Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/4e2655fb-9643-3251-b316-c102da99b510.roa
File:                     4e2655fb-9643-3251-b316-c102da99b510.roa (raw, json)
Hash identifier:          dAbe5nCYrbVm17UnN1Rs0YoiIn0DAxCylmaN7M8wnYY=
Subject key identifier:   3A:01:99:31:A5:D4:98:C7:8E:56:47:3D:6E:97:94:1B:BA:75:55:95
Certificate issuer:       /CN=643177f7-12a4-4138-aa72-1b5beaada59f
Certificate serial:       010D0C9F4328584EA7882073322503E3003B8E00
Authority key identifier: E0:81:C9:F2:5C:4F:5E:48:25:37:49:E0:5D:7D:6D:F8:EE:CF:36:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/4e2655fb-9643-3251-b316-c102da99b510.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     46309
IP address blocks:        74.118.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:20:73:32:25:03:e3:00:3b:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643177f7-12a4-4138-aa72-1b5beaada59f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6bd49878-6951-4432-a2b7-fb5fbc8b7f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ec:6c:65:a8:74:be:ba:8d:f0:5f:43:6f:8a:
                    b0:da:22:f5:be:e1:cf:8d:1a:00:3b:1d:87:e0:29:
                    c6:49:a5:e6:32:ec:62:d0:c1:15:68:e9:64:be:c0:
                    d6:44:42:8d:ba:14:44:d8:e5:28:75:2b:e1:e4:da:
                    50:a3:df:89:ff:a0:e6:5c:80:03:53:61:81:19:3e:
                    a3:ab:7d:ed:98:ec:f3:cc:de:6d:94:85:24:f6:26:
                    09:b5:85:da:f2:bb:eb:cf:2a:6d:ee:10:cd:a2:03:
                    88:f1:dc:64:0d:48:9f:bb:e0:df:a9:59:ea:64:5c:
                    72:15:c0:d5:80:01:bf:d0:5a:c8:97:0a:c8:83:ae:
                    f6:72:3c:92:18:fb:d1:56:c4:69:4b:95:bc:13:55:
                    fd:b2:af:83:a8:24:1e:94:9c:1c:de:6e:ed:35:34:
                    72:5a:67:fd:88:84:88:34:34:82:52:b8:39:e0:2a:
                    1f:52:cc:49:73:db:31:19:c4:47:2a:f6:14:76:bf:
                    e2:c8:b2:4f:1c:81:79:77:67:46:32:02:a3:47:d5:
                    43:aa:35:bf:70:8f:cd:0c:ae:79:5d:11:84:13:32:
                    f7:63:8c:59:cc:8f:10:11:eb:a3:e7:24:78:c4:eb:
                    3d:7f:09:ce:a7:72:56:fc:52:a4:40:90:59:6c:f3:
                    3f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:01:99:31:A5:D4:98:C7:8E:56:47:3D:6E:97:94:1B:BA:75:55:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/4e2655fb-9643-3251-b316-c102da99b510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.crl

            X509v3 Authority Key Identifier:
                keyid:E0:81:C9:F2:5C:4F:5E:48:25:37:49:E0:5D:7D:6D:F8:EE:CF:36:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:a5:5b:d3:4c:5a:91:e3:00:a5:5f:ae:c7:de:86:19:ec:d7:
         4a:4b:d3:26:9c:34:d2:ed:8c:54:40:23:04:2c:05:97:72:ba:
         5f:45:e4:5e:d0:4c:44:e8:c7:35:a3:1b:5e:97:ea:b4:48:db:
         fb:2f:2a:ce:8c:8d:63:31:cf:8e:dc:7e:6b:81:6b:a5:a1:2f:
         90:f8:92:f7:5a:55:9d:4a:22:f2:af:67:35:fc:2b:ff:c1:e5:
         46:30:08:f4:62:3c:17:51:16:d0:e7:c0:39:f2:44:31:3b:c1:
         58:64:b1:c6:db:50:be:45:f2:9d:2b:a1:b4:95:f9:b6:5d:76:
         4d:5b:f0:b5:1a:22:de:5a:dd:e6:11:b5:0f:ac:a5:c0:99:ed:
         6f:15:ad:3b:1c:9f:10:75:14:98:24:ca:9b:33:01:66:89:97:
         fb:b3:5c:a5:7f:55:11:0d:55:4e:7b:73:4a:82:5f:a4:ac:5d:
         7b:e5:f5:26:64:9b:94:86:15:ce:41:a6:ee:52:7f:0a:8b:09:
         77:bd:77:6c:29:4d:a3:46:50:a3:c6:32:bc:b3:e2:83:12:33:
         7b:9d:a4:9b:39:d0:fb:15:73:74:43:d1:50:be:73:ac:b6:46:
         93:ae:a3:fb:d2:a0:0b:15:f4:7c:7e:4b:4e:51:48:d8:0f:72:
         94:f7:83:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niCBzMiUD4wA7jgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQzMTc3ZjctMTJhNC00MTM4LWFhNzItMWI1YmVhYWRh
NTlmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NmJkNDk4NzgtNjk1MS00NDMyLWEyYjctZmI1ZmJjOGI3ZjE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOxsZah0vrqN8F9Db4qw2iL1vuHPjRoAOx2H
4CnGSaXmMuxi0MEVaOlkvsDWREKNuhRE2OUodSvh5NpQo9+J/6DmXIADU2GBGT6j
q33tmOzzzN5tlIUk9iYJtYXa8rvrzypt7hDNogOI8dxkDUifu+DfqVnqZFxyFcDV
gAG/0FrIlwrIg672cjySGPvRVsRpS5W8E1X9sq+DqCQelJwc3m7tNTRyWmf9iISI
NDSCUrg54CofUsxJc9sxGcRHKvYUdr/iyLJPHIF5d2dGMgKjR9VDqjW/cI/NDK55
XRGEEzL3Y4xZzI8QEeuj5yR4xOs9fwnOp3JW/FKkQJBZbPM/pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDoBmTGl1JjHjlZHPW6XlBu6dVWVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82NDMx
NzdmNy0xMmE0LTQxMzgtYWE3Mi0xYjViZWFhZGE1OWYvNGUyNjU1ZmItOTY0My0z
MjUxLWIzMTYtYzEwMmRhOTliNTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNjQzMTc3ZjctMTJhNC00MTM4LWFh
NzItMWI1YmVhYWRhNTlmLzY0MzE3N2Y3LTEyYTQtNDEzOC1hYTcyLTFiNWJlYWFk
YTU5Zi5jcmwwHwYDVR0jBBgwFoAU4IHJ8lxPXkglN0ngXX1t+O7PNiMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC82NDMxNzdmNy0xMmE0LTQxMzgtYWE3Mi0xYjVi
ZWFhZGE1OWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSna0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEulW9NMWpHjAKVfrsfehhns10pL0yacNNLtjFRAIwQsBZdyul9F5F7Q
TEToxzWjG16X6rRI2/svKs6MjWMxz47cfmuBa6WhL5D4kvdaVZ1KIvKvZzX8K//B
5UYwCPRiPBdRFtDnwDnyRDE7wVhkscbbUL5F8p0robSV+bZddk1b8LUaIt5a3eYR
tQ+spcCZ7W8VrTscnxB1FJgkypszAWaJl/uzXKV/VRENVU57c0qCX6SsXXvl9SZk
m5SGFc5Bpu5SfwqLCXe9d2wpTaNGUKPGMryz4oMSM3udpJs50PsVc3RD0VC+c6y2
RpOuo/vSoAsV9Hx+S05RSNgPcpT3gxQ=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:37:39 2026 by rpki-client