Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/04789cfa-e1a3-3be0-acca-733ceedf1805.roa
File:                     04789cfa-e1a3-3be0-acca-733ceedf1805.roa (raw, json)
Hash identifier:          /8XFNePyy9eznNPjmJVrMkl88i/1sEtczo7RgECXLBw=
Subject key identifier:   43:19:6C:94:7C:B2:C4:CF:F0:72:C4:2C:EA:32:00:BB:C8:35:D3:CB
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B9ACBF2D2CF032295A6D0C000
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/04789cfa-e1a3-3be0-acca-733ceedf1805.roa
Signing time:             Wed 22 Oct 2025 09:13:07 +0000
ROA not before:           Wed 22 Oct 2025 09:13:07 +0000
ROA not after:            Tue 20 Jan 2026 10:13:07 +0000
asID:                     395793
IP address blocks:        74.82.110.0/24 maxlen: 24
                          74.82.111.0/24 maxlen: 24
                          206.217.78.0/24 maxlen: 24
                          206.217.91.0/24 maxlen: 24
                          206.217.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9a:cb:f2:d2:cf:03:22:95:a6:d0:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 22 09:13:07 2025 GMT
            Not After : Jan 20 10:13:07 2026 GMT
        Subject: CN=6e529aa3-eb88-4bee-8693-e7f195d23f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:20:9c:69:56:0c:36:5a:03:af:a0:d9:11:02:
                    69:f1:7b:8f:f4:40:be:46:2d:fe:5b:57:5a:61:de:
                    d9:3c:aa:88:19:31:d1:77:fe:46:f2:d5:32:d5:6a:
                    f1:65:e0:df:f8:25:04:fb:57:8c:4e:e3:83:7b:f3:
                    28:ed:3f:43:ea:9e:2e:e3:ed:43:f8:f3:38:6b:1d:
                    39:f7:c3:ac:49:5e:ce:57:ea:6c:7b:0c:ff:98:14:
                    c5:d8:f1:8f:56:4e:f0:57:81:76:10:95:0d:7f:64:
                    ab:e6:e5:5c:67:cf:37:7b:5a:94:10:41:83:71:43:
                    8b:a4:48:07:8e:03:17:49:0e:3f:f6:32:82:d3:16:
                    0f:1e:94:ca:ec:9e:fe:41:ac:74:e6:19:80:9c:85:
                    97:eb:8c:3a:49:9f:a5:de:f7:93:fb:a7:16:c6:5b:
                    3a:9b:83:77:64:82:e7:10:ce:33:21:cc:bd:78:61:
                    c6:05:30:82:a8:9d:c3:71:4b:60:d2:15:61:f1:e8:
                    90:aa:ed:e2:79:1b:09:a1:99:fc:7b:27:7a:cf:58:
                    6d:53:72:0d:da:df:2c:56:8e:de:74:1e:fb:8b:5a:
                    c5:07:5e:60:51:be:c3:48:cc:fa:24:ce:27:0f:af:
                    f4:59:95:a1:06:99:11:fe:51:17:c1:2c:11:6d:aa:
                    9a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:19:6C:94:7C:B2:C4:CF:F0:72:C4:2C:EA:32:00:BB:C8:35:D3:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/04789cfa-e1a3-3be0-acca-733ceedf1805.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.82.110.0/23
                  206.217.78.0/24
                  206.217.91.0/24
                  206.217.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:9e:73:93:9f:a9:a8:8a:22:3a:53:21:2f:14:9e:a1:e3:f9:
         57:9c:b8:1e:ce:3b:e7:4b:02:cc:96:1b:32:e3:2a:db:a4:4d:
         6a:97:0a:4b:f7:9b:e6:64:e6:29:10:41:d8:3b:38:52:c4:97:
         59:be:42:f5:21:61:bf:fe:b0:0d:c8:c4:13:05:fd:54:c4:ee:
         c3:19:8f:eb:86:98:37:32:1a:0b:7c:80:39:43:2c:42:15:01:
         40:ef:f0:d6:0f:a7:ff:a2:a9:d7:80:22:db:5e:66:2c:67:7e:
         b7:34:67:f1:4f:9f:7e:60:21:89:4f:71:39:f5:26:06:62:49:
         69:98:90:2f:9a:06:44:b8:f1:4f:a4:b0:79:5f:2c:15:99:54:
         a2:29:19:11:f5:c0:dc:79:21:09:81:42:53:43:9b:44:7b:91:
         bb:92:e6:fa:36:13:dc:e3:25:37:25:c6:c8:97:9e:86:96:44:
         4b:90:f1:28:55:1f:36:5d:52:2d:06:63:78:d8:7c:33:4b:f1:
         16:75:43:6d:67:92:4d:9c:87:bc:20:c4:77:6e:17:e8:0c:1c:
         13:8b:bb:9a:23:db:a2:df:0a:4f:ff:1f:56:eb:4b:7b:42:9d:
         29:df:02:b8:65:11:2c:0e:13:03:52:19:a4:aa:f8:86:5a:20:
         a1:aa:b5:b8
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEuay/LSzwMilabQwAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI1MTAyMjA5MTMwN1oXDTI2MDEyMDEwMTMwN1owLzEtMCsGA1UEAxMk
NmU1MjlhYTMtZWI4OC00YmVlLTg2OTMtZTdmMTk1ZDIzZjhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCCcaVYMNloDr6DZEQJp8XuP9EC+Ri3+W1da
Yd7ZPKqIGTHRd/5G8tUy1WrxZeDf+CUE+1eMTuODe/Mo7T9D6p4u4+1D+PM4ax05
98OsSV7OV+psewz/mBTF2PGPVk7wV4F2EJUNf2Sr5uVcZ883e1qUEEGDcUOLpEgH
jgMXSQ4/9jKC0xYPHpTK7J7+Qax05hmAnIWX64w6SZ+l3veT+6cWxls6m4N3ZILn
EM4zIcy9eGHGBTCCqJ3DcUtg0hVh8eiQqu3ieRsJoZn8eyd6z1htU3IN2t8sVo7e
dB77i1rFB15gUb7DSMz6JM4nD6/0WZWhBpkR/lEXwSwRbaqatQIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFEMZbJR8ssTP8HLELOoyALvINdPLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDQ3ODljZmEtZTFhMy0z
YmUwLWFjY2EtNzMzY2VlZGYxODA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBSlJuAwQA
ztlOAwQAztlbAwQAztlgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAqec5OfqaiKIjpTIS8UnqHj+VecuB7O
O+dLAsyWGzLjKtukTWqXCkv3m+Zk5ikQQdg7OFLEl1m+QvUhYb/+sA3IxBMF/VTE
7sMZj+uGmDcyGgt8gDlDLEIVAUDv8NYPp/+iqdeAItteZixnfrc0Z/FPn35gIYlP
cTn1JgZiSWmYkC+aBkS48U+ksHlfLBWZVKIpGRH1wNx5IQmBQlNDm0R7kbuS5vo2
E9zjJTclxsiXnoaWREuQ8ShVHzZdUi0GY3jYfDNL8RZ1Q21nkk2ch7wgxHduF+gM
HBOLu5oj26LfCk//H1brS3tCnSnfArhlESwOEwNSGaSq+IZaIKGqtbg=
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:04:00 2025 by rpki-client