Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4df75cd1-3ef6-3c21-8b4b-a02734107768.roa
File:                     4df75cd1-3ef6-3c21-8b4b-a02734107768.roa (raw, json)
Hash identifier:          JtkYVs/YN+nOnO8w/pmqM80ffRqhixGgZRT/aGZxd7U=
Subject key identifier:   43:4E:7A:89:13:F7:8A:BA:37:F2:98:39:F9:DE:85:08:E2:4B:34:08
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AA6F637B4EC08D35E6226B2C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4df75cd1-3ef6-3c21-8b4b-a02734107768.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        174.227.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:37:b4:ec:08:d3:5e:62:26:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=1acc3e20-39da-48ba-8047-0854689bc07d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e0:2c:dc:5b:b3:f5:4d:cd:ab:b7:a3:2c:3a:
                    17:e8:92:31:92:b3:6a:ab:ab:62:9f:61:96:99:6f:
                    ec:d5:26:50:f3:78:f4:9c:1d:69:a7:8e:77:65:d0:
                    7c:ff:ef:51:db:34:c1:01:4b:c1:db:74:9e:4d:d9:
                    4e:f0:93:cd:96:be:f6:d4:7b:f7:6f:bf:0a:23:19:
                    a6:24:38:6c:5b:bc:85:5b:c7:d7:f3:37:ab:6a:1f:
                    31:f5:17:ec:5e:2a:e0:bf:ea:a1:12:64:a1:2b:e4:
                    b4:f6:7b:88:91:a5:0a:04:d4:2b:df:1f:e1:49:22:
                    8c:68:64:70:74:4f:53:b4:21:97:ba:f8:fa:f7:86:
                    14:e4:44:8a:d9:49:01:31:f7:c5:ea:35:cc:84:24:
                    4d:7b:c8:3a:05:a3:b7:dc:01:d8:a5:96:13:18:f2:
                    5b:65:a0:b7:cc:2a:e1:ca:50:42:bb:4f:8a:e0:41:
                    4f:e2:ec:fd:ff:2b:eb:ca:08:7d:83:05:b5:d5:1c:
                    21:8b:e4:4f:c9:b9:a1:e1:7e:22:e7:45:41:42:52:
                    79:96:0e:e7:d7:a0:58:fd:0f:73:18:55:91:f9:6b:
                    5f:33:d2:93:dc:f6:55:d1:2e:2f:5c:9e:56:5c:7b:
                    05:da:28:16:9d:0f:2f:e2:bb:4a:f4:40:9f:44:f6:
                    54:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:4E:7A:89:13:F7:8A:BA:37:F2:98:39:F9:DE:85:08:E2:4B:34:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4df75cd1-3ef6-3c21-8b4b-a02734107768.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.227.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:d8:6b:c6:75:b1:64:8d:6e:b3:c3:26:c4:4d:34:cf:98:44:
         cf:71:76:50:31:e6:70:68:d7:e9:2d:0f:c4:6a:8b:26:a8:2e:
         a1:4b:69:88:75:16:2f:59:08:5a:d7:82:21:9b:27:a7:83:4d:
         2d:73:b5:37:a7:8d:0b:4f:a0:49:b9:ee:b4:a0:5d:c6:58:5e:
         a1:3d:98:46:af:65:b2:3e:20:16:79:ab:08:b7:5f:93:2d:72:
         92:5b:28:2a:b2:84:31:d2:c5:ac:24:e7:9b:32:cf:c9:fd:5b:
         2c:32:f8:fb:f5:12:17:31:43:79:c3:cf:f6:bf:9b:a3:82:51:
         ec:f9:e7:48:25:14:48:89:dd:a8:db:46:9e:ca:e6:e4:88:58:
         c4:32:84:7e:1a:45:91:43:65:74:03:bb:8d:21:52:c7:21:d3:
         4f:99:6d:42:aa:d3:3d:68:46:a7:47:42:e4:5c:8e:b0:a9:30:
         06:64:c6:ca:36:06:22:36:84:19:cb:d9:18:2f:75:f1:f9:25:
         f5:08:05:d1:95:b6:5b:05:75:a7:80:37:bd:e3:ab:94:12:16:
         dd:af:e8:6e:26:0c:af:26:e3:74:10:2a:ba:e7:2f:f9:7b:4c:
         d5:e9:fe:07:2d:ad:7b:c8:9b:d5:b3:bb:61:4f:d0:06:92:a8:
         33:f5:60:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9je07AjTXmImssAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk
MWFjYzNlMjAtMzlkYS00OGJhLTgwNDctMDg1NDY4OWJjMDdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuAs3Fuz9U3Nq7ejLDoX6JIxkrNqq6tin2GW
mW/s1SZQ83j0nB1pp453ZdB8/+9R2zTBAUvB23SeTdlO8JPNlr721Hv3b78KIxmm
JDhsW7yFW8fX8zerah8x9RfsXirgv+qhEmShK+S09nuIkaUKBNQr3x/hSSKMaGRw
dE9TtCGXuvj694YU5ESK2UkBMffF6jXMhCRNe8g6BaO33AHYpZYTGPJbZaC3zCrh
ylBCu0+K4EFP4uz9/yvrygh9gwW11Rwhi+RPybmh4X4i50VBQlJ5lg7n16BY/Q9z
GFWR+WtfM9KT3PZV0S4vXJ5WXHsF2igWnQ8v4rtK9ECfRPZUQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFENOeokT94q6N/KYOfnehQjiSzQIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGRmNzVjZDEtM2VmNi0z
YzIxLThiNGItYTAyNzM0MTA3NzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruOQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADXYa8Z1sWSNbrPDJsRNNM+YRM9xdlAx5nBo1+ktD8RqiyaoLqFLaYh1
Fi9ZCFrXgiGbJ6eDTS1ztTenjQtPoEm57rSgXcZYXqE9mEavZbI+IBZ5qwi3X5Mt
cpJbKCqyhDHSxawk55syz8n9Wywy+Pv1EhcxQ3nDz/a/m6OCUez550glFEiJ3ajb
Rp7K5uSIWMQyhH4aRZFDZXQDu40hUsch00+ZbUKq0z1oRqdHQuRcjrCpMAZkxso2
BiI2hBnL2RgvdfH5JfUIBdGVtlsFdaeAN73jq5QSFt2v6G4mDK8m43QQKrrnL/l7
TNXp/gctrXvIm9Wzu2FP0AaSqDP1YG0=
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:21:15 2025 by rpki-client