Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/b32c3b67-a8df-3503-9350-ca9f3aaef95f.roa
File:                     b32c3b67-a8df-3503-9350-ca9f3aaef95f.roa (raw, json)
Hash identifier:          usu6NBNTaXIArP5BTqwemORL5xJfhJOn1aA1+kF/pxY=
Subject key identifier:   D1:BA:25:1D:63:22:4B:B5:90:73:51:9E:9A:1C:8D:AA:8B:15:39:2E
Certificate issuer:       /CN=c68f99cd-e059-4345-ac58-8ebecccac84e
Certificate serial:       010D0C9F4328584EEBECA05CD7EBB7FE09314500
Authority key identifier: 0A:66:C6:B5:E0:5F:C3:B6:7C:46:EA:46:88:F5:BA:1E:86:0C:0C:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/b32c3b67-a8df-3503-9350-ca9f3aaef95f.roa
Signing time:             Sat 22 Aug 2026 13:00:12 +0000
ROA not before:           Sat 22 Aug 2026 13:00:12 +0000
ROA not after:            Fri 20 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        74.123.52.0/24 maxlen: 24
                          74.123.53.0/24 maxlen: 24
                          74.123.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:eb:ec:a0:5c:d7:eb:b7:fe:09:31:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c68f99cd-e059-4345-ac58-8ebecccac84e
        Validity
            Not Before: Aug 22 13:00:12 2026 GMT
            Not After : Nov 20 14:00:12 2026 GMT
        Subject: CN=50673f8f-8b07-4d15-b6e6-9cc8899e3e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3c:37:42:f7:f4:a9:11:aa:bf:91:a3:18:12:
                    a7:d8:2e:ad:f3:e4:0c:99:ed:06:b7:2b:e4:51:b3:
                    01:c7:34:a1:3b:d3:fa:5d:54:59:5a:20:c4:55:c4:
                    ea:15:c8:89:4e:66:58:c0:6f:fd:a1:5c:46:fd:ac:
                    a2:2e:43:3e:93:a5:50:09:6a:dc:c5:31:92:43:8b:
                    07:8c:4c:4c:a7:c4:99:cd:b9:00:3e:ee:24:f1:9c:
                    5e:90:7f:79:d0:ce:aa:98:70:64:e5:47:f0:7b:72:
                    0e:11:b6:b3:9c:c8:75:39:b3:0c:90:42:0c:5e:71:
                    58:a8:b9:04:ce:45:51:e0:04:2d:85:a7:ba:2b:1a:
                    e7:ed:59:50:1c:f1:39:70:f8:cd:ea:48:e3:6e:f4:
                    56:c6:f4:32:e9:90:d9:6f:36:a3:4a:32:10:de:2e:
                    2a:0c:21:ed:a6:49:e8:bc:a0:b1:08:0e:84:33:d3:
                    89:03:4b:f1:1a:21:96:58:9b:54:bf:fb:d6:2c:d6:
                    05:5c:ab:f1:26:32:d6:31:01:10:c0:ac:b7:a1:59:
                    dc:c2:39:0a:fb:99:c8:20:0b:72:f8:0b:98:ae:9c:
                    c4:ff:02:33:6b:f5:2b:f3:15:54:84:57:35:cf:e5:
                    a5:22:fa:a0:cd:62:f5:c4:76:f3:52:c5:6f:99:1f:
                    b8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BA:25:1D:63:22:4B:B5:90:73:51:9E:9A:1C:8D:AA:8B:15:39:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/b32c3b67-a8df-3503-9350-ca9f3aaef95f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.crl

            X509v3 Authority Key Identifier:
                keyid:0A:66:C6:B5:E0:5F:C3:B6:7C:46:EA:46:88:F5:BA:1E:86:0C:0C:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.52.0-74.123.54.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:82:76:7d:8d:76:3f:b8:0e:d1:e1:62:4a:b5:e1:90:cc:f4:
         9c:f3:c2:44:2f:c9:4b:62:a5:45:b4:a6:5f:4e:ba:3a:02:89:
         ff:e8:e4:44:9d:be:a4:c0:5e:36:56:3d:46:d9:3a:0f:d5:6b:
         1a:33:33:7b:0e:3d:3e:80:c2:d8:07:06:82:3c:66:d3:3f:b0:
         b0:92:8d:eb:8f:1a:48:f1:96:d1:d4:0f:de:70:49:98:98:46:
         e9:d3:c4:16:14:6f:1f:cb:77:c1:93:d7:0c:02:3f:79:53:fb:
         7d:cf:ea:9b:34:c5:38:0a:17:33:98:89:12:17:61:b9:44:45:
         d4:30:16:10:4c:40:59:76:29:33:20:96:6c:da:7d:20:39:9a:
         13:6c:b4:f2:4a:e7:5a:a2:5d:c1:13:fa:78:b7:a1:c2:a1:59:
         0d:c7:89:15:4f:53:7a:a0:7e:c4:e9:29:5e:92:a6:9e:8e:e6:
         6b:db:b2:b6:33:56:06:fc:46:d4:d3:2f:70:86:b1:1c:f3:85:
         99:cc:98:81:2b:f4:cb:c5:1b:b0:80:60:7e:de:77:9c:31:7f:
         c7:a4:be:32:d2:16:87:e7:9a:b8:03:33:38:89:7e:99:6c:69:
         96:cc:39:b6:c2:78:09:23:3a:b9:a8:1e:07:6f:83:80:6a:c6:
         85:92:6e:78
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE7r7KBc1+u3/gkxRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzY4Zjk5Y2QtZTA1OS00MzQ1LWFjNTgtOGViZWNjY2Fj
ODRlMB4XDTI2MDgyMjEzMDAxMloXDTI2MTEyMDE0MDAxMlowLzEtMCsGA1UEAxMk
NTA2NzNmOGYtOGIwNy00ZDE1LWI2ZTYtOWNjODg5OWUzZTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzw3Qvf0qRGqv5GjGBKn2C6t8+QMme0Gtyvk
UbMBxzShO9P6XVRZWiDEVcTqFciJTmZYwG/9oVxG/ayiLkM+k6VQCWrcxTGSQ4sH
jExMp8SZzbkAPu4k8ZxekH950M6qmHBk5Ufwe3IOEbaznMh1ObMMkEIMXnFYqLkE
zkVR4AQthae6Kxrn7VlQHPE5cPjN6kjjbvRWxvQy6ZDZbzajSjIQ3i4qDCHtpkno
vKCxCA6EM9OJA0vxGiGWWJtUv/vWLNYFXKvxJjLWMQEQwKy3oVncwjkK+5nIIAty
+AuYrpzE/wIza/Ur8xVUhFc1z+WlIvqgzWL1xHbzUsVvmR+4ZwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFNG6JR1jIku1kHNRnpocjaqLFTkuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNjhm
OTljZC1lMDU5LTQzNDUtYWM1OC04ZWJlY2NjYWM4NGUvYjMyYzNiNjctYThkZi0z
NTAzLTkzNTAtY2E5ZjNhYWVmOTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzY4Zjk5Y2QtZTA1OS00MzQ1LWFj
NTgtOGViZWNjY2FjODRlL2M2OGY5OWNkLWUwNTktNDM0NS1hYzU4LThlYmVjY2Nh
Yzg0ZS5jcmwwHwYDVR0jBBgwFoAUCmbGteBfw7Z8RupGiPW6HoYMDDgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNjhmOTljZC1lMDU5LTQzNDUtYWM1OC04ZWJl
Y2NjYWM4NGUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJKezQD
BABKezYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAAoJ2fY12P7gO0eFiSrXhkMz0nPPCRC/JS2KlRbSmX066
OgKJ/+jkRJ2+pMBeNlY9Rtk6D9VrGjMzew49PoDC2AcGgjxm0z+wsJKN648aSPGW
0dQP3nBJmJhG6dPEFhRvH8t3wZPXDAI/eVP7fc/qmzTFOAoXM5iJEhdhuURF1DAW
EExAWXYpMyCWbNp9IDmaE2y08krnWqJdwRP6eLehwqFZDceJFU9TeqB+xOkpXpKm
no7ma9uytjNWBvxG1NMvcIaxHPOFmcyYgSv0y8UbsIBgft53nDF/x6S+MtIWh+ea
uAMzOIl+mWxplsw5tsJ4CSM6uageB2+DgGrGhZJueA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 16:45:41 2026 by rpki-client