Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c96a32c6-d883-32cc-8734-87cd0112383a.roa
File:                     c96a32c6-d883-32cc-8734-87cd0112383a.roa (raw, json)
Hash identifier:          vyYZVkhtv6WnoNHUd6BkV6Vfkdho2DzBOFMKv17arnE=
Subject key identifier:   22:98:1A:E8:D7:47:AB:6E:97:84:F6:5C:AE:F8:CB:BB:1B:41:24:8E
Certificate issuer:       /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial:       010D0C9F4328584B5F372B9B15190F6957D1E180
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c96a32c6-d883-32cc-8734-87cd0112383a.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     198949
IP address blocks:        74.123.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:2b:9b:15:19:0f:69:57:d1:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=6398d794-914d-4b82-b600-cec945da60d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:97:00:d9:1e:c1:d3:17:44:45:84:b7:9f:51:
                    d4:57:79:a5:7f:34:c1:ac:4d:70:2b:39:c5:a6:c9:
                    4d:d5:f9:8c:04:d5:2c:67:51:36:31:4e:b5:f5:39:
                    b3:16:dc:13:40:48:2f:4c:de:7f:eb:ae:6a:a3:79:
                    26:89:48:26:ed:10:26:f3:e2:ec:6f:f6:4a:ea:e3:
                    1a:04:43:ef:c6:3f:b4:b8:a5:51:57:68:f6:7c:e8:
                    b7:a2:16:58:1f:39:57:f3:ab:47:65:b4:6c:3c:b9:
                    df:2f:c8:db:b2:11:96:35:c6:5d:b3:13:7c:fb:ca:
                    e0:99:41:e7:de:09:1f:a6:d8:c7:80:1f:41:85:28:
                    d4:b0:61:bf:9a:62:13:f0:37:f5:57:2a:85:5b:98:
                    c0:91:b0:ca:85:ce:c0:51:70:6f:51:65:ac:9f:6f:
                    e6:58:80:ec:02:98:2c:ff:89:b0:d7:bd:e6:19:b6:
                    e0:99:c4:1d:db:b0:eb:79:09:8f:5a:e6:a9:67:e7:
                    8c:78:91:8b:a1:99:c5:99:fd:4c:f7:fd:f0:34:ab:
                    ae:d9:e3:3c:a9:85:b5:00:c4:8f:aa:d9:a9:05:98:
                    eb:39:27:17:27:0a:b6:ef:23:c1:e0:ae:db:cf:86:
                    29:32:b7:62:ef:c5:c8:ea:1e:96:45:5e:5f:f2:e9:
                    a0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:98:1A:E8:D7:47:AB:6E:97:84:F6:5C:AE:F8:CB:BB:1B:41:24:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c96a32c6-d883-32cc-8734-87cd0112383a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:b7:84:db:f4:13:ea:81:65:7a:31:b2:fa:28:b8:40:e1:e0:
         10:14:2e:32:0d:4a:7e:67:46:96:fa:87:c9:c3:46:e2:3b:d1:
         fe:99:a8:e0:23:b6:26:5d:41:cb:d9:67:3b:92:39:c6:b9:81:
         52:8c:0a:fb:f5:5c:2a:47:6d:15:63:21:b6:58:dd:dd:96:81:
         59:8e:84:5b:be:a5:74:cc:31:2b:71:9f:9c:ce:dc:fc:75:5d:
         ff:55:8a:85:4f:00:2b:de:76:2e:93:78:a9:3d:28:14:4b:63:
         73:30:4f:61:f2:a6:42:f2:27:cc:6b:0d:21:37:2f:d6:39:58:
         e3:b3:5f:79:9a:8d:59:34:a0:93:92:4d:75:85:ca:9a:10:aa:
         c8:74:36:2d:38:42:c2:99:44:94:00:c8:92:c1:e5:f8:84:c1:
         11:79:61:8c:2e:3e:88:ec:c6:80:11:7b:68:64:e4:58:89:fc:
         c4:a4:99:2e:df:98:ba:94:43:11:87:d5:c8:1d:b9:d0:ec:87:
         44:91:ee:d0:1b:17:05:e7:65:82:dd:ef:f6:83:60:a7:dc:f6:
         c6:e8:f4:79:64:06:eb:5e:66:d4:a2:ed:cc:d7:a4:69:90:82:
         5f:9a:72:54:63:6a:66:3e:46:ad:91:09:0d:87:98:48:f7:a9:
         7d:bb:ae:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNyubFRkPaVfR4YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl
MmI0MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk
NjM5OGQ3OTQtOTE0ZC00YjgyLWI2MDAtY2VjOTQ1ZGE2MGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZcA2R7B0xdERYS3n1HUV3mlfzTBrE1wKznF
pslN1fmMBNUsZ1E2MU619TmzFtwTQEgvTN5/665qo3kmiUgm7RAm8+Lsb/ZK6uMa
BEPvxj+0uKVRV2j2fOi3ohZYHzlX86tHZbRsPLnfL8jbshGWNcZdsxN8+8rgmUHn
3gkfptjHgB9BhSjUsGG/mmIT8Df1VyqFW5jAkbDKhc7AUXBvUWWsn2/mWIDsApgs
/4mw173mGbbgmcQd27DreQmPWuapZ+eMeJGLoZnFmf1M9/3wNKuu2eM8qYW1AMSP
qtmpBZjrOScXJwq27yPB4K7bz4YpMrdi78XI6h6WRV5f8umgZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCKYGujXR6tul4T2XK74y7sbQSSOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi
YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvYzk2YTMyYzYtZDg4My0z
MmNjLTg3MzQtODdjZDAxMTIzODNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy
YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw
ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk
ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnu0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAO3hNv0E+qBZXoxsvoouEDh4BAULjINSn5nRpb6h8nDRuI70f6ZqOAj
tiZdQcvZZzuSOca5gVKMCvv1XCpHbRVjIbZY3d2WgVmOhFu+pXTMMStxn5zO3Px1
Xf9VioVPACvedi6TeKk9KBRLY3MwT2HypkLyJ8xrDSE3L9Y5WOOzX3majVk0oJOS
TXWFypoQqsh0Ni04QsKZRJQAyJLB5fiEwRF5YYwuPojsxoARe2hk5FiJ/MSkmS7f
mLqUQxGH1cgdudDsh0SR7tAbFwXnZYLd7/aDYKfc9sbo9HlkButeZtSi7czXpGmQ
gl+aclRjamY+Rq2RCQ2HmEj3qX27rtQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:11:52 2025 by rpki-client