Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/3873425f-0330-3da6-b372-5e44dd7a2deb.roa
File:                     3873425f-0330-3da6-b372-5e44dd7a2deb.roa (raw, json)
Hash identifier:          2gka5jkVt9TfcuDTUIBTKHaAALEh26F99IAc/6cOFuw=
Subject key identifier:   04:79:63:31:65:ED:09:ED:91:A7:10:35:41:84:89:EF:1D:B3:05:43
Certificate issuer:       /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
Certificate serial:       010D0C9F4328584E253F05DB0F6FBA6476181900
Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/3873425f-0330-3da6-b372-5e44dd7a2deb.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     35847
IP address blocks:        74.51.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:05:db:0f:6f:ba:64:76:18:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=a2e96042-d3be-4d63-bac4-967f71c961c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f6:4f:4a:64:90:2b:49:20:06:90:79:3e:4f:
                    61:0e:83:be:eb:dc:bf:68:b4:fb:a7:64:eb:d0:82:
                    8e:24:c0:cf:68:75:a6:76:a9:51:16:2a:61:2d:3f:
                    5e:4b:fb:68:73:cc:9d:a0:89:dd:09:85:c4:8e:6f:
                    74:13:e5:e9:7b:60:15:ee:aa:18:2d:bc:bd:2d:19:
                    91:a8:66:72:a1:4a:39:cf:dc:c9:5d:2e:03:bb:0c:
                    2f:f6:56:b5:ab:82:1d:34:0e:50:de:0a:2b:82:96:
                    88:11:cc:5a:a4:be:39:5c:0e:c6:17:2d:ef:e9:04:
                    11:a6:8e:95:15:86:8e:b5:a4:f5:b2:0a:7d:c4:83:
                    7b:36:2f:73:39:60:17:03:4f:ad:58:05:31:ad:a4:
                    a4:18:f0:93:21:2b:08:14:65:68:b5:6d:6e:21:fa:
                    8e:09:b6:c2:5e:5f:5c:55:ac:a0:8c:77:f2:c6:63:
                    04:6b:09:c6:2b:8d:03:1e:52:3d:41:ce:66:a7:1e:
                    56:f8:39:5c:88:bb:e2:38:98:ed:70:ca:62:00:b2:
                    e5:48:12:41:e2:22:08:da:af:d0:97:07:74:a7:45:
                    9a:c3:48:c0:4f:66:be:de:98:01:85:d1:d6:72:22:
                    a7:14:72:74:4b:c8:81:77:18:15:6e:22:1d:d2:be:
                    b1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:79:63:31:65:ED:09:ED:91:A7:10:35:41:84:89:EF:1D:B3:05:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/3873425f-0330-3da6-b372-5e44dd7a2deb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl

            X509v3 Authority Key Identifier:
                keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.51.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:d2:04:1a:66:b0:b5:14:3c:04:7b:3e:74:8f:8c:98:8e:64:
         b5:bd:59:a6:95:53:36:d9:0d:82:e4:6b:f5:bc:dd:67:cd:ba:
         f9:8c:6a:98:6b:5d:74:ad:d6:af:90:18:84:48:18:c2:d4:5a:
         2b:57:56:c3:5a:b7:90:4b:d8:e3:45:a6:03:e7:31:01:82:e5:
         6b:c5:2c:8f:a8:b0:06:ce:77:2f:80:bb:82:00:35:a4:fb:89:
         31:8e:00:01:18:44:a5:fb:37:d7:66:bf:9b:2d:40:d4:17:88:
         b4:f8:73:69:a8:c9:f9:63:ec:cb:c6:29:70:88:5a:8a:00:ab:
         40:b6:19:14:b9:d9:c8:b9:44:58:b7:85:42:93:df:c3:9a:f3:
         44:10:24:81:c5:23:64:6f:16:3e:6d:f7:37:dc:00:57:81:aa:
         1c:eb:65:d1:f4:84:78:44:e0:70:7c:c6:16:c6:85:8b:45:46:
         77:3e:8d:2a:74:3d:f0:f1:38:ac:1b:69:c9:7c:0a:ae:65:39:
         f7:93:1c:82:2d:ac:08:b0:d3:21:60:39:53:c3:2a:1e:ae:7c:
         18:ac:8d:92:45:09:1c:fe:65:c6:8c:c9:08:98:79:52:8c:93:
         b7:f9:06:9e:da:8c:5e:4e:c1:b1:e4:b0:aa:10:7b:17:91:68:
         44:e2:3c:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPwXbD2+6ZHYYGQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2U0YTQ2MDktNmMyZS00N2Q4LThjNjktMWQ4MGEyY2Yz
ZjExMB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk
YTJlOTYwNDItZDNiZS00ZDYzLWJhYzQtOTY3ZjcxYzk2MWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfZPSmSQK0kgBpB5Pk9hDoO+69y/aLT7p2Tr
0IKOJMDPaHWmdqlRFiphLT9eS/toc8ydoIndCYXEjm90E+Xpe2AV7qoYLby9LRmR
qGZyoUo5z9zJXS4Duwwv9la1q4IdNA5Q3gorgpaIEcxapL45XA7GFy3v6QQRpo6V
FYaOtaT1sgp9xIN7Ni9zOWAXA0+tWAUxraSkGPCTISsIFGVotW1uIfqOCbbCXl9c
VaygjHfyxmMEawnGK40DHlI9Qc5mpx5W+DlciLviOJjtcMpiALLlSBJB4iII2q/Q
lwd0p0Waw0jAT2a+3pgBhdHWciKnFHJ0S8iBdxgVbiId0r6xgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAR5YzFl7QntkacQNUGEie8dswVDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTRh
NDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgwYTJjZjNmMTEvMzg3MzQyNWYtMDMzMC0z
ZGE2LWIzNzItNWU0NGRkN2EyZGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2U0YTQ2MDktNmMyZS00N2Q4LThj
NjktMWQ4MGEyY2YzZjExL2NlNGE0NjA5LTZjMmUtNDdkOC04YzY5LTFkODBhMmNm
M2YxMS5jcmwwHwYDVR0jBBgwFoAUaO+Qh8HxiFXOXjq3/4RHO8hZ6c0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9jZTRhNDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgw
YTJjZjNmMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESjPAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF/SBBpmsLUUPAR7PnSPjJiOZLW9WaaVUzbZDYLka/W83WfNuvmMaphr
XXSt1q+QGIRIGMLUWitXVsNat5BL2ONFpgPnMQGC5WvFLI+osAbOdy+Au4IANaT7
iTGOAAEYRKX7N9dmv5stQNQXiLT4c2moyflj7MvGKXCIWooAq0C2GRS52ci5RFi3
hUKT38Oa80QQJIHFI2RvFj5t9zfcAFeBqhzrZdH0hHhE4HB8xhbGhYtFRnc+jSp0
PfDxOKwbacl8Cq5lOfeTHIItrAiw0yFgOVPDKh6ufBisjZJFCRz+ZcaMyQiYeVKM
k7f5Bp7ajF5OwbHksKoQexeRaETiPPw=
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:51:22 2026 by rpki-client