Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5146ad4a-6c4f-34b3-bc85-cb32117489d4.roa
File:                     5146ad4a-6c4f-34b3-bc85-cb32117489d4.roa (raw, json)
Hash identifier:          uoT3iapOPY4xuDeoFHKIv2GvS2J4HOaAIhyeDVHx1Jo=
Subject key identifier:   57:6E:5C:C7:3C:5A:ED:13:24:91:FA:A0:30:13:DB:7C:B8:32:B1:14
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A9FFBB0B6B6CD16C2E58BDD00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5146ad4a-6c4f-34b3-bc85-cb32117489d4.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     0
IP address blocks:        207.78.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:b0:b6:b6:cd:16:c2:e5:8b:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=f341ca2a-6c58-4405-b08a-cdbc4d267016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cd:18:6f:b0:a5:df:dd:50:05:4d:e2:c7:b0:
                    ea:c5:44:c6:9d:9d:04:58:d7:a6:43:ba:a3:67:de:
                    8f:59:78:8b:fc:05:01:81:f9:89:7c:30:a3:2b:8a:
                    c7:b7:a5:9e:7d:84:b3:18:bd:f3:48:76:6a:e7:ba:
                    a2:ee:53:79:5d:dd:f0:de:41:d6:31:f9:02:4f:f7:
                    4b:37:25:cd:ad:04:47:0f:79:33:d4:a6:99:cf:d5:
                    0a:db:1c:65:4c:6e:c3:90:16:c1:19:b2:3f:c1:6a:
                    13:1b:92:b7:87:62:0b:0f:ce:9f:64:0c:3b:c3:85:
                    c3:fa:71:dc:13:3f:4f:2d:de:58:a3:0c:48:5b:81:
                    7c:4b:1c:d1:a8:6f:74:49:a4:7d:c9:97:3c:82:11:
                    c9:82:35:0e:eb:29:11:5c:a6:e4:01:d0:af:3c:97:
                    f6:39:24:52:02:47:73:e6:0a:b0:e9:05:fc:6e:88:
                    7e:2b:da:40:75:c9:9c:0c:43:93:45:a2:80:44:94:
                    10:75:9c:d9:0a:9c:43:f3:c8:35:b5:59:0f:4b:04:
                    5c:1f:d6:c7:b9:d7:06:cc:68:a0:e1:92:cc:41:df:
                    a4:97:80:bb:64:3c:27:4e:21:31:52:18:df:29:cf:
                    bc:ad:ab:ee:d8:26:dc:58:2c:52:fa:ee:2d:a1:ea:
                    90:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6E:5C:C7:3C:5A:ED:13:24:91:FA:A0:30:13:DB:7C:B8:32:B1:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5146ad4a-6c4f-34b3-bc85-cb32117489d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.78.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:b9:8e:ce:57:a2:8c:21:7e:ee:c7:dc:df:bf:47:23:d7:d5:
         48:1e:67:5d:10:a3:4b:31:14:48:cb:74:98:0d:88:9d:4f:69:
         fa:60:80:d9:e2:a5:62:6d:7c:57:c7:48:c0:28:2b:1e:ff:c9:
         91:9e:8a:f3:25:43:59:98:78:16:5f:fc:0b:a5:52:eb:dd:61:
         fa:70:5d:14:96:e4:1b:35:20:00:8e:90:13:bb:d1:5d:b4:23:
         d6:43:e7:cb:42:09:5e:6d:08:50:6d:8d:0d:09:4a:61:b2:40:
         76:86:22:46:59:45:66:b5:d3:3d:72:99:b0:5b:14:ac:df:6a:
         38:ab:6c:f4:c8:97:4b:89:3f:ce:96:e9:5d:54:1a:d2:71:e8:
         6d:d4:aa:1d:61:cf:a5:de:58:73:53:1e:62:40:b1:09:8e:f9:
         bb:89:47:4f:a5:c3:2c:0e:02:b1:b3:17:f9:46:ed:5d:d5:69:
         e5:0d:5f:83:0d:a7:ca:5b:2d:e0:5f:b5:09:35:a5:4f:23:be:
         09:68:1b:32:a0:2e:56:6f:ea:f8:6f:bf:d1:36:13:c3:78:42:
         d8:90:82:c3:ed:b6:b8:4e:b0:0d:d0:d8:a3:ad:ad:d6:b1:d4:
         4c:74:c1:33:f2:0a:ff:3b:cd:02:7d:f5:b5:72:95:15:ad:40:
         87:7b:6a:5d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+7C2ts0WwuWL3QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk
ZjM0MWNhMmEtNmM1OC00NDA1LWIwOGEtY2RiYzRkMjY3MDE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM0Yb7Cl391QBU3ix7DqxUTGnZ0EWNemQ7qj
Z96PWXiL/AUBgfmJfDCjK4rHt6WefYSzGL3zSHZq57qi7lN5Xd3w3kHWMfkCT/dL
NyXNrQRHD3kz1KaZz9UK2xxlTG7DkBbBGbI/wWoTG5K3h2ILD86fZAw7w4XD+nHc
Ez9PLd5YowxIW4F8SxzRqG90SaR9yZc8ghHJgjUO6ykRXKbkAdCvPJf2OSRSAkdz
5gqw6QX8boh+K9pAdcmcDEOTRaKARJQQdZzZCpxD88g1tVkPSwRcH9bHudcGzGig
4ZLMQd+kl4C7ZDwnTiExUhjfKc+8ravu2CbcWCxS+u4toeqQ1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFduXMc8Wu0TJJH6oDAT23y4MrEUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTE0NmFkNGEtNmM0Zi0z
NGIzLWJjODUtY2IzMjExNzQ4OWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz05kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADe5js5Xoowhfu7H3N+/RyPX1UgeZ10Qo0sxFEjLdJgNiJ1PafpggNni
pWJtfFfHSMAoKx7/yZGeivMlQ1mYeBZf/AulUuvdYfpwXRSW5Bs1IACOkBO70V20
I9ZD58tCCV5tCFBtjQ0JSmGyQHaGIkZZRWa10z1ymbBbFKzfajirbPTIl0uJP86W
6V1UGtJx6G3Uqh1hz6XeWHNTHmJAsQmO+buJR0+lwywOArGzF/lG7V3VaeUNX4MN
p8pbLeBftQk1pU8jvgloGzKgLlZv6vhvv9E2E8N4QtiQgsPttrhOsA3Q2KOtrdax
1Ex0wTPyCv87zQJ99bVylRWtQId7al0=
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:58:24 2025 by rpki-client