Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/8fef8fcd-3718-3b81-919e-aa1301bd6c88.roa
File:                     8fef8fcd-3718-3b81-919e-aa1301bd6c88.roa (raw, json)
Hash identifier:          jhopKnZowqkDXu4EPo9W6Tsv3gsx1+itEaduYyrV2fA=
Subject key identifier:   FC:85:AE:EC:1E:7B:E0:E9:CA:A0:07:8C:F3:A9:7A:2A:0F:84:1B:2D
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584EA79B38346FD0E4D7DE3797EC
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/8fef8fcd-3718-3b81-919e-aa1301bd6c88.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36542
IP address blocks:        74.174.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:38:34:6f:d0:e4:d7:de:37:97:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a7984e18-18a9-4462-b60e-6c32674d2999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7a:7d:43:8c:f6:22:a1:48:fd:02:64:97:c0:
                    1b:45:25:d6:88:19:50:86:ad:5a:da:ec:08:d3:b2:
                    b9:3f:7f:48:72:fe:b1:ab:98:74:3e:52:9e:98:7d:
                    f1:c0:92:c9:aa:c4:4a:f2:f6:67:73:2e:4c:20:4c:
                    d1:8d:5b:75:a7:f7:0d:8e:1e:56:a6:c2:a4:2a:a3:
                    d1:f7:21:df:cb:ce:6f:39:e5:7d:7c:f8:a5:6e:88:
                    ca:5a:68:4a:26:48:c3:8b:c9:ad:fb:95:5d:fa:0c:
                    97:8d:37:90:52:76:f2:80:a4:0a:6f:40:4b:a1:6b:
                    c7:f8:ef:4a:6b:6d:4e:2b:db:b7:65:ba:be:3a:b4:
                    ba:21:55:f7:5e:2c:bb:49:19:99:db:41:7d:98:f3:
                    1f:f9:cf:9f:aa:7f:ea:e2:c3:85:5b:d9:11:bc:ca:
                    dd:37:3f:ec:4e:8c:88:33:da:8f:d3:f4:40:a1:bc:
                    20:fc:f8:e1:20:f7:f3:54:51:5c:f5:16:ac:7b:1c:
                    3d:3d:8b:4b:5e:bd:6a:bf:89:ff:95:e3:54:0c:e9:
                    d6:fc:63:aa:14:99:a9:d9:7d:4e:35:e0:ff:a7:af:
                    aa:2d:23:eb:af:5a:6e:f1:57:70:f7:41:37:f7:73:
                    fc:35:b8:08:60:52:20:8c:73:7c:f2:32:27:e9:cd:
                    57:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:85:AE:EC:1E:7B:E0:E9:CA:A0:07:8C:F3:A9:7A:2A:0F:84:1B:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/8fef8fcd-3718-3b81-919e-aa1301bd6c88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.174.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:2f:e1:4b:d6:b5:6b:e9:2e:14:0d:0b:ce:19:d0:f2:17:4a:
         16:f8:40:53:36:1d:3c:cb:3f:7b:da:97:82:37:04:a2:71:88:
         4b:38:d0:11:6e:80:49:8b:f0:b2:4a:45:3d:cb:d2:e7:03:1e:
         2b:6c:7c:db:b4:64:e3:51:26:21:39:18:bb:73:5f:ef:1b:f0:
         eb:1c:f3:f2:a9:d2:31:15:85:ae:9d:85:06:36:4c:23:16:cd:
         54:85:e6:ff:74:69:d1:a5:31:14:4f:2d:27:b3:32:38:a8:b8:
         a1:ed:e1:8f:08:e3:c5:3b:c2:00:95:21:a9:12:d2:fb:f1:96:
         57:6b:53:80:87:54:30:86:24:0b:2d:f9:63:9f:7d:5e:0b:89:
         d5:ba:e0:7c:1f:55:60:d3:61:db:74:8c:8b:80:b8:d0:d1:29:
         38:7b:67:f6:d0:7d:07:6e:3e:e5:d1:52:c0:30:5d:9d:70:5e:
         ae:19:86:25:31:22:72:d2:74:08:36:82:24:a3:0e:fc:cb:d4:
         31:4e:11:ae:45:72:4b:77:ae:13:ce:b9:41:70:5f:2b:97:41:
         5e:c1:5a:dc:6b:6a:5b:0c:21:7e:32:f1:f2:8c:87:5a:ec:bb:
         45:6e:7b:9e:bd:7c:fb:68:ac:a8:bc:85:4e:ed:42:a4:5d:a1:
         de:68:d4:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmzg0b9Dk1943l+wwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzE0MTg2ZGYtODdiYS00ZGQ1LWFkYmYtMWM2YzJiYmUw
NGE4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YTc5ODRlMTgtMThhOS00NDYyLWI2MGUtNmMzMjY3NGQyOTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnp9Q4z2IqFI/QJkl8AbRSXWiBlQhq1a2uwI
07K5P39Icv6xq5h0PlKemH3xwJLJqsRK8vZncy5MIEzRjVt1p/cNjh5WpsKkKqPR
9yHfy85vOeV9fPilbojKWmhKJkjDi8mt+5Vd+gyXjTeQUnbygKQKb0BLoWvH+O9K
a21OK9u3Zbq+OrS6IVX3Xiy7SRmZ20F9mPMf+c+fqn/q4sOFW9kRvMrdNz/sToyI
M9qP0/RAobwg/PjhIPfzVFFc9Rasexw9PYtLXr1qv4n/leNUDOnW/GOqFJmp2X1O
NeD/p6+qLSPrr1pu8Vdw90E393P8NbgIYFIgjHN88jIn6c1XMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPyFruwee+DpyqAHjPOpeioPhBstMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQx
ODZkZi04N2JhLTRkZDUtYWRiZi0xYzZjMmJiZTA0YTgvOGZlZjhmY2QtMzcxOC0z
YjgxLTkxOWUtYWExMzAxYmQ2Yzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzE0MTg2ZGYtODdiYS00ZGQ1LWFk
YmYtMWM2YzJiYmUwNGE4LzMxNDE4NmRmLTg3YmEtNGRkNS1hZGJmLTFjNmMyYmJl
MDRhOC5jcmwwHwYDVR0jBBgwFoAUUhXIm1E3DpTxq8Kvfcj2u+Hy5W8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQxODZkZi04N2JhLTRkZDUtYWRiZi0xYzZj
MmJiZTA0YTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASq4gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHcv4UvWtWvpLhQNC84Z0PIXShb4QFM2HTzLP3val4I3BKJxiEs40BFu
gEmL8LJKRT3L0ucDHitsfNu0ZONRJiE5GLtzX+8b8Osc8/Kp0jEVha6dhQY2TCMW
zVSF5v90adGlMRRPLSezMjiouKHt4Y8I48U7wgCVIakS0vvxlldrU4CHVDCGJAst
+WOffV4LidW64HwfVWDTYdt0jIuAuNDRKTh7Z/bQfQduPuXRUsAwXZ1wXq4ZhiUx
InLSdAg2giSjDvzL1DFOEa5Fckt3rhPOuUFwXyuXQV7BWtxralsMIX4y8fKMh1rs
u0Vue569fPtorKi8hU7tQqRdod5o1NY=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:15:02 2026 by rpki-client