Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/405233e4-0350-3cf9-b498-83f34e6e1d8f.roa
File:                     405233e4-0350-3cf9-b498-83f34e6e1d8f.roa (raw, json)
Hash identifier:          FcGVBoPKdVkS5DZQ2Gs/U/jX+q+kG3qyD05hrkC3yUM=
Subject key identifier:   02:91:38:D1:67:F6:C5:0E:51:29:3D:33:FF:80:08:05:10:30:29:F3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A8DD5FEEFD918951AD6685380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/405233e4-0350-3cf9-b498-83f34e6e1d8f.roa
Signing time:             Fri 18 Jul 2025 01:00:48 +0000
ROA not before:           Fri 18 Jul 2025 01:00:48 +0000
ROA not after:            Thu 16 Oct 2025 01:00:48 +0000
asID:                     6167
IP address blocks:        97.204.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:d5:fe:ef:d9:18:95:1a:d6:68:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 18 01:00:48 2025 GMT
            Not After : Oct 16 01:00:48 2025 GMT
        Subject: CN=96ab8b03-80d9-4a67-b69e-549503e22170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b6:ca:7c:2a:00:2f:7d:66:ca:96:d3:83:c0:
                    dd:b9:6e:26:49:da:fe:9c:00:30:8f:39:02:02:a1:
                    80:ab:8a:fe:00:49:80:57:6b:df:a5:0f:cb:63:52:
                    47:5b:7d:2e:21:89:1d:e3:a0:c4:d1:c0:de:7d:21:
                    e2:bb:44:1c:33:6e:35:ef:78:63:e7:75:c5:67:e0:
                    dc:d5:f5:71:73:2a:8e:40:96:0b:bf:e9:1f:b4:59:
                    ef:47:79:a9:d3:f9:bf:78:44:37:d1:2c:e2:23:b2:
                    f7:5d:79:aa:76:09:cf:73:0b:b8:ca:af:a6:c4:45:
                    69:76:cc:b1:5d:91:85:ed:6a:33:4a:29:63:86:43:
                    29:30:a4:3e:30:ab:0b:bc:89:40:66:c2:24:6c:29:
                    1c:be:de:a0:e5:2d:0c:46:07:47:88:fc:cf:db:32:
                    bd:c3:7e:08:f0:3f:9c:bf:b2:bc:cc:9a:d7:c6:f5:
                    89:2c:ee:8f:18:06:90:eb:c5:15:e7:fd:32:ca:6b:
                    3a:10:a9:40:ca:44:2a:ff:59:90:6e:ae:3e:0f:d7:
                    89:af:55:3f:50:28:98:c7:67:59:4c:95:ec:e4:d1:
                    12:77:58:39:d8:58:a5:62:f8:32:d7:d9:f9:a7:1d:
                    b3:0c:45:0b:4a:df:e5:b7:ed:2a:2c:64:bf:7e:f5:
                    ef:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:91:38:D1:67:F6:C5:0E:51:29:3D:33:FF:80:08:05:10:30:29:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/405233e4-0350-3cf9-b498-83f34e6e1d8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.204.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f1:8b:f4:50:8f:ef:f0:2c:0c:50:fe:e9:e9:97:5f:f2:7e:
         b9:20:24:a4:4d:c9:18:97:86:02:21:6b:58:b4:17:0e:ec:6c:
         19:dd:44:58:49:12:1d:e5:5b:59:06:44:c3:ef:6a:ca:d1:ca:
         43:55:3b:2d:8b:8c:a4:0b:33:70:8b:63:43:e0:ce:04:29:33:
         f1:c9:a1:47:5f:2d:df:34:82:3e:57:fa:ff:04:a3:d5:05:9f:
         6e:bd:5b:13:ca:0a:a8:8c:44:11:54:c0:65:24:4c:d1:c0:e0:
         d8:f4:c2:86:1b:06:18:47:c7:76:21:24:7f:11:90:71:2e:4a:
         7d:b0:a7:04:09:9b:9b:58:da:b5:6d:a4:c0:12:98:4e:7e:45:
         55:86:a0:42:b5:a6:c0:6e:9e:b9:46:f1:f0:c2:e5:b0:e6:7e:
         f7:28:23:2a:80:2d:ba:15:16:93:4d:7e:9e:84:bc:92:fd:fe:
         54:f9:0f:b4:02:e6:c3:50:58:e6:7b:0a:96:ad:42:b2:3b:de:
         83:e6:d5:28:30:a0:5c:d2:fe:f7:fe:b6:b8:3e:ec:2d:0b:50:
         8f:2a:85:07:7c:98:ec:e4:c4:ab:96:a3:e7:fc:f7:17:b1:4e:
         78:96:9a:3e:b6:9c:a1:bb:ec:84:23:95:42:0a:1f:52:30:5a:
         e1:41:53:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqN1f7v2RiVGtZoU4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcxODAxMDA0OFoXDTI1MTAxNjAxMDA0OFowLzEtMCsGA1UEAxMk
OTZhYjhiMDMtODBkOS00YTY3LWI2OWUtNTQ5NTAzZTIyMTcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbbKfCoAL31mypbTg8DduW4mSdr+nAAwjzkC
AqGAq4r+AEmAV2vfpQ/LY1JHW30uIYkd46DE0cDefSHiu0QcM24173hj53XFZ+Dc
1fVxcyqOQJYLv+kftFnvR3mp0/m/eEQ30SziI7L3XXmqdgnPcwu4yq+mxEVpdsyx
XZGF7WozSiljhkMpMKQ+MKsLvIlAZsIkbCkcvt6g5S0MRgdHiPzP2zK9w34I8D+c
v7K8zJrXxvWJLO6PGAaQ68UV5/0yyms6EKlAykQq/1mQbq4+D9eJr1U/UCiYx2dZ
TJXs5NESd1g52FilYvgy19n5px2zDEULSt/lt+0qLGS/fvXvBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAKRONFn9sUOUSk9M/+ACAUQMCnzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDA1MjMzZTQtMDM1MC0z
Y2Y5LWI0OTgtODNmMzRlNmUxZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYcwkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFHxi/RQj+/wLAxQ/unpl1/yfrkgJKRNyRiXhgIha1i0Fw7sbBndRFhJ
Eh3lW1kGRMPvasrRykNVOy2LjKQLM3CLY0PgzgQpM/HJoUdfLd80gj5X+v8Eo9UF
n269WxPKCqiMRBFUwGUkTNHA4Nj0woYbBhhHx3YhJH8RkHEuSn2wpwQJm5tY2rVt
pMASmE5+RVWGoEK1psBunrlG8fDC5bDmfvcoIyqALboVFpNNfp6EvJL9/lT5D7QC
5sNQWOZ7CpatQrI73oPm1SgwoFzS/vf+trg+7C0LUI8qhQd8mOzkxKuWo+f89xex
TniWmj62nKG77IQjlUIKH1IwWuFBU/s=
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:14:14 2025 by rpki-client