5C:F1:BC:F3:FB:11:69:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/3a6750b4-c868-3858-8626-471d5e1d412a.roa
Signing time:             Tue 24 Jun 2025 01:00:50 +0000
ROA not before:           Tue 24 Jun 2025 01:00:50 +0000
ROA not after:            Mon 22 Sep 2025 01:00:50 +0000
asID:                     53266
IP address blocks:        74.116.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/d057304d-4312-43aa-92a7-91bbd7043aab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/d057304d-4312-43aa-92a7-91bbd7043aab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:d5:8f:07:d9:57:b9:5a:db:06:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d057304d-4312-43aa-92a7-91bbd7043aab
        Validity
            Not Before: Jun 24 01:00:50 2025 GMT
            Not After : Sep 22 01:00:50 2025 GMT
        Subject: CN=06f2d0d7-7921-4ffb-8514-7b3582a6e6ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7d:58:09:c5:ad:f4:a0:74:5b:98:4e:79:8e:
                    be:5b:8d:d5:40:f1:c6:01:43:37:53:8b:44:f0:0c:
                    35:52:87:9f:a4:f1:32:2c:47:d1:24:a5:97:76:e7:
                    9c:9e:d9:c1:c9:42:29:ab:71:83:4c:35:f6:5c:16:
                    dc:c4:29:fa:50:45:17:f3:bd:ea:ff:fe:44:a2:26:
                    d0:29:ce:a9:e4:39:43:16:c5:0e:d1:67:c9:47:24:
                    88:fc:19:f2:68:3b:c3:34:a7:48:5d:bd:13:63:ae:
                    4a:44:43:89:9d:23:44:17:cb:fd:f3:6e:9d:73:da:
                    ce:81:14:a1:d3:33:95:67:13:f5:e5:85:f6:ff:0b:
                    9b:85:c8:59:77:e6:fb:18:39:5d:85:f0:8a:28:9e:
                    74:c4:e0:15:93:1d:e7:ca:72:cd:61:fa:3f:90:c6:
                    ac:09:3a:26:d0:5c:7a:a4:5d:2b:fb:53:d5:1b:ac:
                    fc:a2:f3:76:cd:49:c7:9c:5c:b2:82:e9:6a:f7:00:
                    27:e3:04:04:83:a8:93:2a:2e:d1:7e:c5:68:0a:5c:
                    4a:a4:a2:8d:e4:19:9d:65:b3:71:13:02:f2:61:74:
                    ee:61:04:7e:61:7b:27:5b:89:24:e0:ff:ad:40:ae:
                    05:42:4b:c7:28:a6:31:ec:d3:ba:cb:30:a0:01:76:
                    dc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:51:12:2F:7B:C2:EE:3A:B6:5D:76:8F:88:CA:A0:A7:D8:05:25:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/3a6750b4-c868-3858-8626-471d5e1d412a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/d057304d-4312-43aa-92a7-91bbd7043aab.crl

            X509v3 Authority Key Identifier:
                keyid:91:3E:68:78:2A:B7:8C:27:CC:4B:07:99:5C:F1:BC:F3:FB:11:69:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:f8:ee:06:7b:b0:e5:7a:ac:c5:16:3a:f0:8a:77:57:69:86:
         36:82:86:a0:92:7c:1b:60:8f:84:b8:f1:9f:bd:db:89:86:11:
         26:8a:29:e1:77:ab:6f:73:9c:e7:95:b9:2a:5b:82:7b:62:ea:
         e0:2f:c3:e6:79:64:4b:50:79:9e:c3:69:be:9f:c6:38:e2:22:
         9e:14:79:21:37:7b:cb:a6:c3:ef:61:46:d7:1e:42:bb:ac:aa:
         22:48:a0:16:a8:71:86:fe:f4:a4:f6:7a:be:52:f6:a9:9f:4d:
         04:8f:ee:cb:b1:1d:88:53:ce:f1:65:5e:06:a3:fe:ce:65:a2:
         39:f5:7a:41:11:b6:f5:c2:9f:bf:c9:42:d5:77:ea:56:b2:0b:
         18:83:5c:07:1e:39:d3:f2:16:93:41:96:52:ce:13:90:8f:2d:
         ca:27:ff:bb:95:59:a3:68:56:4c:c5:41:38:e9:bd:b7:fc:45:
         2c:94:35:66:a1:d4:64:0c:c6:bc:fb:9b:7c:0c:a9:5e:f7:d5:
         28:76:0b:37:be:c1:53:66:35:44:5b:26:51:53:dc:ad:b7:61:
         cf:6a:26:bc:75:bb:62:21:e7:c4:00:74:2e:06:71:fb:ec:a3:
         27:b6:3f:ca:23:ad:c7:fe:c2:83:c4:db:c5:a7:b7:b1:16:24:
         f1:64:a5:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpK1Y8H2Ve5WtsGooAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDA1NzMwNGQtNDMxMi00M2FhLTkyYTctOTFiYmQ3MDQz
YWFiMB4XDTI1MDYyNDAxMDA1MFoXDTI1MDkyMjAxMDA1MFowLzEtMCsGA1UEAxMk
MDZmMmQwZDctNzkyMS00ZmZiLTg1MTQtN2IzNTgyYTZlNmVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn1YCcWt9KB0W5hOeY6+W43VQPHGAUM3U4tE
8Aw1UoefpPEyLEfRJKWXduecntnByUIpq3GDTDX2XBbcxCn6UEUX873q//5EoibQ
Kc6p5DlDFsUO0WfJRySI/BnyaDvDNKdIXb0TY65KREOJnSNEF8v9826dc9rOgRSh
0zOVZxP15YX2/wubhchZd+b7GDldhfCKKJ50xOAVkx3nynLNYfo/kMasCTom0Fx6
pF0r+1PVG6z8ovN2zUnHnFyygulq9wAn4wQEg6iTKi7RfsVoClxKpKKN5BmdZbNx
EwLyYXTuYQR+YXsnW4kk4P+tQK4FQkvHKKYx7NO6yzCgAXbcvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFChREi97wu46tl12j4jKoKfYBSWZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kMDU3
MzA0ZC00MzEyLTQzYWEtOTJhNy05MWJiZDcwNDNhYWIvM2E2NzUwYjQtYzg2OC0z
ODU4LTg2MjYtNDcxZDVlMWQ0MTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDA1NzMwNGQtNDMxMi00M2FhLTky
YTctOTFiYmQ3MDQzYWFiL2QwNTczMDRkLTQzMTItNDNhYS05MmE3LTkxYmJkNzA0
M2FhYi5jcmwwHwYDVR0jBBgwFoAUkT5oeCq3jCfMSweZXPG88/sRaXswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kMDU3MzA0ZC00MzEyLTQzYWEtOTJhNy05MWJi
ZDcwNDNhYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSnSAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAL47gZ7sOV6rMUWOvCKd1dphjaChqCSfBtgj4S48Z+924mGESaKKeF3
q29znOeVuSpbgnti6uAvw+Z5ZEtQeZ7Dab6fxjjiIp4UeSE3e8umw+9hRtceQrus
qiJIoBaocYb+9KT2er5S9qmfTQSP7suxHYhTzvFlXgaj/s5lojn1ekERtvXCn7/J
QtV36layCxiDXAceOdPyFpNBllLOE5CPLcon/7uVWaNoVkzFQTjpvbf8RSyUNWah
1GQMxrz7m3wMqV731Sh2Cze+wVNmNURbJlFT3K23Yc9qJrx1u2Ih58QAdC4Gcfvs
oye2P8ojrcf+woPE28Wnt7EWJPFkpbE=
-----END CERTIFICATE-----
Generated at Mon Jun 30 23:35:16 2025 by rpki-client