Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/971963f9-d7d0-3de4-9fd9-4157e4c677c8.roa
File:                     971963f9-d7d0-3de4-9fd9-4157e4c677c8.roa (raw, json)
Hash identifier:          PL7lal9fUSjLeL71atozaQZL6zys8zwK/aEy4FHzonI=
Subject key identifier:   FB:2B:78:84:91:02:A3:17:B3:AE:91:72:1B:23:7B:29:21:55:9A:3B
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584A9FFBA452E8DF3D6D77816E00
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/971963f9-d7d0-3de4-9fd9-4157e4c677c8.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     715
IP address blocks:        74.63.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:a4:52:e8:df:3d:6d:77:81:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=3a50bbf1-9a42-48a9-9d88-df4611b49e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b2:a0:0a:52:96:74:6d:cc:ef:5f:6b:95:77:
                    46:16:fa:ad:13:12:88:f6:23:82:8c:e0:e4:88:94:
                    4c:d7:1c:1e:ab:94:4d:5b:f8:e2:53:89:ae:13:9a:
                    05:9c:b5:79:76:03:42:6b:33:cb:b9:ad:19:6c:ae:
                    f1:c6:25:37:60:20:1a:16:8b:ed:22:26:19:70:05:
                    9c:cd:4a:ee:54:8c:f5:83:32:da:00:f8:7b:b3:f2:
                    45:f9:6f:7e:3b:cb:28:88:c6:4b:a0:50:75:d8:77:
                    95:3a:56:3a:b5:9b:19:eb:eb:9a:77:db:19:6a:66:
                    ec:3c:72:7c:d8:9d:47:eb:a4:25:6c:72:12:ad:70:
                    ca:d5:55:33:64:fd:4a:5c:7e:31:b8:fc:c2:9e:65:
                    16:88:76:e4:82:1b:9d:a8:9d:e8:fb:e0:2d:fa:6e:
                    d8:dd:1b:10:6b:41:42:93:34:d2:68:00:4c:f7:fb:
                    36:a0:d6:92:95:c0:16:3f:f2:23:3a:27:0f:5e:e1:
                    1f:81:86:93:15:ec:88:be:36:95:8c:a5:fe:4f:eb:
                    8e:af:fd:d6:4d:91:98:ac:5e:9c:34:0c:23:96:5c:
                    96:fa:af:69:c2:0e:e4:02:d4:76:d8:64:82:de:00:
                    90:0b:a5:49:8b:4a:38:b6:c1:03:78:ee:43:1d:7b:
                    26:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2B:78:84:91:02:A3:17:B3:AE:91:72:1B:23:7B:29:21:55:9A:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/971963f9-d7d0-3de4-9fd9-4157e4c677c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.63.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:d8:f2:70:88:b6:79:8e:21:6c:2b:64:5c:ba:64:87:91:f2:
         3c:7f:dc:0d:9c:df:28:ca:a3:87:90:a6:28:e6:d4:6a:e1:91:
         84:bb:80:ba:2f:0c:4d:b5:36:21:07:39:95:ed:8a:65:0f:16:
         11:7c:14:ad:8e:24:56:8f:12:6e:1c:7c:3d:ea:04:75:dc:65:
         e1:ac:9b:e8:95:b1:8c:55:56:92:bf:cf:9e:ad:60:51:da:eb:
         7a:5f:fd:6f:4a:c3:32:b3:b9:ce:db:ae:c5:55:c8:1f:43:f6:
         62:7c:f4:1c:37:c2:1f:d4:69:6d:27:ea:f1:06:c7:1a:49:8e:
         f7:fc:10:82:26:91:14:94:da:4e:47:10:64:ff:29:0f:0d:04:
         3a:2b:2d:b6:20:4a:f6:55:f0:a2:70:46:a4:af:6a:90:5d:5c:
         24:c2:c6:7b:de:70:e9:8e:8e:35:23:36:03:68:43:f6:4b:3d:
         57:13:22:90:d5:ad:13:fd:87:84:dd:49:eb:56:ae:21:bc:ab:
         6c:c7:02:cb:cb:33:00:8c:3b:f6:20:7d:32:dc:ad:c4:ca:68:
         0d:c3:1f:fb:f7:78:99:98:76:25:95:3c:b2:bb:0b:fb:84:18:
         cd:5f:31:cd:be:bc:be:ad:ce:a2:92:49:9f:5e:30:ce:f0:bc:
         16:53:cc:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+6RS6N89bXeBbgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3
MTAzMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk
M2E1MGJiZjEtOWE0Mi00OGE5LTlkODgtZGY0NjExYjQ5ZTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrKgClKWdG3M719rlXdGFvqtExKI9iOCjODk
iJRM1xweq5RNW/jiU4muE5oFnLV5dgNCazPLua0ZbK7xxiU3YCAaFovtIiYZcAWc
zUruVIz1gzLaAPh7s/JF+W9+O8soiMZLoFB12HeVOlY6tZsZ6+uad9sZambsPHJ8
2J1H66QlbHISrXDK1VUzZP1KXH4xuPzCnmUWiHbkghudqJ3o++At+m7Y3RsQa0FC
kzTSaABM9/s2oNaSlcAWP/IjOicPXuEfgYaTFeyIvjaVjKX+T+uOr/3WTZGYrF6c
NAwjllyW+q9pwg7kAtR22GSC3gCQC6VJi0o4tsEDeO5DHXsmSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPsreISRAqMXs66RchsjeykhVZo7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy
NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvOTcxOTYzZjktZDdkMC0z
ZGU0LTlmZDktNDE1N2U0YzY3N2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4
ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj
NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2
MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESj8QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ3Y8nCItnmOIWwrZFy6ZIeR8jx/3A2c3yjKo4eQpijm1GrhkYS7gLov
DE21NiEHOZXtimUPFhF8FK2OJFaPEm4cfD3qBHXcZeGsm+iVsYxVVpK/z56tYFHa
63pf/W9KwzKzuc7brsVVyB9D9mJ89Bw3wh/UaW0n6vEGxxpJjvf8EIImkRSU2k5H
EGT/KQ8NBDorLbYgSvZV8KJwRqSvapBdXCTCxnvecOmOjjUjNgNoQ/ZLPVcTIpDV
rRP9h4TdSetWriG8q2zHAsvLMwCMO/YgfTLcrcTKaA3DH/v3eJmYdiWVPLK7C/uE
GM1fMc2+vL6tzqKSSZ9eMM7wvBZTzOg=
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:01:19 2025 by rpki-client