Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/31ddf96c-59cc-3553-a25e-1f8edef09ec2.roa
File:                     31ddf96c-59cc-3553-a25e-1f8edef09ec2.roa (raw, json)
Hash identifier:          crnboQl3u8SjCy+qlJOImORJOdpcdPEVsAK4uxP2yEk=
Subject key identifier:   4F:E3:57:62:41:09:17:17:02:3C:6C:A5:9C:41:D9:7B:17:D0:69:94
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7FE0ACBFFBA01AC28CE19900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/31ddf96c-59cc-3553-a25e-1f8edef09ec2.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        174.196.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:ac:bf:fb:a0:1a:c2:8c:e1:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=1bcf08e1-bda3-410e-a4f2-21dbd6290a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:55:ef:5b:9e:8c:38:81:bc:f3:d9:f1:5c:04:
                    66:83:0f:2b:bb:26:9f:b9:67:1b:43:80:1a:b1:b8:
                    e4:93:5c:a7:5c:49:a6:54:06:aa:51:07:48:50:08:
                    5f:52:9e:d8:f4:30:b3:bd:44:43:6b:db:1f:b0:61:
                    db:cc:04:fe:90:e9:61:53:60:d9:b5:ca:93:2f:3a:
                    63:1e:a4:c7:31:95:93:b6:13:06:a6:9d:d8:86:d0:
                    55:bd:32:9f:9c:49:b6:1f:11:45:ec:14:53:73:c6:
                    41:95:3a:36:13:e9:01:c8:d1:6d:a2:bc:32:1d:63:
                    de:ef:cb:e5:dd:fd:ec:ab:ad:e0:44:a4:45:1e:90:
                    6c:c5:8a:03:61:d1:58:3b:8b:21:3d:6a:ab:5b:91:
                    79:4a:6a:0d:35:fb:27:53:1f:e2:87:83:ab:5e:a8:
                    cc:f0:6f:a6:46:a5:84:97:5c:14:eb:ec:0e:54:8e:
                    49:02:e0:c4:2f:ed:b6:76:11:d4:94:98:2e:7c:81:
                    8c:cf:40:b2:29:a7:65:20:9f:13:40:2b:ee:53:cf:
                    11:06:3e:9c:ef:ba:1b:c2:77:2f:90:fe:0b:35:02:
                    2e:e3:c7:33:c3:e8:8f:e7:42:69:bb:71:ef:f9:fe:
                    6c:e6:57:a5:7f:70:b0:3c:c0:f3:1a:21:84:1f:39:
                    91:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E3:57:62:41:09:17:17:02:3C:6C:A5:9C:41:D9:7B:17:D0:69:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/31ddf96c-59cc-3553-a25e-1f8edef09ec2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.196.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:cb:0e:37:5e:39:e6:4a:da:19:d1:86:62:fd:14:6d:0c:f8:
         85:27:16:73:83:50:6d:0f:1e:e8:24:c6:0c:2a:84:81:1a:56:
         dc:68:72:a9:6b:8a:3a:8e:cc:e2:9f:b7:9b:09:82:74:de:51:
         ff:e5:71:78:d8:10:aa:40:10:36:e0:25:84:90:15:8f:73:ed:
         0f:59:f3:72:c8:f5:9c:f1:fa:e3:cf:03:b9:93:7e:ca:50:f4:
         5e:29:92:be:5d:97:61:a0:fe:ab:7b:53:49:7a:f4:90:6d:92:
         43:9e:ed:46:30:56:46:54:8f:e3:a0:3e:92:16:72:bb:58:0d:
         a3:d8:41:fe:b1:c0:5b:1c:85:90:6e:8b:75:21:14:65:fa:30:
         be:e5:c9:f7:a7:c6:2e:06:3d:d8:1b:a1:32:b6:5e:df:a8:0f:
         39:50:ab:8c:a4:04:6b:90:b7:63:eb:bb:4f:51:de:27:bb:a0:
         bf:27:b0:80:31:9a:dc:61:e5:c4:9f:93:a8:6e:81:35:bb:ac:
         cc:3d:be:64:56:5f:41:87:8d:62:9c:b6:30:cc:4d:cf:93:9d:
         d7:d9:5f:5f:aa:04:e1:bc:2a:15:35:28:81:e6:ea:f5:0a:59:
         f1:f0:11:32:8d:e3:46:d4:b0:53:8e:98:5f:34:7c:8b:09:7c:
         1e:42:c2:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4Ky/+6AawozhmQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk
MWJjZjA4ZTEtYmRhMy00MTBlLWE0ZjItMjFkYmQ2MjkwYTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlXvW56MOIG889nxXARmgw8ruyafuWcbQ4Aa
sbjkk1ynXEmmVAaqUQdIUAhfUp7Y9DCzvURDa9sfsGHbzAT+kOlhU2DZtcqTLzpj
HqTHMZWTthMGpp3YhtBVvTKfnEm2HxFF7BRTc8ZBlTo2E+kByNFtorwyHWPe78vl
3f3sq63gRKRFHpBsxYoDYdFYO4shPWqrW5F5SmoNNfsnUx/ih4OrXqjM8G+mRqWE
l1wU6+wOVI5JAuDEL+22dhHUlJgufIGMz0CyKadlIJ8TQCvuU88RBj6c77obwncv
kP4LNQIu48czw+iP50Jpu3Hv+f5s5lelf3CwPMDzGiGEHzmRwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE/jV2JBCRcXAjxspZxB2XsX0GmUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzFkZGY5NmMtNTljYy0z
NTUzLWEyNWUtMWY4ZWRlZjA5ZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrsRIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJHLDjdeOeZK2hnRhmL9FG0M+IUnFnODUG0PHugkxgwqhIEaVtxocqlr
ijqOzOKft5sJgnTeUf/lcXjYEKpAEDbgJYSQFY9z7Q9Z83LI9Zzx+uPPA7mTfspQ
9F4pkr5dl2Gg/qt7U0l69JBtkkOe7UYwVkZUj+OgPpIWcrtYDaPYQf6xwFschZBu
i3UhFGX6ML7lyfenxi4GPdgboTK2Xt+oDzlQq4ykBGuQt2Pru09R3ie7oL8nsIAx
mtxh5cSfk6hugTW7rMw9vmRWX0GHjWKctjDMTc+TndfZX1+qBOG8KhU1KIHm6vUK
WfHwETKN40bUsFOOmF80fIsJfB5CwpM=
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:13:29 2025 by rpki-client