Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/51c07629-0219-39d1-9ed8-2742dddf5f1c.roa
File:                     51c07629-0219-39d1-9ed8-2742dddf5f1c.roa (raw, json)
Hash identifier:          JyqGHusumZQqhxatOgotKqHpp3Die9wx7BKcplL0mwE=
Subject key identifier:   9F:9E:1D:86:52:02:C5:4F:1A:60:31:4A:7B:7A:05:E7:8D:15:AE:FC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AC2E110DE9CF3DD0A0DD076A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/51c07629-0219-39d1-9ed8-2742dddf5f1c.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     701
IP address blocks:        67.108.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:10:de:9c:f3:dd:0a:0d:d0:76:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=88490a3f-f3ee-42e4-b5b8-9648ec26eef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:01:0b:32:dc:8b:e5:0c:83:49:86:86:53:d3:
                    d9:3b:60:25:57:9f:24:3d:7c:74:8f:20:eb:59:82:
                    1b:a9:a9:64:06:84:aa:fd:b4:80:4e:e2:f5:90:0f:
                    29:7f:22:68:ff:36:d1:aa:b0:a9:2f:85:28:70:43:
                    74:30:52:a4:26:b7:16:ba:05:1a:3d:59:f7:0b:cf:
                    57:4e:a6:1e:9c:4e:67:5e:24:7c:36:67:fb:b2:c3:
                    70:74:0d:a0:91:ff:b5:6d:ca:01:f1:b1:cd:c0:c7:
                    af:ae:2e:4a:0d:cd:3d:2f:b5:13:75:66:d0:ff:f2:
                    6f:4e:7f:59:78:c5:a3:50:64:8e:a8:22:a9:23:4b:
                    e6:ce:3f:01:6d:c1:76:bd:95:e1:d0:1c:c6:50:4e:
                    66:9e:44:99:e3:80:3a:ef:48:02:22:71:ea:21:22:
                    d4:5a:f9:20:dc:e5:f6:e2:58:0d:ed:b0:f0:ba:d0:
                    8e:27:2d:8f:3a:ec:5d:6c:6a:c4:4f:3c:f8:80:fa:
                    de:7b:95:6d:0e:c9:29:61:3c:86:2b:40:28:be:61:
                    75:26:e2:95:4f:7b:8c:bb:ac:be:50:e8:9c:b0:a2:
                    fa:02:08:38:8e:10:51:ce:06:4f:19:e1:c2:f3:0b:
                    f6:41:45:40:5e:87:45:cd:67:fd:8c:a7:05:86:72:
                    47:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9E:1D:86:52:02:C5:4F:1A:60:31:4A:7B:7A:05:E7:8D:15:AE:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/51c07629-0219-39d1-9ed8-2742dddf5f1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.108.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:e7:d6:7b:d1:c4:72:26:8b:6d:86:b8:74:2d:7d:4e:f7:15:
         cc:59:fb:f2:0a:5d:57:9b:5c:46:70:53:af:7c:03:bb:24:f5:
         73:7f:aa:82:b9:50:2b:eb:b7:c8:c2:fb:9d:4c:c9:07:bf:55:
         22:27:7d:08:69:14:b3:e6:34:0e:c4:4b:eb:14:81:89:0e:1e:
         80:74:f2:2f:59:4b:8a:77:b8:97:c8:94:3f:ba:c1:1c:7d:e9:
         03:e3:55:69:a9:8a:ea:fc:f6:48:da:e5:a3:d4:96:24:e8:ce:
         f5:12:bf:9e:d2:c4:6f:37:4f:31:55:f3:c5:48:bc:c1:bd:12:
         d1:59:a8:27:30:e6:68:c4:9d:36:00:5f:21:ac:9f:87:f0:53:
         a2:90:46:46:45:a4:10:99:0d:43:0c:20:b3:07:0c:7f:d3:6c:
         a9:bc:de:f0:9d:fc:09:de:ff:ec:fb:a4:74:4c:e2:73:42:35:
         07:64:1c:ea:68:03:27:89:c3:53:d5:5a:6e:c9:7d:ba:c5:28:
         c9:bd:61:5b:2f:6c:52:99:48:7b:96:99:6a:53:43:7b:96:5f:
         6f:ad:01:9b:43:13:41:f5:6a:3c:78:8f:f4:f8:05:bd:23:56:
         97:0e:87:d3:f0:ec:1c:84:ad:6e:b1:2c:28:12:2e:48:7b:b4:
         d7:e7:7e:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4RDenPPdCg3QdqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
ODg0OTBhM2YtZjNlZS00MmU0LWI1YjgtOTY0OGVjMjZlZWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogELMtyL5QyDSYaGU9PZO2AlV58kPXx0jyDr
WYIbqalkBoSq/bSATuL1kA8pfyJo/zbRqrCpL4UocEN0MFKkJrcWugUaPVn3C89X
TqYenE5nXiR8Nmf7ssNwdA2gkf+1bcoB8bHNwMevri5KDc09L7UTdWbQ//JvTn9Z
eMWjUGSOqCKpI0vmzj8BbcF2vZXh0BzGUE5mnkSZ44A670gCInHqISLUWvkg3OX2
4lgN7bDwutCOJy2POuxdbGrETzz4gPree5VtDskpYTyGK0AovmF1JuKVT3uMu6y+
UOicsKL6Agg4jhBRzgZPGeHC8wv2QUVAXodFzWf9jKcFhnJHhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ+eHYZSAsVPGmAxSnt6BeeNFa78MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTFjMDc2MjktMDIxOS0z
OWQxLTllZDgtMjc0MmRkZGY1ZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ2yiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHXn1nvRxHImi22GuHQtfU73FcxZ+/IKXVebXEZwU698A7sk9XN/qoK5
UCvrt8jC+51MyQe/VSInfQhpFLPmNA7ES+sUgYkOHoB08i9ZS4p3uJfIlD+6wRx9
6QPjVWmpiur89kja5aPUliTozvUSv57SxG83TzFV88VIvMG9EtFZqCcw5mjEnTYA
XyGsn4fwU6KQRkZFpBCZDUMMILMHDH/TbKm83vCd/Ane/+z7pHRM4nNCNQdkHOpo
AyeJw1PVWm7JfbrFKMm9YVsvbFKZSHuWmWpTQ3uWX2+tAZtDE0H1ajx4j/T4Bb0j
VpcOh9Pw7ByErW6xLCgSLkh7tNfnfqE=
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:18 2025 by rpki-client