Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27244990-cefe-37c8-b7c4-0c1c9538f423.roa
File:                     27244990-cefe-37c8-b7c4-0c1c9538f423.roa (raw, json)
Hash identifier:          NJQmWipXg0xoJmD1m2n4zfeRX4SlVJr67xGbVFMo8IY=
Subject key identifier:   DA:00:C7:65:66:F1:32:50:67:AE:85:0B:E4:33:1D:E8:A5:FB:9D:35
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7FE09C7B8B58DE444443E740
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27244990-cefe-37c8-b7c4-0c1c9538f423.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        174.205.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:9c:7b:8b:58:de:44:44:43:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=185b0afd-8590-4b28-abd9-1fd433296cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:49:c4:ea:c9:4a:e9:dd:a7:5b:10:40:5c:9e:
                    64:50:af:6e:29:67:b0:2e:eb:6b:3c:1b:eb:a7:45:
                    c3:5b:bd:8e:44:13:1c:81:64:21:c8:47:60:dd:95:
                    cb:bd:5d:e5:e9:84:69:5f:04:a2:3d:99:e2:9b:94:
                    7c:6b:4b:98:e1:7c:dd:43:b2:02:7e:1e:b3:07:5c:
                    3f:e2:94:33:46:af:f0:89:57:b8:df:d8:3b:24:53:
                    b0:17:4b:84:3e:69:a9:9f:d6:01:fb:1b:d6:f9:14:
                    a0:5f:8a:97:51:68:9e:bd:14:09:fa:20:c3:71:62:
                    97:de:01:e7:d5:b6:d3:1e:6c:f0:e8:d5:d5:ea:f5:
                    24:cb:51:6f:d3:75:8d:85:7d:1f:d1:c6:4f:2b:b2:
                    5b:60:a5:3d:44:4b:74:3c:aa:e7:09:9c:f1:fa:57:
                    54:68:a2:eb:d0:7d:80:43:c3:50:11:03:50:e1:47:
                    bd:dc:2e:cd:40:50:68:45:7d:6b:2c:4f:13:65:08:
                    6f:75:50:70:b2:45:54:19:ca:e4:9f:12:de:97:8a:
                    2b:7d:2c:54:2c:5b:1d:fe:89:1c:07:ef:33:95:49:
                    c2:8f:d7:ca:fa:be:46:cb:64:f8:09:dd:8d:1d:93:
                    02:d9:20:ee:ff:70:53:a8:1c:de:0f:00:97:69:38:
                    cd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:00:C7:65:66:F1:32:50:67:AE:85:0B:E4:33:1D:E8:A5:FB:9D:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27244990-cefe-37c8-b7c4-0c1c9538f423.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.205.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:f5:d7:0d:e0:2e:be:cd:11:99:cb:51:2c:52:b8:42:e7:eb:
         10:f6:7c:85:7f:d7:cb:92:72:4e:56:a3:93:93:7e:cb:55:d6:
         b8:1d:36:4a:e5:da:08:61:dd:2b:21:9e:fc:2c:db:27:60:e5:
         0f:a3:79:e6:cb:c1:16:93:05:16:e5:a3:70:df:83:73:94:81:
         1c:c5:1c:01:a2:47:fd:32:31:1c:31:87:cd:bb:5f:69:4b:90:
         4b:15:c1:41:35:d7:3f:0c:3d:e5:d5:0c:71:3a:80:49:20:e8:
         9e:94:c8:ff:d9:5d:ce:0a:f8:85:18:2a:77:0b:d7:f0:df:1c:
         af:bd:76:5e:92:f8:c6:b6:63:28:68:6c:f5:d0:73:53:ef:49:
         8a:70:42:d9:ba:43:59:f6:53:d5:93:3f:2f:eb:e9:85:31:74:
         57:b7:f0:ff:a4:25:e5:e0:c4:1d:f6:8d:86:8a:1d:a6:1f:c8:
         8f:a7:32:b8:d8:65:86:5f:30:4d:dd:ff:e0:a2:b3:d5:bb:a1:
         c3:3f:4b:75:49:0e:e7:ac:fe:3b:13:51:1d:8c:22:28:5f:bf:
         8d:28:7b:af:31:59:da:a3:ce:6d:8c:3d:44:f7:57:13:d6:52:
         9a:db:f2:8c:8d:4a:d9:a3:30:62:5c:ad:93:ad:af:df:d1:7e:
         c4:2d:41:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4Jx7i1jeRERD50AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk
MTg1YjBhZmQtODU5MC00YjI4LWFiZDktMWZkNDMzMjk2Y2Y4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmknE6slK6d2nWxBAXJ5kUK9uKWewLutrPBvr
p0XDW72ORBMcgWQhyEdg3ZXLvV3l6YRpXwSiPZnim5R8a0uY4XzdQ7ICfh6zB1w/
4pQzRq/wiVe439g7JFOwF0uEPmmpn9YB+xvW+RSgX4qXUWievRQJ+iDDcWKX3gHn
1bbTHmzw6NXV6vUky1Fv03WNhX0f0cZPK7JbYKU9REt0PKrnCZzx+ldUaKLr0H2A
Q8NQEQNQ4Ue93C7NQFBoRX1rLE8TZQhvdVBwskVUGcrknxLel4orfSxULFsd/okc
B+8zlUnCj9fK+r5Gy2T4Cd2NHZMC2SDu/3BTqBzeDwCXaTjNawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNoAx2Vm8TJQZ66FC+QzHeil+501MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjcyNDQ5OTAtY2VmZS0z
N2M4LWI3YzQtMGMxYzk1MzhmNDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrs1AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ711w3gLr7NEZnLUSxSuELn6xD2fIV/18uSck5Wo5OTfstV1rgdNkrl
2ghh3Sshnvws2ydg5Q+jeebLwRaTBRblo3Dfg3OUgRzFHAGiR/0yMRwxh827X2lL
kEsVwUE11z8MPeXVDHE6gEkg6J6UyP/ZXc4K+IUYKncL1/DfHK+9dl6S+Ma2Yyho
bPXQc1PvSYpwQtm6Q1n2U9WTPy/r6YUxdFe38P+kJeXgxB32jYaKHaYfyI+nMrjY
ZYZfME3d/+Cis9W7ocM/S3VJDues/jsTUR2MIihfv40oe68xWdqjzm2MPUT3VxPW
Uprb8oyNStmjMGJcrZOtr9/RfsQtQdQ=
-----END CERTIFICATE-----
Generated at Fri Aug 8 13:03:19 2025 by rpki-client