Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/4434e63e-d258-36e2-913f-066239292e64.roa
File:                     4434e63e-d258-36e2-913f-066239292e64.roa (raw, json)
Hash identifier:          L/74mfpam2TytWXzj5fj6i+g6HxYT9q0ln+oR+zyO7k=
Subject key identifier:   C5:41:40:61:9E:76:FB:6A:F9:02:4F:A3:88:6E:D0:E5:0D:21:23:14
Certificate issuer:       /CN=9499abcd-832b-4ba8-80ca-4e0a64b9c987
Certificate serial:       010D0C9F43285849C4D4B16E688CEBBEB5FEEF80
Authority key identifier: EA:46:39:64:C9:E9:71:57:C8:FF:5B:E1:7F:61:67:66:71:9F:EA:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/4434e63e-d258-36e2-913f-066239292e64.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     14618
IP address blocks:        209.94.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/9499abcd-832b-4ba8-80ca-4e0a64b9c987.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/9499abcd-832b-4ba8-80ca-4e0a64b9c987.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:b1:6e:68:8c:eb:be:b5:fe:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9499abcd-832b-4ba8-80ca-4e0a64b9c987
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=fc8a6a1d-8950-4978-b340-827f399912fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:98:62:51:e8:96:0f:ae:cc:4c:0f:cd:ed:9f:
                    65:45:79:96:45:fe:84:b3:70:4e:10:77:de:e4:ff:
                    31:2f:a6:90:9f:15:a5:ea:b4:ca:12:c3:d8:a9:73:
                    5a:8c:23:cb:3b:74:27:3d:62:6f:23:8f:21:62:46:
                    77:e1:95:26:e0:3a:b2:6f:fc:d2:0b:93:ba:07:f8:
                    03:21:a4:67:5e:3b:f1:a1:d3:41:7a:be:8a:01:e2:
                    2d:26:f0:93:dc:0f:14:a4:89:8b:5c:0c:86:ac:2e:
                    16:b2:39:b6:48:2f:26:56:a6:d7:db:72:a3:8e:0b:
                    7b:cc:20:9d:48:0a:9f:f2:17:7d:e8:f0:54:f4:83:
                    5f:6c:8f:02:55:cf:e4:54:4b:d1:5e:1d:f2:75:79:
                    a1:3f:6a:e9:4a:44:76:a4:41:df:4b:fb:3e:b8:69:
                    78:be:a1:b7:0d:a8:d9:dc:95:5f:61:72:75:9b:74:
                    c1:61:05:bf:17:8b:64:75:03:73:d2:3b:d7:f8:ef:
                    f4:02:e4:ff:61:cb:86:ff:06:51:61:b3:ad:4b:ee:
                    e5:21:15:da:d3:44:9a:5a:19:2f:0a:4e:b3:c8:1c:
                    27:8f:00:4f:c3:2b:ff:a4:71:f5:29:ed:1a:5b:64:
                    da:9d:9b:62:27:98:2f:2c:7c:fe:03:d3:69:7c:62:
                    bc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:41:40:61:9E:76:FB:6A:F9:02:4F:A3:88:6E:D0:E5:0D:21:23:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/4434e63e-d258-36e2-913f-066239292e64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/9499abcd-832b-4ba8-80ca-4e0a64b9c987.crl

            X509v3 Authority Key Identifier:
                keyid:EA:46:39:64:C9:E9:71:57:C8:FF:5B:E1:7F:61:67:66:71:9F:EA:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.94.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:80:17:1c:6a:99:8c:02:45:54:6a:45:fb:7f:47:c9:0f:62:
         f7:aa:d7:f2:2d:f0:95:bd:9e:66:f8:00:2e:a3:75:e6:d5:f7:
         a4:e4:68:d3:fa:66:3b:ce:21:1c:ff:bd:77:d3:2d:d5:58:a4:
         9a:d7:94:dc:cf:49:6a:f5:bd:1a:75:e3:6d:fa:a6:20:9e:8b:
         f1:8d:31:6d:4e:9b:a4:29:b0:2c:cd:cf:41:f8:59:02:c7:43:
         64:1d:20:1a:1a:3c:81:83:8f:eb:b4:e1:aa:ae:e1:18:4f:86:
         85:45:65:af:8f:33:f4:2c:5f:49:02:89:a5:e8:93:c5:c7:21:
         ca:b2:d0:59:63:2f:6e:42:e7:ff:21:97:d0:17:a4:0b:ca:c6:
         6b:41:8b:76:17:52:7d:3a:a4:93:43:f2:f5:bd:f8:7a:ab:ed:
         e0:6b:40:4b:94:19:16:9c:59:4e:ce:2a:6d:1e:25:f5:5c:13:
         5d:86:fd:d6:22:1a:bb:e3:e9:47:b6:8e:2c:11:9e:8b:14:e1:
         3d:df:b6:f2:0b:76:2a:0d:6c:56:62:7d:1f:87:81:4d:3d:cb:
         d0:4c:1b:28:4b:65:88:76:50:da:4c:b8:37:5b:8e:92:71:fc:
         25:0a:bc:dd:5b:d7:db:d1:3c:c1:5d:ee:e5:54:e9:c0:1b:ff:
         73:52:d5:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1LFuaIzrvrX+74AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTQ5OWFiY2QtODMyYi00YmE4LTgwY2EtNGUwYTY0Yjlj
OTg3MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk
ZmM4YTZhMWQtODk1MC00OTc4LWIzNDAtODI3ZjM5OTkxMmZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45hiUeiWD67MTA/N7Z9lRXmWRf6Es3BOEHfe
5P8xL6aQnxWl6rTKEsPYqXNajCPLO3QnPWJvI48hYkZ34ZUm4Dqyb/zSC5O6B/gD
IaRnXjvxodNBer6KAeItJvCT3A8UpImLXAyGrC4Wsjm2SC8mVqbX23Kjjgt7zCCd
SAqf8hd96PBU9INfbI8CVc/kVEvRXh3ydXmhP2rpSkR2pEHfS/s+uGl4vqG3DajZ
3JVfYXJ1m3TBYQW/F4tkdQNz0jvX+O/0AuT/YcuG/wZRYbOtS+7lIRXa00SaWhkv
Ck6zyBwnjwBPwyv/pHH1Ke0aW2TanZtiJ5gvLHz+A9NpfGK84wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMVBQGGedvtq+QJPo4hu0OUNISMUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NDk5
YWJjZC04MzJiLTRiYTgtODBjYS00ZTBhNjRiOWM5ODcvNDQzNGU2M2UtZDI1OC0z
NmUyLTkxM2YtMDY2MjM5MjkyZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTQ5OWFiY2QtODMyYi00YmE4LTgw
Y2EtNGUwYTY0YjljOTg3Lzk0OTlhYmNkLTgzMmItNGJhOC04MGNhLTRlMGE2NGI5
Yzk4Ny5jcmwwHwYDVR0jBBgwFoAU6kY5ZMnpcVfI/1vhf2FnZnGf6jMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85NDk5YWJjZC04MzJiLTRiYTgtODBjYS00ZTBh
NjRiOWM5ODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0V5KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABGAFxxqmYwCRVRqRft/R8kPYveq1/It8JW9nmb4AC6jdebV96TkaNP6
ZjvOIRz/vXfTLdVYpJrXlNzPSWr1vRp14236piCei/GNMW1Om6QpsCzNz0H4WQLH
Q2QdIBoaPIGDj+u04aqu4RhPhoVFZa+PM/QsX0kCiaXok8XHIcqy0FljL25C5/8h
l9AXpAvKxmtBi3YXUn06pJND8vW9+Hqr7eBrQEuUGRacWU7OKm0eJfVcE12G/dYi
Grvj6Ue2jiwRnosU4T3ftvILdioNbFZifR+HgU09y9BMGyhLZYh2UNpMuDdbjpJx
/CUKvN1b19vRPMFd7uVU6cAb/3NS1Zc=
-----END CERTIFICATE-----
Generated at Sun Jun 15 12:28:47 2025 by rpki-client