Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3d27f3c7-9207-3342-a1b8-6a1e88ee9fb4.roa
File:                     3d27f3c7-9207-3342-a1b8-6a1e88ee9fb4.roa (raw, json)
Hash identifier:          YRzxy7qqP9IsFYz3XZu0sgkJcEJV75bxIRtdJOIcaCs=
Subject key identifier:   F3:00:AF:2C:75:1E:7E:D3:33:4F:EE:43:21:4F:A1:D0:8E:E4:95:B1
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584EC371CF40825B0B496B84EF00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3d27f3c7-9207-3342-a1b8-6a1e88ee9fb4.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     7843
IP address blocks:        74.87.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:cf:40:82:5b:0b:49:6b:84:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=dc31272f-2bf7-406b-88de-2fa7b6ec8850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f7:17:b8:c8:35:2b:b2:c0:49:c5:93:8a:50:
                    b0:47:16:27:6e:c6:d6:46:84:4b:c0:e1:bd:84:eb:
                    46:cf:a5:35:03:48:55:97:ae:67:2a:83:e3:8a:15:
                    41:eb:e4:09:21:d6:10:e6:1a:ba:62:57:27:e4:cf:
                    8f:c5:eb:66:d5:f6:a1:81:db:8a:00:0e:85:aa:c9:
                    6b:32:9f:ad:d6:b5:df:f8:fc:74:19:35:5a:22:03:
                    2c:2c:42:22:45:8a:44:b9:8f:e2:62:ed:64:5a:b9:
                    31:f8:f3:74:f1:d0:8a:f3:1c:54:04:de:67:9f:1a:
                    d6:67:3c:d2:dc:3a:4b:76:cb:15:90:ab:d6:77:23:
                    89:e7:00:ce:27:49:4c:ff:d3:f4:b7:bb:42:9c:5a:
                    68:b7:f4:04:81:4f:2d:f5:b3:93:69:c3:07:3a:6c:
                    6f:33:4b:62:5f:ef:33:22:cb:e9:db:fe:71:25:51:
                    44:76:1e:f2:0c:c4:82:39:ef:09:9a:44:7f:64:7f:
                    05:35:a1:b5:9c:6c:bd:54:21:a5:65:86:56:22:40:
                    a3:05:ba:f8:75:1d:e6:69:06:ee:47:e7:95:08:bb:
                    08:80:a6:a7:4e:47:66:56:fd:df:23:e4:78:c2:a1:
                    b0:dd:10:31:d8:79:c8:cd:59:62:da:d5:0a:f1:3f:
                    d1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:00:AF:2C:75:1E:7E:D3:33:4F:EE:43:21:4F:A1:D0:8E:E4:95:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3d27f3c7-9207-3342-a1b8-6a1e88ee9fb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.87.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:40:e7:e4:3b:78:79:6b:60:e2:64:fb:12:5c:bd:af:70:3f:
         df:09:c6:b5:f7:f7:83:14:e0:10:d4:36:e4:84:87:6c:59:b4:
         63:74:7c:d3:74:a4:33:ad:86:9f:bc:97:76:8d:e7:92:d0:70:
         02:28:bb:86:2c:02:49:eb:15:c1:b1:8e:e8:8d:b2:d4:ea:71:
         52:cf:a7:1e:18:89:51:6a:cb:6a:e5:96:ad:be:cb:36:e5:b1:
         18:e9:0b:be:0a:1f:a6:09:04:44:8a:0c:46:d9:56:b3:d2:b0:
         16:81:57:52:a7:8f:90:f7:47:e8:3c:7d:bf:ba:61:a2:fc:00:
         25:c7:42:64:b1:a8:ab:50:37:cf:8d:52:ab:66:f2:c4:7a:c4:
         aa:e0:ad:8a:2e:97:66:37:5a:d5:35:ac:47:bb:90:e6:27:a4:
         e8:b8:84:60:e2:7a:8e:fd:c9:54:f5:35:c9:1b:48:41:0c:64:
         e3:2a:81:03:61:f4:62:80:89:09:ec:5a:d5:d4:f9:3f:c7:f6:
         34:b0:c3:0a:e7:0d:17:ce:8c:d6:a4:9d:76:43:35:c6:c1:ef:
         cc:a1:cd:6d:27:9f:55:38:4c:79:89:75:75:98:a4:71:da:19:
         23:ce:4d:a3:5a:e4:fe:c1:1d:a3:b7:21:15:d9:03:73:0b:c0:
         fb:17:4c:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Dcc9AglsLSWuE7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk
ZGMzMTI3MmYtMmJmNy00MDZiLTg4ZGUtMmZhN2I2ZWM4ODUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfcXuMg1K7LAScWTilCwRxYnbsbWRoRLwOG9
hOtGz6U1A0hVl65nKoPjihVB6+QJIdYQ5hq6Ylcn5M+Pxetm1fahgduKAA6Fqslr
Mp+t1rXf+Px0GTVaIgMsLEIiRYpEuY/iYu1kWrkx+PN08dCK8xxUBN5nnxrWZzzS
3DpLdssVkKvWdyOJ5wDOJ0lM/9P0t7tCnFpot/QEgU8t9bOTacMHOmxvM0tiX+8z
Isvp2/5xJVFEdh7yDMSCOe8JmkR/ZH8FNaG1nGy9VCGlZYZWIkCjBbr4dR3maQbu
R+eVCLsIgKanTkdmVv3fI+R4wqGw3RAx2HnIzVli2tUK8T/R+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPMAryx1Hn7TM0/uQyFPodCO5JWxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvM2QyN2YzYzctOTIwNy0z
MzQyLWExYjgtNmExZTg4ZWU5ZmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSleAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHhA5+Q7eHlrYOJk+xJcva9wP98JxrX394MU4BDUNuSEh2xZtGN0fNN0
pDOthp+8l3aN55LQcAIou4YsAknrFcGxjuiNstTqcVLPpx4YiVFqy2rllq2+yzbl
sRjpC74KH6YJBESKDEbZVrPSsBaBV1Knj5D3R+g8fb+6YaL8ACXHQmSxqKtQN8+N
Uqtm8sR6xKrgrYoul2Y3WtU1rEe7kOYnpOi4hGDieo79yVT1NckbSEEMZOMqgQNh
9GKAiQnsWtXU+T/H9jSwwwrnDRfOjNaknXZDNcbB78yhzW0nn1U4THmJdXWYpHHa
GSPOTaNa5P7BHaO3IRXZA3MLwPsXTE8=
-----END CERTIFICATE-----
Generated at Sun Sep 20 20:40:29 2026 by rpki-client