Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/b04e92d8-015a-3eba-ae36-b11b75dd5c08.roa
File:                     b04e92d8-015a-3eba-ae36-b11b75dd5c08.roa (raw, json)
Hash identifier:          c/7t2kflcyio0xF6lQvS2zrWVVhK3BEAF3WPp/OAYTk=
Subject key identifier:   F7:3C:0E:70:4B:7E:D4:9F:4C:40:79:C9:FD:16:A9:B2:A2:F6:DF:F4
Certificate issuer:       /CN=2745e9cc-67fd-4400-a1d0-d1c90565a0f1
Certificate serial:       010D0C9F4328584A82AB4C124D4BDA4F8253F800
Authority key identifier: 5A:3F:43:2C:A0:C1:9C:EE:7C:A0:B4:00:34:A3:A2:11:EF:F7:29:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/b04e92d8-015a-3eba-ae36-b11b75dd5c08.roa
Signing time:             Mon 14 Jul 2025 01:00:50 +0000
ROA not before:           Mon 14 Jul 2025 01:00:50 +0000
ROA not after:            Sun 12 Oct 2025 01:00:50 +0000
asID:                     30674
IP address blocks:        129.62.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:82:ab:4c:12:4d:4b:da:4f:82:53:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2745e9cc-67fd-4400-a1d0-d1c90565a0f1
        Validity
            Not Before: Jul 14 01:00:50 2025 GMT
            Not After : Oct 12 01:00:50 2025 GMT
        Subject: CN=b0667fec-6a4b-4da3-b9dd-cbf7170db963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:58:93:bc:d2:ea:54:08:f3:f5:da:72:48:8f:
                    4e:c6:97:40:a9:0b:3d:58:a7:51:08:8b:a7:2c:df:
                    76:5c:3a:2b:20:b2:0f:38:81:dc:87:1e:43:fa:8c:
                    a4:45:00:de:2d:a6:aa:9c:6c:6b:2e:c1:3b:02:6f:
                    b5:1a:5b:a8:d0:d6:41:1a:e2:ab:77:05:b9:8c:90:
                    fa:76:b0:c9:ad:b8:ab:40:02:1a:ac:02:99:92:0c:
                    e1:f3:90:1f:ef:57:94:84:a3:2b:a1:e9:09:44:82:
                    95:92:91:70:7b:48:ae:55:7b:16:8b:8d:b5:c4:fc:
                    fb:08:c2:b7:d7:42:0f:59:6a:75:20:1b:9a:16:10:
                    7c:d4:a7:9f:b6:58:99:4b:7e:16:79:63:d3:de:a0:
                    04:c2:99:13:ce:d4:01:e3:a6:a1:3c:10:27:b6:ea:
                    b5:70:a6:c6:a4:c6:d5:7a:1e:0c:92:08:41:94:91:
                    ac:03:cb:ce:77:85:25:38:49:e4:d4:ff:20:42:b3:
                    b2:6f:5f:ad:1c:a1:24:f3:64:32:c1:2f:b4:91:bd:
                    a9:f3:0f:d2:48:f8:1f:69:10:e9:fc:53:3f:c8:e2:
                    24:c5:57:6f:d4:98:9b:18:4b:83:53:2d:eb:aa:68:
                    44:29:0a:b8:5a:34:c2:88:99:5f:09:91:87:65:4c:
                    0f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3C:0E:70:4B:7E:D4:9F:4C:40:79:C9:FD:16:A9:B2:A2:F6:DF:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/b04e92d8-015a-3eba-ae36-b11b75dd5c08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.crl

            X509v3 Authority Key Identifier:
                keyid:5A:3F:43:2C:A0:C1:9C:EE:7C:A0:B4:00:34:A3:A2:11:EF:F7:29:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.62.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:23:04:d0:ce:c0:2d:49:de:99:61:84:83:10:cb:2d:e9:34:
         91:c3:f9:93:e9:ec:d8:cf:18:c3:d5:d1:ce:c4:d3:54:dd:f3:
         69:b2:86:d0:bd:a7:c4:94:21:de:68:f5:1f:55:88:04:9a:7c:
         3c:72:77:55:b5:f4:e2:56:1a:26:da:c5:3f:a2:a2:0e:fa:30:
         12:2e:98:16:10:e3:24:da:b6:e8:8a:96:7f:fa:d3:6c:46:de:
         29:51:2d:2f:31:dd:ff:49:fd:cd:a5:c2:03:50:42:65:26:45:
         90:90:87:b4:98:53:f2:6a:78:c6:e8:fa:a9:cd:39:8e:1b:31:
         0d:5c:0f:8f:ca:22:3c:30:44:6f:06:66:8b:72:a6:71:0c:dc:
         b6:41:dd:1a:7e:b9:d0:c6:7e:a3:9c:26:8d:7c:71:b4:f0:e1:
         17:3a:43:78:52:d7:cc:5e:47:83:f8:9e:04:61:ac:56:cd:62:
         47:10:07:03:8c:88:f8:8e:62:c9:c9:ca:04:6b:5e:70:16:a7:
         ba:35:d0:19:ad:ed:37:58:4f:ef:00:6d:de:a0:b1:16:43:d2:
         96:59:36:d1:36:b1:e1:da:c0:e3:67:16:0b:19:ce:71:ea:1e:
         24:5c:8b:ff:30:25:d4:75:cf:ac:0d:2c:bb:59:9d:75:53:0b:
         a0:a2:cb:53
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqCq0wSTUvaT4JT+AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjc0NWU5Y2MtNjdmZC00NDAwLWExZDAtZDFjOTA1NjVh
MGYxMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk
YjA2NjdmZWMtNmE0Yi00ZGEzLWI5ZGQtY2JmNzE3MGRiOTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyViTvNLqVAjz9dpySI9OxpdAqQs9WKdRCIun
LN92XDorILIPOIHchx5D+oykRQDeLaaqnGxrLsE7Am+1Gluo0NZBGuKrdwW5jJD6
drDJrbirQAIarAKZkgzh85Af71eUhKMroekJRIKVkpFwe0iuVXsWi421xPz7CMK3
10IPWWp1IBuaFhB81KeftliZS34WeWPT3qAEwpkTztQB46ahPBAntuq1cKbGpMbV
eh4MkghBlJGsA8vOd4UlOEnk1P8gQrOyb1+tHKEk82QywS+0kb2p8w/SSPgfaRDp
/FM/yOIkxVdv1JibGEuDUy3rqmhEKQq4WjTCiJlfCZGHZUwP/wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPc8DnBLftSfTEB5yf0WqbKi9t/0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNzQ1
ZTljYy02N2ZkLTQ0MDAtYTFkMC1kMWM5MDU2NWEwZjEvYjA0ZTkyZDgtMDE1YS0z
ZWJhLWFlMzYtYjExYjc1ZGQ1YzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjc0NWU5Y2MtNjdmZC00NDAwLWEx
ZDAtZDFjOTA1NjVhMGYxLzI3NDVlOWNjLTY3ZmQtNDQwMC1hMWQwLWQxYzkwNTY1
YTBmMS5jcmwwHwYDVR0jBBgwFoAUWj9DLKDBnO58oLQANKOiEe/3KVgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNzQ1ZTljYy02N2ZkLTQ0MDAtYTFkMC1kMWM5
MDU2NWEwZjEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgT4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAiCME0M7ALUnemWGEgxDLLek0kcP5k+ns2M8Yw9XRzsTTVN3zabKG0L2n
xJQh3mj1H1WIBJp8PHJ3VbX04lYaJtrFP6KiDvowEi6YFhDjJNq26IqWf/rTbEbe
KVEtLzHd/0n9zaXCA1BCZSZFkJCHtJhT8mp4xuj6qc05jhsxDVwPj8oiPDBEbwZm
i3KmcQzctkHdGn650MZ+o5wmjXxxtPDhFzpDeFLXzF5Hg/ieBGGsVs1iRxAHA4yI
+I5iycnKBGtecBanujXQGa3tN1hP7wBt3qCxFkPSllk20Tax4drA42cWCxnOceoe
JFyL/zAl1HXPrA0su1mddVMLoKLLUw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:28:01 2025 by rpki-client