Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d97bf714-3658-3f67-a7a2-1334b001a810.roa
File:                     d97bf714-3658-3f67-a7a2-1334b001a810.roa (raw, json)
Hash identifier:          bj8f6GuNluByIE9wtoSc1h3JvtWt7COJshiB95gs7Ok=
Subject key identifier:   02:B4:3B:6B:C3:52:2A:19:47:5E:8F:74:C7:27:D8:03:36:00:2F:A7
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E561A0427F3D55E77BCC2B300
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d97bf714-3658-3f67-a7a2-1334b001a810.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     7843
IP address blocks:        16.14.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:1a:04:27:f3:d5:5e:77:bc:c2:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=46b4c58b-4c15-473f-9a2f-91ee85c0f4c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:73:df:db:27:e1:75:e3:1f:f2:b2:c7:e4:ae:
                    44:02:90:31:61:97:0e:47:03:14:5f:4a:fc:b1:d8:
                    e1:aa:91:9e:d9:2d:4c:e5:31:f6:05:bc:64:9b:23:
                    f1:c3:92:99:41:3a:f5:5f:fe:e6:ae:02:a0:b1:bf:
                    3e:57:e7:e4:1b:9e:88:96:c5:41:b6:ee:d2:42:a7:
                    93:f1:9c:c2:4b:52:e4:9d:db:6d:8a:0d:f9:6e:9f:
                    4e:10:3a:bb:f9:a5:2b:f0:0f:99:65:59:3b:0d:c9:
                    f8:5c:40:80:11:59:80:02:56:2a:36:02:4b:19:00:
                    2f:a6:b1:41:62:dd:9c:7b:cf:1a:1a:93:8d:5f:28:
                    29:ad:c1:38:13:36:21:11:23:9b:00:03:57:f2:a3:
                    d6:cf:8e:1a:ee:2c:0e:10:9a:9d:c0:4b:23:6b:57:
                    00:e2:2a:7f:b9:f3:3d:12:1c:a9:7a:60:32:e3:a2:
                    c6:83:45:36:68:4c:4f:bb:fc:78:fc:65:d5:86:be:
                    a4:e1:50:ee:6e:74:81:09:27:df:29:ca:05:53:61:
                    a4:99:77:2c:e7:b7:d2:42:8b:bb:d2:44:f8:f8:c3:
                    ce:f5:3b:d4:d9:9f:cd:72:79:81:50:0f:4d:52:9d:
                    e1:35:f8:91:aa:fa:40:df:e2:08:ec:02:b0:e2:b2:
                    e4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B4:3B:6B:C3:52:2A:19:47:5E:8F:74:C7:27:D8:03:36:00:2F:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d97bf714-3658-3f67-a7a2-1334b001a810.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.14.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:3e:04:1f:c5:9f:42:7c:36:60:15:12:09:2e:0e:37:e3:cd:
         21:9c:7d:e5:b8:17:71:78:a7:5c:0a:6a:52:76:4c:00:5f:8e:
         29:07:34:dd:d0:b1:fc:7f:bc:07:5d:54:ff:e2:68:1f:a2:f1:
         fa:61:a0:39:24:15:0f:e2:49:15:71:2a:17:e9:f2:66:75:12:
         64:ea:e4:95:07:95:54:3b:83:0d:20:ec:c3:71:85:79:08:9b:
         0e:ff:c1:0d:df:e2:0c:02:5b:19:12:5f:ab:36:99:5d:39:5f:
         e4:7f:0d:cf:73:96:77:bd:dc:82:47:d9:9c:18:e1:30:57:37:
         d8:28:7b:3f:86:e9:29:b8:9c:c4:7d:27:35:31:e0:cb:d7:01:
         07:10:2e:d9:ae:47:dc:97:23:37:02:21:7e:89:13:27:e3:fd:
         6d:9c:97:7d:66:51:5f:09:79:63:a5:20:e2:79:b0:96:f4:62:
         bb:b0:f0:a1:62:1c:d0:e9:cf:fd:75:b9:82:f4:99:5a:d2:3e:
         74:9c:eb:b2:2e:00:42:08:55:57:f7:f5:3a:2d:71:38:5b:f4:
         05:29:9f:eb:d6:7a:e4:56:9b:79:81:64:c4:2b:84:26:21:e0:
         72:3d:5d:01:95:ae:4f:1c:5e:1a:76:81:45:af:81:5e:20:e1:
         6b:c4:d8:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5WGgQn89Ved7zCswAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDYyOTIxMDAxMloXDTI2MDkyNzIxMDAxMlowLzEtMCsGA1UEAxMk
NDZiNGM1OGItNGMxNS00NzNmLTlhMmYtOTFlZTg1YzBmNGM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHPf2yfhdeMf8rLH5K5EApAxYZcORwMUX0r8
sdjhqpGe2S1M5TH2BbxkmyPxw5KZQTr1X/7mrgKgsb8+V+fkG56IlsVBtu7SQqeT
8ZzCS1Lkndttig35bp9OEDq7+aUr8A+ZZVk7Dcn4XECAEVmAAlYqNgJLGQAvprFB
Yt2ce88aGpONXygprcE4EzYhESObAANX8qPWz44a7iwOEJqdwEsja1cA4ip/ufM9
EhypemAy46LGg0U2aExPu/x4/GXVhr6k4VDubnSBCSffKcoFU2GkmXcs57fSQou7
0kT4+MPO9TvU2Z/NcnmBUA9NUp3hNfiRqvpA3+II7AKw4rLkwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAK0O2vDUioZR16PdMcn2AM2AC+nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZDk3YmY3MTQtMzY1OC0z
ZjY3LWE3YTItMTMzNGIwMDFhODEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAEA7sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD4+BB/Fn0J8NmAVEgkuDjfjzSGcfeW4F3F4p1wKalJ2TABfjikHNN3Q
sfx/vAddVP/iaB+i8fphoDkkFQ/iSRVxKhfp8mZ1EmTq5JUHlVQ7gw0g7MNxhXkI
mw7/wQ3f4gwCWxkSX6s2mV05X+R/Dc9zlne93IJH2ZwY4TBXN9goez+G6Sm4nMR9
JzUx4MvXAQcQLtmuR9yXIzcCIX6JEyfj/W2cl31mUV8JeWOlIOJ5sJb0Yruw8KFi
HNDpz/11uYL0mVrSPnSc67IuAEIIVVf39TotcThb9AUpn+vWeuRWm3mBZMQrhCYh
4HI9XQGVrk8cXhp2gUWvgV4g4WvE2MM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:53:41 2026 by rpki-client