Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/29b74943-e07a-3714-bec6-83f8e6cffff8.roa
File:                     29b74943-e07a-3714-bec6-83f8e6cffff8.roa (raw, json)
Hash identifier:          jH+ArxpL41k+h5BNcnKncR5xfAO5dFmad/RR2j/h+3k=
Subject key identifier:   4B:F7:DF:B2:FC:14:4A:26:4D:9B:7D:20:2B:31:27:73:33:F7:2B:29
Certificate issuer:       /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Certificate serial:       010D0C9F4328584AAB265682F6AFCEABCF3C4600
Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/29b74943-e07a-3714-bec6-83f8e6cffff8.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     3807
IP address blocks:        207.196.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:56:82:f6:af:ce:ab:cf:3c:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=a3dcdd72-1a9e-4a37-b191-19b21aa5bf54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:db:23:ba:1e:25:a9:76:45:84:49:ad:e4:03:
                    ff:93:77:d5:f3:3a:ed:f6:29:9c:21:30:9f:fa:e5:
                    8d:eb:e8:38:6f:04:8a:bd:97:04:59:5f:1d:b1:b3:
                    8e:52:22:ef:d2:e6:df:bc:49:d4:b1:85:2f:ca:fe:
                    89:c9:fa:14:1b:f7:db:c2:5f:2b:33:cc:06:d1:8e:
                    e5:8c:84:67:4e:c4:ec:77:2e:3d:a1:71:7b:1b:07:
                    31:ff:4f:c6:12:14:4e:03:43:ec:13:b2:cb:46:3e:
                    bf:94:af:22:0f:b1:1c:95:c3:fc:67:7c:a8:7f:5e:
                    c5:e5:c1:42:45:97:59:79:61:c7:71:fb:a7:94:56:
                    d7:a1:af:da:fc:9a:32:07:22:10:54:5e:9c:fc:5a:
                    b9:75:d1:eb:ba:e0:bc:4d:3e:c5:e7:43:5b:ad:61:
                    e4:5f:6e:90:db:64:f0:37:42:79:cf:be:7d:68:4b:
                    44:c5:28:ab:3d:27:ad:02:91:78:7d:50:7b:8e:59:
                    c1:8f:70:0e:33:9b:25:4a:e9:7f:60:8e:96:ae:2a:
                    99:7f:fd:31:fd:ba:72:d9:c5:86:68:45:c9:6e:6a:
                    fd:0c:04:6c:82:1d:ab:2e:0e:b6:fa:f8:7e:77:83:
                    03:ac:9f:79:ab:42:5b:61:35:64:a7:47:64:ee:ce:
                    07:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F7:DF:B2:FC:14:4A:26:4D:9B:7D:20:2B:31:27:73:33:F7:2B:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/29b74943-e07a-3714-bec6-83f8e6cffff8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl

            X509v3 Authority Key Identifier:
                keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.196.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:fb:17:62:96:5c:77:ab:13:a2:37:c7:b0:94:f2:65:4b:32:
         95:6b:7b:ea:3a:60:cc:c2:a3:69:e8:0b:20:20:ce:20:c0:44:
         cd:fe:fb:1f:15:33:19:84:0f:00:61:70:2f:11:b3:aa:43:cf:
         11:2f:f0:84:6b:41:b5:01:4d:69:be:32:a1:7c:eb:ab:d7:63:
         d2:b9:a5:00:6c:ab:90:ed:01:03:7a:39:4f:df:68:61:46:96:
         f0:28:a8:43:cb:25:74:ad:94:9f:5c:a4:85:10:e7:8a:01:32:
         a3:fc:05:7f:7d:a9:d1:be:b8:73:dc:5d:b1:56:54:98:bc:71:
         b4:3a:80:3a:b7:8d:d5:34:a9:86:64:a4:55:c8:52:54:c4:f8:
         d1:cb:12:7d:10:60:9a:df:f6:73:db:cb:8d:ae:d5:7a:30:1b:
         f3:a9:16:21:62:1a:3b:c7:c7:2d:d9:7b:15:13:ef:81:c7:5c:
         bf:48:91:07:b3:d1:bc:a1:42:41:48:c4:e6:80:58:8d:41:ec:
         1b:49:47:4c:42:0c:fc:69:46:6c:2e:6d:3c:04:53:f7:8a:b0:
         01:c9:c2:4e:2f:90:d4:f3:1f:fe:59:a1:2e:44:1c:5b:e6:d5:
         ef:60:56:ce:65:82:64:a6:3e:b5:e1:70:ab:4d:fc:d0:1a:f4:
         5d:d8:cd:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlaC9q/Oq888RgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDQ1YzdjM2QtNzJhNC00MjFkLWI0MWEtZDVlN2UyNTM0
MTA3MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk
YTNkY2RkNzItMWE5ZS00YTM3LWIxOTEtMTliMjFhYTViZjU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9sjuh4lqXZFhEmt5AP/k3fV8zrt9imcITCf
+uWN6+g4bwSKvZcEWV8dsbOOUiLv0ubfvEnUsYUvyv6JyfoUG/fbwl8rM8wG0Y7l
jIRnTsTsdy49oXF7Gwcx/0/GEhROA0PsE7LLRj6/lK8iD7EclcP8Z3yof17F5cFC
RZdZeWHHcfunlFbXoa/a/JoyByIQVF6c/Fq5ddHruuC8TT7F50NbrWHkX26Q22Tw
N0J5z759aEtExSirPSetApF4fVB7jlnBj3AOM5slSul/YI6WriqZf/0x/bpy2cWG
aEXJbmr9DARsgh2rLg62+vh+d4MDrJ95q0JbYTVkp0dk7s4HTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEv337L8FEomTZt9ICsxJ3Mz9yspMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVj
N2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3ZTI1MzQxMDcvMjliNzQ5NDMtZTA3YS0z
NzE0LWJlYzYtODNmOGU2Y2ZmZmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDQ1YzdjM2QtNzJhNC00MjFkLWI0
MWEtZDVlN2UyNTM0MTA3LzA0NWM3YzNkLTcyYTQtNDIxZC1iNDFhLWQ1ZTdlMjUz
NDEwNy5jcmwwHwYDVR0jBBgwFoAUmFPVU8y7sPSmO9Q3aLg6B77bPXcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVjN2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3
ZTI1MzQxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8TMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFz7F2KWXHerE6I3x7CU8mVLMpVre+o6YMzCo2noCyAgziDARM3++x8V
MxmEDwBhcC8Rs6pDzxEv8IRrQbUBTWm+MqF866vXY9K5pQBsq5DtAQN6OU/faGFG
lvAoqEPLJXStlJ9cpIUQ54oBMqP8BX99qdG+uHPcXbFWVJi8cbQ6gDq3jdU0qYZk
pFXIUlTE+NHLEn0QYJrf9nPby42u1XowG/OpFiFiGjvHxy3ZexUT74HHXL9IkQez
0byhQkFIxOaAWI1B7BtJR0xCDPxpRmwubTwEU/eKsAHJwk4vkNTzH/5ZoS5EHFvm
1e9gVs5lgmSmPrXhcKtN/NAa9F3YzdI=
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:39:36 2025 by rpki-client