Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1da8bac0-bc71-3493-ba19-cd7d324a98ed.roa
File:                     1da8bac0-bc71-3493-ba19-cd7d324a98ed.roa (raw, json)
Hash identifier:          Vp4rsj+Sp1JZ01AideNphXUqx2KdtanVrP3EbLenNhY=
Subject key identifier:   85:C0:CB:21:4B:33:14:51:86:7B:6A:DD:46:56:2D:BF:4F:BD:33:65
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849E225472BF5643BCAE269F200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1da8bac0-bc71-3493-ba19-cd7d324a98ed.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     701
IP address blocks:        209.220.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:47:2b:f5:64:3b:ca:e2:69:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=9afed364-4943-475d-9952-b5836df2ff24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:10:5e:af:6a:f2:fc:ca:71:40:28:33:a4:50:
                    ba:05:74:fd:3b:c2:33:00:b2:bc:4d:b8:33:a1:0a:
                    ec:8a:88:af:8a:e6:70:22:a2:35:d7:6f:4c:ec:5d:
                    f7:dc:85:df:2f:91:85:bf:35:f5:40:2a:da:08:fa:
                    96:65:1e:21:4b:8c:05:f1:c3:00:cc:27:87:b3:4c:
                    e4:f4:77:d9:90:24:bc:7e:34:1f:0f:36:c8:b8:a4:
                    80:35:68:36:a5:e7:63:53:26:91:cd:d3:9a:77:20:
                    66:47:51:a7:d9:77:a5:70:97:55:41:2d:11:97:b7:
                    d2:47:76:7a:67:61:81:62:51:f4:eb:17:6f:8b:1a:
                    19:85:51:35:78:8c:b4:35:12:b7:f5:16:7b:4f:3a:
                    95:73:e2:c8:33:8d:e7:ae:f6:ad:51:c2:d2:3b:b0:
                    bc:a9:03:a2:50:d5:91:85:f0:da:66:69:1e:ba:77:
                    b3:de:56:85:dd:13:18:b3:f1:27:0d:b5:c6:90:23:
                    cb:2e:a6:bc:49:43:f1:bd:22:7f:cf:7f:ed:0a:1b:
                    0c:ed:e9:fb:68:9d:16:f9:3e:76:7f:c0:da:4e:ad:
                    ce:78:e4:54:ef:00:d5:0a:83:82:ae:50:25:75:52:
                    89:f5:c7:79:7d:cb:cd:74:70:31:f9:9f:8d:24:96:
                    eb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C0:CB:21:4B:33:14:51:86:7B:6A:DD:46:56:2D:BF:4F:BD:33:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1da8bac0-bc71-3493-ba19-cd7d324a98ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.220.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:30:27:e7:b3:a6:08:e3:f9:e0:20:f2:7a:c3:4b:aa:76:f5:
         72:d0:59:9f:c2:85:ed:1b:13:e6:70:08:08:f1:f2:d7:ea:32:
         bc:89:32:65:50:bd:52:fc:23:c9:4d:3d:2b:25:19:62:43:be:
         ca:74:22:62:46:e1:40:3a:85:ee:db:b4:5f:88:de:4c:17:6a:
         60:df:02:c0:43:97:ba:af:9e:e2:6d:b8:1e:ec:8b:58:d4:e0:
         17:40:c2:43:c5:67:64:20:a3:3e:5b:14:d8:36:56:1c:7c:3c:
         f2:ab:9e:cd:32:0e:39:13:83:90:e3:89:06:43:0e:19:dc:df:
         43:0c:d3:6e:69:46:87:e1:0c:58:70:18:f0:c8:45:e8:fd:91:
         23:cc:e6:0a:b5:3b:87:69:8a:1d:b5:44:f4:5b:ef:99:48:c8:
         b9:a9:e2:18:aa:4f:6d:16:48:be:58:05:50:ec:63:b7:88:ed:
         39:a2:41:c9:4d:c8:f0:aa:ea:3e:82:7a:40:bd:87:43:97:81:
         fa:23:d6:9c:4b:be:c6:d0:15:7d:8f:74:58:26:48:74:48:41:
         12:b5:1d:5c:8e:6f:d5:7a:b6:32:38:70:3b:6c:c1:b8:df:75:
         e7:16:df:75:46:41:1f:51:68:9a:74:ef:26:55:21:e2:7b:b8:
         35:54:79:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJUcr9WQ7yuJp8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk
OWFmZWQzNjQtNDk0My00NzVkLTk5NTItYjU4MzZkZjJmZjI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RBer2ry/MpxQCgzpFC6BXT9O8IzALK8Tbgz
oQrsioiviuZwIqI1129M7F333IXfL5GFvzX1QCraCPqWZR4hS4wF8cMAzCeHs0zk
9HfZkCS8fjQfDzbIuKSANWg2pedjUyaRzdOadyBmR1Gn2XelcJdVQS0Rl7fSR3Z6
Z2GBYlH06xdvixoZhVE1eIy0NRK39RZ7TzqVc+LIM43nrvatUcLSO7C8qQOiUNWR
hfDaZmkeunez3laF3RMYs/EnDbXGkCPLLqa8SUPxvSJ/z3/tChsM7en7aJ0W+T52
f8DaTq3OeORU7wDVCoOCrlAldVKJ9cd5fcvNdHAx+Z+NJJbrkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIXAyyFLMxRRhntq3UZWLb9PvTNlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWRhOGJhYzAtYmM3MS0z
NDkzLWJhMTktY2Q3ZDMyNGE5OGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0dxgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALYwJ+ezpgjj+eAg8nrDS6p29XLQWZ/Che0bE+ZwCAjx8tfqMryJMmVQ
vVL8I8lNPSslGWJDvsp0ImJG4UA6he7btF+I3kwXamDfAsBDl7qvnuJtuB7si1jU
4BdAwkPFZ2Qgoz5bFNg2Vhx8PPKrns0yDjkTg5DjiQZDDhnc30MM025pRofhDFhw
GPDIRej9kSPM5gq1O4dpih21RPRb75lIyLmp4hiqT20WSL5YBVDsY7eI7TmiQclN
yPCq6j6CekC9h0OXgfoj1pxLvsbQFX2PdFgmSHRIQRK1HVyOb9V6tjI4cDtswbjf
decW33VGQR9RaJp07yZVIeJ7uDVUeZQ=
-----END CERTIFICATE-----
Generated at Tue Jun 17 23:08:56 2025 by rpki-client