Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33763006-84fe-383e-80b1-baabedd172b0.roa
File:                     33763006-84fe-383e-80b1-baabedd172b0.roa (raw, json)
Hash identifier:          QZ7W5+elq27yl4MEg/AL8DH6B+IhuERrhvpdNg81wyw=
Subject key identifier:   58:10:8C:AE:C8:4A:F7:2F:81:7D:BB:FA:91:11:B1:96:D8:D1:80:70
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AA6F63285515FC377AA1B8080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33763006-84fe-383e-80b1-baabedd172b0.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        174.232.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:32:85:51:5f:c3:77:aa:1b:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=5253a1af-8a72-4f71-8db9-5ed7647d80ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f2:e5:73:cf:76:56:17:cd:da:e6:df:37:fe:
                    1f:54:dd:7c:22:11:ea:ac:6c:b6:e2:ab:1e:1a:2c:
                    0b:24:00:69:82:41:3c:20:8a:71:62:ae:7e:17:ac:
                    75:d5:4d:03:29:19:bf:f8:6f:9b:b2:84:3e:10:20:
                    90:c4:42:c6:89:04:1c:09:50:e6:60:32:69:8f:80:
                    8f:48:51:ed:21:1e:ae:ec:3a:8a:74:38:be:61:a6:
                    31:29:2b:3e:d0:27:57:d7:60:06:f9:84:9b:42:0f:
                    0f:e8:24:50:22:50:d0:8b:ae:74:17:3f:a7:b6:7e:
                    f1:15:3e:ba:64:22:65:ff:79:42:a3:54:99:fc:4e:
                    24:17:f0:4e:b5:94:05:9e:46:90:37:41:01:ca:eb:
                    ba:2e:c8:10:9a:3a:07:9f:c1:dd:1d:da:64:38:d7:
                    3f:0b:6e:36:f2:96:ae:18:22:90:42:a7:c6:09:9f:
                    79:6b:6b:c8:e5:f1:a7:99:8f:21:89:6b:e7:d5:42:
                    70:91:88:68:d6:4c:23:98:1a:dd:a6:97:e4:34:86:
                    ef:37:08:dc:b3:ee:5a:f0:32:95:03:d0:b6:00:2c:
                    d8:2b:c2:bc:3d:3f:a7:43:84:74:46:3c:a3:a2:c3:
                    10:0a:bd:7d:2c:d4:49:3e:17:cd:76:16:d9:1e:11:
                    00:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:10:8C:AE:C8:4A:F7:2F:81:7D:BB:FA:91:11:B1:96:D8:D1:80:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33763006-84fe-383e-80b1-baabedd172b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.232.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:66:77:88:b8:82:90:0b:10:eb:67:31:bc:68:90:16:b7:d1:
         bd:ef:f0:ed:1b:f0:7e:0d:31:36:6d:eb:08:41:45:60:01:a3:
         83:0c:57:a5:ed:ff:c2:fb:c0:00:90:d5:9e:aa:09:9d:93:c5:
         da:6e:0a:b2:1d:bd:66:54:0c:3e:fa:16:b8:db:cb:80:c7:14:
         bc:d7:44:3d:77:e6:82:8f:4b:42:b0:65:d4:80:c9:2b:6d:ae:
         b3:c6:34:37:f0:8b:42:2b:68:84:9a:7e:72:87:a9:5a:c7:eb:
         b6:f4:81:90:25:df:05:c8:88:7b:36:70:03:cb:d8:bf:b4:8e:
         42:dc:d9:2d:d0:66:83:1f:72:30:86:aa:bd:af:c8:ef:8b:9c:
         4e:d1:12:c8:b0:6c:37:2d:b0:57:65:76:e4:6e:dc:12:d9:83:
         3b:93:52:3c:c1:8c:ee:13:18:99:ea:16:3e:30:ea:f0:ad:fd:
         27:c5:b8:c0:73:cd:55:0f:39:5c:66:14:1a:b2:0a:cc:d6:40:
         73:5a:fa:dc:db:2b:6a:84:4e:7f:c7:13:46:7e:29:db:aa:e2:
         3e:ba:f2:fc:53:13:59:12:a1:2d:f5:cb:9b:bc:14:ec:b4:d5:
         f5:a5:e9:23:57:f2:ba:c9:27:d3:5a:59:63:bf:af:b3:64:2a:
         be:0a:22:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9jKFUV/Dd6obgIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk
NTI1M2ExYWYtOGE3Mi00ZjcxLThkYjktNWVkNzY0N2Q4MGVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivLlc892VhfN2ubfN/4fVN18IhHqrGy24qse
GiwLJABpgkE8IIpxYq5+F6x11U0DKRm/+G+bsoQ+ECCQxELGiQQcCVDmYDJpj4CP
SFHtIR6u7DqKdDi+YaYxKSs+0CdX12AG+YSbQg8P6CRQIlDQi650Fz+ntn7xFT66
ZCJl/3lCo1SZ/E4kF/BOtZQFnkaQN0EByuu6LsgQmjoHn8HdHdpkONc/C2428pau
GCKQQqfGCZ95a2vI5fGnmY8hiWvn1UJwkYho1kwjmBrdppfkNIbvNwjcs+5a8DKV
A9C2ACzYK8K8PT+nQ4R0RjyjosMQCr19LNRJPhfNdhbZHhEA9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFgQjK7ISvcvgX27+pERsZbY0YBwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzM3NjMwMDYtODRmZS0z
ODNlLTgwYjEtYmFhYmVkZDE3MmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBruiKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEZmd4i4gpALEOtnMbxokBa30b3v8O0b8H4NMTZt6whBRWABo4MMV6Xt
/8L7wACQ1Z6qCZ2TxdpuCrIdvWZUDD76Frjby4DHFLzXRD135oKPS0KwZdSAyStt
rrPGNDfwi0IraISafnKHqVrH67b0gZAl3wXIiHs2cAPL2L+0jkLc2S3QZoMfcjCG
qr2vyO+LnE7REsiwbDctsFdlduRu3BLZgzuTUjzBjO4TGJnqFj4w6vCt/SfFuMBz
zVUPOVxmFBqyCszWQHNa+tzbK2qETn/HE0Z+Kduq4j668vxTE1kSoS31y5u8FOy0
1fWl6SNX8rrJJ9NaWWO/r7NkKr4KIqc=
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:50:17 2025 by rpki-client