Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/4060bb7b-e475-30a3-8893-bc8967930f24.roa
File:                     4060bb7b-e475-30a3-8893-bc8967930f24.roa (raw, json)
Hash identifier:          /d0UACqhvir07Pk/v4h7oXZ1q/cBPLhjAR+QC6OV7Oo=
Subject key identifier:   56:E8:4E:B8:30:15:24:40:5B:36:98:FE:12:0E:2D:27:31:98:17:A0
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F4328584E0700A084928F6699F809ED80
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/4060bb7b-e475-30a3-8893-bc8967930f24.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     835
IP address blocks:        74.119.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:a0:84:92:8f:66:99:f8:09:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=1f60431d-10a6-4775-b768-1c08e2dfafab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:82:00:b4:44:e5:81:50:a7:3e:e9:84:a8:67:
                    c0:87:d4:b3:84:96:4e:b1:6d:5c:63:87:d0:d6:7c:
                    b9:44:77:4e:15:5d:f5:66:d7:fd:f6:ea:28:2a:f8:
                    20:ac:e9:62:29:31:f1:62:76:a3:ca:20:50:19:44:
                    e6:37:7f:db:ea:69:fe:85:ab:d1:12:fd:63:f2:ba:
                    42:ec:59:2b:ba:fd:b7:d3:09:5d:c8:40:d3:46:c0:
                    10:96:46:03:9c:4f:2d:87:3f:d2:be:b2:ee:f6:ed:
                    43:86:cb:20:05:f2:44:1d:4d:94:97:82:51:64:d7:
                    e4:56:2f:f4:bd:0f:0e:54:4c:b2:73:c8:04:bd:ca:
                    91:8f:2d:78:39:2c:79:08:f4:28:9b:d4:d2:49:93:
                    89:98:3a:27:01:6c:d7:4e:d6:2b:0b:42:40:0f:0a:
                    e5:19:cd:e4:f1:96:89:bd:e0:61:60:e0:9e:47:70:
                    75:57:26:c0:36:82:e5:c9:9f:8a:72:56:a3:85:36:
                    57:41:7a:33:82:88:e9:85:ca:41:a1:4d:74:e6:92:
                    3a:a0:2f:1a:7e:a3:5a:87:cf:37:83:d5:bc:6a:1b:
                    96:8f:5c:15:8d:a9:76:9f:93:83:26:48:b3:7c:c3:
                    04:2d:bc:87:c7:cd:1f:85:e9:92:5e:70:0f:d9:5b:
                    7a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E8:4E:B8:30:15:24:40:5B:36:98:FE:12:0E:2D:27:31:98:17:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/4060bb7b-e475-30a3-8893-bc8967930f24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:49:5b:0a:24:6f:63:f5:51:a3:6c:5a:1f:ad:2e:cb:de:36:
         27:97:94:e0:0a:f4:c6:42:9f:10:e3:0e:3b:27:56:fc:cb:71:
         60:86:23:ff:f4:28:be:9d:5b:a8:ee:1a:39:c4:ee:2c:5b:92:
         be:13:b4:06:b0:b5:dc:3b:24:d8:3f:cd:e7:ae:c6:a4:68:c3:
         ee:fe:5a:c6:81:b2:4e:01:81:02:95:4f:a0:95:93:9c:3f:9e:
         b5:fa:c5:1d:91:7b:d3:6f:a7:1d:7f:99:c6:6a:05:73:58:6f:
         c5:5d:e0:ec:7f:2f:0d:93:70:db:52:9b:7c:1d:aa:87:9a:16:
         71:40:32:c5:d0:06:e1:fa:db:3e:5b:29:19:0a:95:43:f4:a5:
         46:2a:3c:e0:74:80:01:52:7f:93:53:fd:0c:58:9a:87:7c:14:
         5b:a5:12:a2:8e:37:91:4d:78:17:a6:c7:46:6a:1b:98:54:c6:
         3d:59:e1:a8:fd:13:53:76:5d:72:14:2f:ce:98:b5:9c:92:5b:
         8c:8b:ab:a1:e7:ce:ec:a3:ad:7e:91:3f:6e:9e:0b:59:35:6b:
         4a:a5:ed:29:a9:b1:98:89:00:42:04:68:c6:da:43:80:91:d6:
         d9:95:79:47:5a:ca:85:8d:8a:98:21:02:db:b0:df:22:48:4f:
         a3:fc:42:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4HAKCEko9mmfgJ7YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDcyZTUyN2EtODQ4YS00ZjNkLWI3YTAtNGYwMDFlNzU3
ZWU3MB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk
MWY2MDQzMWQtMTBhNi00Nzc1LWI3NjgtMWMwOGUyZGZhZmFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oIAtETlgVCnPumEqGfAh9SzhJZOsW1cY4fQ
1ny5RHdOFV31Ztf99uooKvggrOliKTHxYnajyiBQGUTmN3/b6mn+havREv1j8rpC
7Fkruv230wldyEDTRsAQlkYDnE8thz/SvrLu9u1DhssgBfJEHU2Ul4JRZNfkVi/0
vQ8OVEyyc8gEvcqRjy14OSx5CPQom9TSSZOJmDonAWzXTtYrC0JADwrlGc3k8ZaJ
veBhYOCeR3B1VybANoLlyZ+KclajhTZXQXozgojphcpBoU105pI6oC8afqNah883
g9W8ahuWj1wVjal2n5ODJkizfMMELbyHx80fhemSXnAP2Vt6PwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFboTrgwFSRAWzaY/hIOLScxmBegMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NzJl
NTI3YS04NDhhLTRmM2QtYjdhMC00ZjAwMWU3NTdlZTcvNDA2MGJiN2ItZTQ3NS0z
MGEzLTg4OTMtYmM4OTY3OTMwZjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDcyZTUyN2EtODQ4YS00ZjNkLWI3
YTAtNGYwMDFlNzU3ZWU3LzQ3MmU1MjdhLTg0OGEtNGYzZC1iN2EwLTRmMDAxZTc1
N2VlNy5jcmwwHwYDVR0jBBgwFoAULDova8hbNxopBZvRg4K1hU1FxXAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80NzJlNTI3YS04NDhhLTRmM2QtYjdhMC00ZjAw
MWU3NTdlZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASneXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI5JWwokb2P1UaNsWh+tLsveNieXlOAK9MZCnxDjDjsnVvzLcWCGI//0
KL6dW6juGjnE7ixbkr4TtAawtdw7JNg/zeeuxqRow+7+WsaBsk4BgQKVT6CVk5w/
nrX6xR2Re9Nvpx1/mcZqBXNYb8Vd4Ox/Lw2TcNtSm3wdqoeaFnFAMsXQBuH62z5b
KRkKlUP0pUYqPOB0gAFSf5NT/QxYmod8FFulEqKON5FNeBemx0ZqG5hUxj1Z4aj9
E1N2XXIUL86YtZySW4yLq6HnzuyjrX6RP26eC1k1a0ql7SmpsZiJAEIEaMbaQ4CR
1tmVeUdayoWNipghAtuw3yJIT6P8Qt4=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:12:53 2026 by rpki-client