Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/d18c2d05-c95b-3673-893c-f2c5d5ffa612.roa
File:                     d18c2d05-c95b-3673-893c-f2c5d5ffa612.roa (raw, json)
Hash identifier:          BSb6nbjsINQvwcei5Utm0XwwbyHJXQJhaFf6LKyTp+k=
Subject key identifier:   B6:83:24:BF:FE:AB:A9:13:E7:31:21:DA:E4:EB:A2:4F:35:20:42:90
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F4328584CC7773553F0CA7D1A19B9B140
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/d18c2d05-c95b-3673-893c-f2c5d5ffa612.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     396982
IP address blocks:        74.120.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:35:53:f0:ca:7d:1a:19:b9:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=bb97d3fa-5386-48dd-a174-51699ba36508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:30:65:9b:41:36:ed:e2:76:db:98:97:2a:55:
                    70:2d:88:dc:a4:38:f4:c3:00:78:c0:51:04:09:f0:
                    44:83:ca:9b:62:44:a9:d9:30:24:8c:86:7c:0c:21:
                    f6:ba:1a:4f:17:aa:44:fc:36:78:7b:d8:b8:31:49:
                    b6:83:00:c5:48:b6:ba:fa:ed:e4:a0:09:c3:51:c5:
                    af:29:54:12:be:0f:c6:9c:c9:36:aa:a7:23:d8:54:
                    8d:96:7b:b8:2a:b9:4d:90:d8:e2:80:2d:d0:84:c0:
                    72:11:c4:76:a1:a9:e0:59:62:90:9b:85:92:2b:05:
                    ea:c4:67:f3:27:52:38:dc:98:fa:27:98:6e:21:05:
                    e8:71:9f:c3:09:f4:23:f0:b0:c8:78:ea:55:d7:8c:
                    d8:b5:c8:13:94:6a:79:38:9e:1c:5f:be:ef:ab:e3:
                    22:b0:22:c4:92:c1:13:d2:30:a7:f0:6e:0b:c4:b3:
                    13:94:60:93:06:fa:58:c4:f9:21:50:b3:11:a2:41:
                    ac:89:59:90:93:34:d7:6d:9a:1e:6b:fa:3c:d3:81:
                    2f:9b:c9:15:d8:2e:17:09:79:46:c2:52:e2:9a:97:
                    71:ab:32:eb:4e:48:83:2e:1f:59:dc:f0:f3:fb:4d:
                    de:f3:dd:9e:e2:71:bf:11:a9:68:fd:17:06:6e:b4:
                    a6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:83:24:BF:FE:AB:A9:13:E7:31:21:DA:E4:EB:A2:4F:35:20:42:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/d18c2d05-c95b-3673-893c-f2c5d5ffa612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:e9:32:27:54:69:e8:eb:af:47:75:29:59:68:42:69:df:e5:
         d0:ca:d6:bc:8d:4b:c6:57:a4:4a:7b:94:f6:c1:ab:c3:2d:27:
         11:80:11:21:51:e1:c7:5b:cc:cf:30:c0:49:e6:e9:9a:5f:33:
         d0:23:66:80:63:26:a9:a2:75:f7:fa:20:3d:c7:d0:55:92:f8:
         32:bb:11:33:b3:6f:d8:7b:5c:83:38:6c:e2:bc:8b:3a:91:69:
         49:34:9f:8b:8b:58:f0:94:79:99:3d:4c:e8:92:52:5e:ce:95:
         c6:e1:c8:43:92:16:a9:4a:3b:34:9b:fe:33:00:1c:35:58:5b:
         65:d4:a7:23:a9:d1:26:b1:67:25:d0:72:85:ec:47:88:d1:c3:
         83:d1:1e:59:6e:b3:51:80:84:a8:54:cc:eb:de:6a:0a:0f:05:
         dd:73:d4:01:ca:06:05:6a:69:cb:f4:ee:a5:16:31:e3:50:f8:
         2c:22:e9:78:4d:8e:0d:29:2a:ff:a6:70:3d:04:66:9c:c4:f8:
         d7:11:81:dd:1a:b0:60:cb:ea:57:81:85:d1:96:a4:99:87:88:
         aa:7a:bc:9c:c7:e4:41:76:18:0a:ec:d9:ee:7e:ec:b7:68:59:
         81:bb:71:41:42:3d:88:4b:5b:b4:42:fe:d2:95:28:88:1b:cc:
         1d:e2:4c:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzHdzVT8Mp9Ghm5sUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmM2ODg0ZDYtYjExZS00MjgwLTljNGMtODE3NzI4N2Q5
ODY5MB4XDTI2MDIwNzAyMDAzMVoXDTI2MDUwODAxMDAzMVowLzEtMCsGA1UEAxMk
YmI5N2QzZmEtNTM4Ni00OGRkLWExNzQtNTE2OTliYTM2NTA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjBlm0E27eJ225iXKlVwLYjcpDj0wwB4wFEE
CfBEg8qbYkSp2TAkjIZ8DCH2uhpPF6pE/DZ4e9i4MUm2gwDFSLa6+u3koAnDUcWv
KVQSvg/GnMk2qqcj2FSNlnu4KrlNkNjigC3QhMByEcR2oangWWKQm4WSKwXqxGfz
J1I43Jj6J5huIQXocZ/DCfQj8LDIeOpV14zYtcgTlGp5OJ4cX77vq+MisCLEksET
0jCn8G4LxLMTlGCTBvpYxPkhULMRokGsiVmQkzTXbZoea/o804Evm8kV2C4XCXlG
wlLimpdxqzLrTkiDLh9Z3PDz+03e892e4nG/Ealo/RcGbrSmBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLaDJL/+q6kT5zEh2uTrok81IEKQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYzY4
ODRkNi1iMTFlLTQyODAtOWM0Yy04MTc3Mjg3ZDk4NjkvZDE4YzJkMDUtYzk1Yi0z
NjczLTg5M2MtZjJjNWQ1ZmZhNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmM2ODg0ZDYtYjExZS00MjgwLTlj
NGMtODE3NzI4N2Q5ODY5L2JjNjg4NGQ2LWIxMWUtNDI4MC05YzRjLTgxNzcyODdk
OTg2OS5jcmwwHwYDVR0jBBgwFoAUFcjuvBdfaxDD3HrPV9TR85APDocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYzY4ODRkNi1iMTFlLTQyODAtOWM0Yy04MTc3
Mjg3ZDk4NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASngOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJzpMidUaejrr0d1KVloQmnf5dDK1ryNS8ZXpEp7lPbBq8MtJxGAESFR
4cdbzM8wwEnm6ZpfM9AjZoBjJqmidff6ID3H0FWS+DK7ETOzb9h7XIM4bOK8izqR
aUk0n4uLWPCUeZk9TOiSUl7OlcbhyEOSFqlKOzSb/jMAHDVYW2XUpyOp0SaxZyXQ
coXsR4jRw4PRHllus1GAhKhUzOveagoPBd1z1AHKBgVqacv07qUWMeNQ+Cwi6XhN
jg0pKv+mcD0EZpzE+NcRgd0asGDL6leBhdGWpJmHiKp6vJzH5EF2GArs2e5+7Ldo
WYG7cUFCPYhLW7RC/tKVKIgbzB3iTIg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:11:49 2026 by rpki-client