Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3053ef5e-098a-30ae-bdd9-cd648fa7c401.roa
File:                     3053ef5e-098a-30ae-bdd9-cd648fa7c401.roa (raw, json)
Hash identifier:          f6PYfp9wKiWkZcT8sFi/Jt3YDcIS9XEKn46T9IpOxIM=
Subject key identifier:   A8:28:5D:FB:FE:C3:8C:CA:DC:C7:9D:D6:8A:B3:DA:4C:D1:08:5F:02
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AA6F63DC3E4294D09812CB400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3053ef5e-098a-30ae-bdd9-cd648fa7c401.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        174.238.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:3d:c3:e4:29:4d:09:81:2c:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=1e434565-89ca-4f16-bc59-8fe0ee773001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a8:f5:50:23:19:26:e4:fc:ec:2f:52:cb:7e:
                    26:e5:c7:dc:ce:25:b5:90:67:f0:7b:ce:8a:24:d1:
                    b9:d1:b9:2b:a5:5b:b9:7e:6c:1f:f9:a5:9d:f8:18:
                    ed:84:20:be:98:31:46:32:21:a3:15:6e:a5:f1:ea:
                    03:5d:f7:42:56:84:e6:d4:35:77:47:64:af:5a:a1:
                    cd:f1:3d:00:95:cd:43:01:f9:62:ba:93:e5:2c:5d:
                    e3:02:8c:c1:4a:54:52:9f:a0:9a:74:5c:65:03:7a:
                    17:32:45:ba:15:0d:98:2e:1a:82:ab:a7:b2:76:f2:
                    d4:c2:25:f1:75:dd:4a:2f:aa:64:48:e0:b0:2c:ea:
                    50:01:33:79:7a:5d:b3:66:15:5e:27:db:b7:74:1b:
                    8c:f0:8b:3a:bf:1c:f5:69:20:e8:22:21:60:75:2f:
                    ea:01:3c:b6:0f:6e:6f:60:27:74:36:a9:a6:a2:25:
                    9e:52:a7:20:de:5e:8e:e5:95:54:17:b5:b2:c3:99:
                    d6:8e:51:e8:ee:6b:90:96:33:0b:bf:4b:f6:64:c0:
                    5f:38:37:c7:b1:ff:e2:51:29:e5:29:a4:e0:98:d8:
                    f7:d3:f9:9c:81:8e:1d:ee:8c:2f:7a:1b:c3:e2:0d:
                    8d:7f:c0:83:7f:7d:33:7a:34:89:30:9e:95:3a:87:
                    71:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:28:5D:FB:FE:C3:8C:CA:DC:C7:9D:D6:8A:B3:DA:4C:D1:08:5F:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3053ef5e-098a-30ae-bdd9-cd648fa7c401.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.238.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:b6:12:1d:52:9d:03:f5:07:93:02:aa:5f:ed:df:48:27:60:
         b9:a8:5d:86:2a:01:3b:26:dd:9d:eb:86:81:c7:da:cf:aa:ba:
         25:06:a2:c0:b8:e4:d8:32:da:4d:85:01:c2:3b:b2:8e:6f:86:
         44:bc:0e:b1:ac:4b:09:85:65:69:c0:26:13:bb:16:a6:22:2f:
         89:af:87:fa:0d:76:6f:56:1b:06:ab:14:20:3b:50:9e:26:f2:
         00:f8:aa:5f:ac:0e:52:30:03:8b:4b:e5:3e:b9:ca:97:57:c8:
         63:b6:05:e8:79:52:ce:9c:49:ad:e6:b4:14:74:03:71:e6:88:
         62:80:6c:47:fd:c4:87:57:0e:92:b4:bd:a4:ec:82:d2:c4:36:
         7b:c4:4e:40:c0:a8:24:98:0a:7e:c0:ca:af:23:7b:c9:05:b9:
         26:d4:70:fe:08:a7:c3:fa:cf:02:4a:af:21:63:98:d6:e7:c9:
         e8:5c:b1:82:c0:f2:cd:9c:b1:36:64:11:10:84:bb:27:9c:d0:
         3f:c5:49:12:62:30:73:ae:f9:27:00:a8:0b:3f:89:a9:7d:5d:
         ae:00:56:fc:80:19:08:b7:f1:db:6d:02:14:a6:d8:21:bc:a2:
         01:c9:74:87:d9:35:0c:f7:96:ff:f7:40:bf:87:7f:73:02:0b:
         23:7f:d3:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9j3D5ClNCYEstAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk
MWU0MzQ1NjUtODljYS00ZjE2LWJjNTktOGZlMGVlNzczMDAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6j1UCMZJuT87C9Sy34m5cfcziW1kGfwe86K
JNG50bkrpVu5fmwf+aWd+BjthCC+mDFGMiGjFW6l8eoDXfdCVoTm1DV3R2SvWqHN
8T0Alc1DAfliupPlLF3jAozBSlRSn6CadFxlA3oXMkW6FQ2YLhqCq6eydvLUwiXx
dd1KL6pkSOCwLOpQATN5el2zZhVeJ9u3dBuM8Is6vxz1aSDoIiFgdS/qATy2D25v
YCd0NqmmoiWeUqcg3l6O5ZVUF7Wyw5nWjlHo7muQljMLv0v2ZMBfODfHsf/iUSnl
KaTgmNj30/mcgY4d7owvehvD4g2Nf8CDf30zejSJMJ6VOodxbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKgoXfv+w4zK3Med1oqz2kzRCF8CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzA1M2VmNWUtMDk4YS0z
MGFlLWJkZDktY2Q2NDhmYTdjNDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFru6AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADe2Eh1SnQP1B5MCql/t30gnYLmoXYYqATsm3Z3rhoHH2s+quiUGosC4
5Ngy2k2FAcI7so5vhkS8DrGsSwmFZWnAJhO7FqYiL4mvh/oNdm9WGwarFCA7UJ4m
8gD4ql+sDlIwA4tL5T65ypdXyGO2Beh5Us6cSa3mtBR0A3HmiGKAbEf9xIdXDpK0
vaTsgtLENnvETkDAqCSYCn7Ayq8je8kFuSbUcP4Ip8P6zwJKryFjmNbnyehcsYLA
8s2csTZkERCEuyec0D/FSRJiMHOu+ScAqAs/ial9Xa4AVvyAGQi38dttAhSm2CG8
ogHJdIfZNQz3lv/3QL+Hf3MCCyN/0/c=
-----END CERTIFICATE-----
Generated at Fri Aug 8 10:20:26 2025 by rpki-client