Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b405fb4d-0a9f-390b-9932-8228a4ad455b.roa
File:                     b405fb4d-0a9f-390b-9932-8228a4ad455b.roa (raw, json)
Hash identifier:          CGLucHJcbiRsxXzQlIk4upkw+UxqNFvVDwpcX5l4s68=
Subject key identifier:   E2:84:0C:80:07:2B:ED:33:35:F6:32:5B:10:E6:26:B2:DA:4D:AA:F9
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA161923EC57F7BC7160BFC00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b405fb4d-0a9f-390b-9932-8228a4ad455b.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     10796
IP address blocks:        74.218.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:92:3e:c5:7f:7b:c7:16:0b:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=c92fd32b-c12a-4171-9468-3654d9a37daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c4:8f:38:be:61:a9:84:dd:cd:65:94:da:5c:
                    ba:d5:4a:a5:8d:ab:bf:9a:16:ca:10:75:ec:ac:74:
                    16:2b:09:88:c8:88:6e:3c:d6:f0:68:91:66:76:d7:
                    0b:4d:c2:c6:0a:cf:93:05:65:07:b6:17:bb:0d:05:
                    bd:38:d7:25:bd:dc:72:5c:55:5d:e4:03:f5:95:1f:
                    16:03:42:cb:aa:de:09:4a:a1:6e:c1:21:84:18:c1:
                    39:20:28:c9:b4:c4:9d:c2:66:cf:5a:8a:25:4e:3c:
                    bc:73:a4:75:91:11:7e:5f:e2:a2:65:e4:7b:8e:ba:
                    39:96:51:ed:dc:3a:84:8e:c1:dc:fe:8a:08:29:aa:
                    7a:3c:f8:3c:55:5d:e8:c3:6c:ff:cc:c8:50:b4:30:
                    b6:52:6a:3e:b3:c8:cb:84:38:67:8e:d1:54:3a:0f:
                    68:0c:d4:63:1f:53:b3:13:8b:4e:19:cb:69:5a:36:
                    78:8d:d2:c5:63:96:c4:f9:3f:5a:e9:80:ed:45:31:
                    3e:0d:e9:55:e9:53:bc:db:98:04:e8:83:c9:c0:27:
                    5b:3a:91:ec:15:05:d1:1c:b8:90:bc:3e:68:c0:c9:
                    75:6c:30:2f:a3:cc:c2:b4:27:26:5d:be:6d:77:f7:
                    ce:ec:da:fd:db:0a:ad:93:ee:01:34:d3:a2:75:b0:
                    42:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:84:0C:80:07:2B:ED:33:35:F6:32:5B:10:E6:26:B2:DA:4D:AA:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b405fb4d-0a9f-390b-9932-8228a4ad455b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.218.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:68:37:c1:bd:c3:fd:f4:47:5a:ee:2b:d3:73:99:fd:67:e3:
         50:54:ea:19:80:75:ff:1b:e6:ba:1d:6b:7e:4b:92:45:ac:ac:
         02:d2:ee:48:e4:96:c9:c6:87:20:98:7e:cb:33:2a:a8:01:72:
         1b:6f:63:4e:5a:ee:e1:ab:07:51:23:34:c9:c2:f3:50:f6:ec:
         a8:d4:8a:40:38:07:c3:95:3c:5c:e0:da:f4:d7:0d:74:63:c3:
         f4:61:d4:2a:b9:12:c4:b8:42:e4:f8:9c:d6:1a:ef:b5:64:07:
         f4:54:a3:96:ae:2b:35:83:7c:e5:c8:4a:5a:73:20:97:26:ba:
         16:84:0a:7e:86:af:ef:91:bd:d8:e9:72:85:8e:a7:bb:40:f2:
         4d:88:ed:21:92:13:bf:f7:c7:e9:bb:b3:9b:29:44:6b:04:a2:
         7f:50:15:fa:df:7d:e1:c6:35:e6:1c:fb:93:d4:08:12:70:e4:
         85:24:8f:bc:14:d0:d3:1c:4c:5c:1c:d2:3f:63:df:24:b8:d5:
         f3:de:b9:42:f7:a3:12:1c:2d:17:ac:74:0d:41:69:42:3b:73:
         9c:a1:dc:c2:37:4d:08:36:be:44:d7:c6:23:13:39:fd:c1:38:
         b9:bf:fd:33:2d:95:97:81:87:62:b5:5a:78:c8:5b:84:d2:45:
         52:ec:a2:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYZI+xX97xxYL/AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
YzkyZmQzMmItYzEyYS00MTcxLTk0NjgtMzY1NGQ5YTM3ZGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsSPOL5hqYTdzWWU2ly61Uqljau/mhbKEHXs
rHQWKwmIyIhuPNbwaJFmdtcLTcLGCs+TBWUHthe7DQW9ONclvdxyXFVd5AP1lR8W
A0LLqt4JSqFuwSGEGME5ICjJtMSdwmbPWoolTjy8c6R1kRF+X+KiZeR7jro5llHt
3DqEjsHc/ooIKap6PPg8VV3ow2z/zMhQtDC2Umo+s8jLhDhnjtFUOg9oDNRjH1Oz
E4tOGctpWjZ4jdLFY5bE+T9a6YDtRTE+DelV6VO825gE6IPJwCdbOpHsFQXRHLiQ
vD5owMl1bDAvo8zCtCcmXb5td/fO7Nr92wqtk+4BNNOidbBC2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOKEDIAHK+0zNfYyWxDmJrLaTar5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYjQwNWZiNGQtMGE5Zi0z
OTBiLTk5MzItODIyOGE0YWQ0NTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEStrAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHhoN8G9w/30R1ruK9Nzmf1n41BU6hmAdf8b5roda35LkkWsrALS7kjk
lsnGhyCYfsszKqgBchtvY05a7uGrB1EjNMnC81D27KjUikA4B8OVPFzg2vTXDXRj
w/Rh1Cq5EsS4QuT4nNYa77VkB/RUo5auKzWDfOXISlpzIJcmuhaECn6Gr++Rvdjp
coWOp7tA8k2I7SGSE7/3x+m7s5spRGsEon9QFfrffeHGNeYc+5PUCBJw5IUkj7wU
0NMcTFwc0j9j3yS41fPeuUL3oxIcLResdA1BaUI7c5yh3MI3TQg2vkTXxiMTOf3B
OLm//TMtlZeBh2K1WnjIW4TSRVLsoi0=
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:59:16 2025 by rpki-client