Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda/43d5d7a8-6c43-3cb1-aa10-fe75f49e40ee.roa
File:                     43d5d7a8-6c43-3cb1-aa10-fe75f49e40ee.roa (raw, json)
Hash identifier:          hqCr6I7EEdnAlTwAONw2geIObcEa9AOwM+pvlU+2aeY=
Subject key identifier:   48:82:7E:F1:B0:9F:3D:83:E4:9C:F3:B6:54:5D:A4:48:E1:08:96:17
Certificate issuer:       /CN=2b0745c6-87b9-4dc9-87d6-03dfe0664bda
Certificate serial:       010D0C9F4328584A225ABAEB609AB6FB5AF84F00
Authority key identifier: 4B:DB:D2:A6:55:98:B7:4D:D5:AE:15:A8:5F:56:3E:08:1E:56:EF:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda/43d5d7a8-6c43-3cb1-aa10-fe75f49e40ee.roa
Signing time:             Mon 09 Jun 2025 13:01:01 +0000
ROA not before:           Mon 09 Jun 2025 13:01:01 +0000
ROA not after:            Sun 07 Sep 2025 13:01:01 +0000
asID:                     4913
IP address blocks:        74.119.160.0/24 maxlen: 24
                          74.119.161.0/24 maxlen: 24
                          74.119.163.0/24 maxlen: 24
                          74.119.164.0/24 maxlen: 24
                          74.119.165.0/24 maxlen: 24
                          74.119.166.0/24 maxlen: 24
                          74.119.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda/2b0745c6-87b9-4dc9-87d6-03dfe0664bda.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda/2b0745c6-87b9-4dc9-87d6-03dfe0664bda.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:22:5a:ba:eb:60:9a:b6:fb:5a:f8:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b0745c6-87b9-4dc9-87d6-03dfe0664bda
        Validity
            Not Before: Jun  9 13:01:01 2025 GMT
            Not After : Sep  7 13:01:01 2025 GMT
        Subject: CN=2b6b775d-2e31-4a85-8166-763e8afee14d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c6:5d:99:d4:75:ac:50:7e:62:e6:55:b3:a2:
                    20:de:70:c0:da:aa:ac:16:85:3c:51:83:bf:46:53:
                    52:6b:cf:e7:6a:e4:2a:fb:d7:cd:b5:f7:6c:85:36:
                    e7:4a:85:9d:c3:0e:f2:f7:89:72:74:40:46:f1:ba:
                    35:88:aa:02:4f:f0:92:a6:43:fb:e7:1f:ee:aa:1d:
                    de:30:4d:6c:21:20:b6:59:ad:ad:66:b3:7d:e9:91:
                    ee:17:05:ef:d0:b7:2c:64:a4:6a:93:e4:d5:ac:46:
                    1f:b1:c9:fd:68:19:69:3e:74:d1:af:50:07:ac:45:
                    aa:6e:d2:24:f5:e2:9d:38:10:ce:0a:2f:f5:29:86:
                    76:1d:64:39:65:46:71:89:b0:4e:d2:68:4f:97:02:
                    20:19:e8:25:8b:16:98:f9:b4:7b:4c:25:8f:c9:9f:
                    04:9a:44:65:d4:66:42:d4:7c:00:47:72:dd:ba:1d:
                    d9:0e:5f:a8:73:8a:0f:e8:c9:29:5d:3c:a6:b0:ba:
                    d7:13:8e:d5:cb:6d:ce:d5:74:a7:7f:4d:a7:70:b7:
                    a5:a6:54:17:5a:c9:64:b0:32:0e:ee:1f:0e:e5:54:
                    5f:9a:4d:e4:c6:19:32:6e:05:fa:53:04:14:b8:14:
                    26:c0:0b:61:41:09:60:97:4f:10:c9:fa:a4:64:20:
                    03:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:82:7E:F1:B0:9F:3D:83:E4:9C:F3:B6:54:5D:A4:48:E1:08:96:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda/43d5d7a8-6c43-3cb1-aa10-fe75f49e40ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda/2b0745c6-87b9-4dc9-87d6-03dfe0664bda.crl

            X509v3 Authority Key Identifier:
                keyid:4B:DB:D2:A6:55:98:B7:4D:D5:AE:15:A8:5F:56:3E:08:1E:56:EF:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.160.0/23
                  74.119.163.0-74.119.167.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:ff:62:37:bc:d6:fc:88:08:04:bf:14:a8:6e:40:07:7c:ee:
         35:cb:0d:0d:ed:06:96:7c:43:ee:87:4d:31:65:c4:13:a8:df:
         27:5f:a2:a6:16:7b:8e:df:91:f2:07:f4:6a:7e:36:45:5f:01:
         01:c8:9b:1e:9a:2a:a1:40:60:1c:79:e0:06:6c:2a:9a:da:7f:
         64:4e:88:55:ba:df:79:5e:da:ba:f0:50:70:de:ec:5c:20:7a:
         48:d8:00:3f:8d:5c:2c:00:b4:08:10:19:cc:07:ac:72:90:59:
         16:3c:ee:f4:92:ea:8b:67:89:c0:ff:e4:7f:6f:1a:01:7a:5d:
         b8:6f:49:00:ee:7c:08:a3:2c:2b:6f:5b:28:9a:83:69:cd:eb:
         8c:98:65:79:06:b5:64:c8:a1:b6:66:5a:10:7e:59:cd:4c:29:
         e8:67:4e:64:9b:61:82:28:4d:aa:45:c5:1e:97:58:b8:88:46:
         2a:70:26:d8:4d:8f:5c:58:a2:ae:d0:4b:8c:50:91:6a:ad:74:
         9b:6e:29:3b:4d:54:b1:fa:95:4d:b9:36:a5:a2:af:01:d5:72:
         75:d9:dd:8a:70:f3:8a:cc:d1:9f:2a:64:5f:f7:e7:69:16:65:
         65:56:56:69:30:68:de:62:9e:87:66:fe:52:b8:74:de:ec:de:
         53:eb:07:9e
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEoiWrrrYJq2+1r4TwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmIwNzQ1YzYtODdiOS00ZGM5LTg3ZDYtMDNkZmUwNjY0
YmRhMB4XDTI1MDYwOTEzMDEwMVoXDTI1MDkwNzEzMDEwMVowLzEtMCsGA1UEAxMk
MmI2Yjc3NWQtMmUzMS00YTg1LTgxNjYtNzYzZThhZmVlMTRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8ZdmdR1rFB+YuZVs6Ig3nDA2qqsFoU8UYO/
RlNSa8/nauQq+9fNtfdshTbnSoWdww7y94lydEBG8bo1iKoCT/CSpkP75x/uqh3e
ME1sISC2Wa2tZrN96ZHuFwXv0LcsZKRqk+TVrEYfscn9aBlpPnTRr1AHrEWqbtIk
9eKdOBDOCi/1KYZ2HWQ5ZUZxibBO0mhPlwIgGeglixaY+bR7TCWPyZ8EmkRl1GZC
1HwAR3Lduh3ZDl+oc4oP6MkpXTymsLrXE47Vy23O1XSnf02ncLelplQXWslksDIO
7h8O5VRfmk3kxhkybgX6UwQUuBQmwAthQQlgl08QyfqkZCAD3QIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFEiCfvGwnz2D5JzztlRdpEjhCJYXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjA3
NDVjNi04N2I5LTRkYzktODdkNi0wM2RmZTA2NjRiZGEvNDNkNWQ3YTgtNmM0My0z
Y2IxLWFhMTAtZmU3NWY0OWU0MGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmIwNzQ1YzYtODdiOS00ZGM5LTg3
ZDYtMDNkZmUwNjY0YmRhLzJiMDc0NWM2LTg3YjktNGRjOS04N2Q2LTAzZGZlMDY2
NGJkYS5jcmwwHwYDVR0jBBgwFoAUS9vSplWYt03VrhWoX1Y+CB5W70cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjA3NDVjNi04N2I5LTRkYzktODdkNi0wM2Rm
ZTA2NjRiZGEuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBSnegMAwD
BABKd6MDBANKd6AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAN/9iN7zW/IgIBL8UqG5AB3zuNcsNDe0GlnxD
7odNMWXEE6jfJ1+iphZ7jt+R8gf0an42RV8BAcibHpoqoUBgHHngBmwqmtp/ZE6I
VbrfeV7auvBQcN7sXCB6SNgAP41cLAC0CBAZzAescpBZFjzu9JLqi2eJwP/kf28a
AXpduG9JAO58CKMsK29bKJqDac3rjJhleQa1ZMihtmZaEH5ZzUwp6GdOZJthgihN
qkXFHpdYuIhGKnAm2E2PXFiirtBLjFCRaq10m24pO01UsfqVTbk2paKvAdVyddnd
inDziszRnypkX/fnaRZlZVZWaTBo3mKeh2b+Urh03uzeU+sHng==
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:15:10 2025 by rpki-client