Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34284c9b-e4df-318a-81f6-03c50bfc8009.roa
File:                     34284c9b-e4df-318a-81f6-03c50bfc8009.roa (raw, json)
Hash identifier:          DOh7QiK8wMINH8Pg6cS65S8rUk0kWfivIlwla0k4GFI=
Subject key identifier:   4D:48:83:4D:B5:E0:7D:B3:4C:02:02:0E:B1:55:96:94:AC:15:EA:49
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584964845DC7213C5E952043C880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34284c9b-e4df-318a-81f6-03c50bfc8009.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        75.197.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:5d:c7:21:3c:5e:95:20:43:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=00fd056d-28f3-495f-b920-a6ac3a7ac79c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:99:a7:ea:e5:69:00:8e:72:a6:0f:74:b6:b6:
                    0f:b2:6b:bc:28:53:25:f4:51:bc:56:fa:82:ea:7c:
                    20:36:ac:9e:7f:78:1e:c8:1a:25:54:2f:5b:d6:a4:
                    50:e9:b0:1e:f3:f3:32:42:07:02:90:c7:70:65:1e:
                    79:d4:83:fd:e8:ab:f9:e1:23:e0:8e:10:2c:99:a1:
                    6a:f7:3c:ad:b0:ae:4c:a1:32:b2:89:d4:59:97:d0:
                    9d:06:af:32:6a:3a:d8:bc:5b:ff:dc:f2:8a:16:dd:
                    12:9b:5b:a1:d9:6c:23:c3:76:b7:18:70:1e:89:86:
                    10:36:b5:0c:7d:13:01:6b:22:87:ef:f6:a7:87:7f:
                    c5:9b:3d:e9:e0:fd:9b:f4:81:9e:05:7a:cd:9a:b2:
                    64:91:17:46:fc:75:f4:f9:ce:8e:bf:29:d8:85:11:
                    4e:84:80:39:9c:e9:57:b3:47:5d:b0:99:d4:07:9d:
                    3c:36:55:ff:7c:5d:de:c4:0b:b1:75:b0:60:cd:f7:
                    5b:87:08:ba:00:61:83:c5:e2:28:8a:89:36:cf:24:
                    dd:49:1a:8b:be:2b:b6:19:22:6c:12:f5:31:ac:ca:
                    82:ae:72:d1:0c:6a:7e:ee:da:5f:71:27:9f:fb:b3:
                    49:ef:71:f4:9e:8c:6e:f1:18:df:7c:57:2d:a8:2a:
                    92:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:48:83:4D:B5:E0:7D:B3:4C:02:02:0E:B1:55:96:94:AC:15:EA:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34284c9b-e4df-318a-81f6-03c50bfc8009.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.197.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:fc:a5:7e:d0:5a:70:c0:88:38:0f:9a:5c:4e:28:9b:f6:ae:
         92:59:a9:31:b0:fa:b8:d4:97:c4:27:27:dd:9a:dc:af:5b:41:
         c7:00:ae:51:8d:89:e5:f6:27:ed:4c:e0:ad:11:be:a8:34:7f:
         a3:b4:2a:d8:ba:72:ab:61:8a:f8:73:40:1c:4a:e8:40:08:f2:
         63:0e:aa:aa:fe:e5:53:af:68:78:e4:80:8f:24:ba:b0:c8:2c:
         db:59:50:68:f8:cf:93:71:11:3c:de:45:eb:e8:4c:02:9f:cc:
         bf:73:86:9e:b5:9a:1d:c6:01:4f:79:4e:81:32:af:77:31:53:
         a5:4f:bb:fe:d7:a7:5c:05:3b:78:3c:4c:63:07:2d:6f:57:9d:
         b7:12:7f:8a:61:95:41:06:74:bc:cb:a5:e9:68:f7:d8:72:ef:
         f8:66:93:48:ab:cc:4d:e5:78:f5:6f:bd:c0:23:4a:77:97:f2:
         7b:59:f4:dc:d7:90:99:da:d9:f8:71:45:4c:21:af:cf:d1:2b:
         37:0d:00:1c:71:02:9b:63:7c:8b:c1:e6:7f:b8:1c:29:6c:c4:
         56:26:7d:17:b7:c4:1a:ab:11:f3:fa:e2:50:78:5f:70:9d:86:
         1e:fb:01:b8:37:7e:41:32:b3:7b:93:fe:1e:6d:6f:55:ae:ea:
         72:bf:c1:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhF3HITxelSBDyIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk
MDBmZDA1NmQtMjhmMy00OTVmLWI5MjAtYTZhYzNhN2FjNzljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpmn6uVpAI5ypg90trYPsmu8KFMl9FG8VvqC
6nwgNqyef3geyBolVC9b1qRQ6bAe8/MyQgcCkMdwZR551IP96Kv54SPgjhAsmaFq
9zytsK5MoTKyidRZl9CdBq8yajrYvFv/3PKKFt0Sm1uh2Wwjw3a3GHAeiYYQNrUM
fRMBayKH7/anh3/Fmz3p4P2b9IGeBXrNmrJkkRdG/HX0+c6OvynYhRFOhIA5nOlX
s0ddsJnUB508NlX/fF3exAuxdbBgzfdbhwi6AGGDxeIoiok2zyTdSRqLviu2GSJs
EvUxrMqCrnLRDGp+7tpfcSef+7NJ73H0noxu8RjffFctqCqSfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE1Ig0214H2zTAICDrFVlpSsFepJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzQyODRjOWItZTRkZi0z
MThhLTgxZjYtMDNjNTBiZmM4MDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGS8VAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ/8pX7QWnDAiDgPmlxOKJv2rpJZqTGw+rjUl8QnJ92a3K9bQccArlGN
ieX2J+1M4K0Rvqg0f6O0Kti6cqthivhzQBxK6EAI8mMOqqr+5VOvaHjkgI8kurDI
LNtZUGj4z5NxETzeRevoTAKfzL9zhp61mh3GAU95ToEyr3cxU6VPu/7Xp1wFO3g8
TGMHLW9XnbcSf4phlUEGdLzLpelo99hy7/hmk0irzE3lePVvvcAjSneX8ntZ9NzX
kJna2fhxRUwhr8/RKzcNABxxAptjfIvB5n+4HClsxFYmfRe3xBqrEfP64lB4X3Cd
hh77Abg3fkEys3uT/h5tb1Wu6nK/wcU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 23:00:39 2025 by rpki-client