Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/55c01e46-49f1-3505-8ee2-9e1ce8344eef.roa
File:                     55c01e46-49f1-3505-8ee2-9e1ce8344eef.roa (raw, json)
Hash identifier:          IzZnHqwblucFFJJttzPVAQYZjMRFKNjK2mVF+XsXMCY=
Subject key identifier:   26:B8:A0:A4:A2:AF:E9:B6:AC:4B:29:6A:C7:BB:6A:C4:0A:23:B5:02
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849A089D92837D9125089FCA180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/55c01e46-49f1-3505-8ee2-9e1ce8344eef.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.201.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:d9:28:37:d9:12:50:89:fc:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=158ca429-047e-4b76-b4fb-3938c9d80b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:57:7d:16:f6:7a:0d:78:34:ee:66:c7:79:28:
                    f7:9f:2b:69:49:f4:d8:d7:47:1b:82:8d:b0:73:b5:
                    2a:d0:49:f0:b0:8a:f9:3d:c9:0f:13:e1:ce:e8:69:
                    29:5a:d0:c9:49:2a:ec:99:e4:b8:26:ce:f4:74:e8:
                    07:fd:10:c3:10:dc:df:bb:88:cb:69:fa:36:a0:2e:
                    cb:81:71:64:e8:ee:a3:7f:e6:63:8b:55:b6:68:0b:
                    71:c0:4d:ef:d4:09:80:1d:bf:c9:e0:67:53:88:67:
                    20:cf:16:0d:95:ad:b4:bb:ed:1d:89:75:88:eb:39:
                    f0:24:d8:c3:8c:f2:85:62:fe:6b:3c:f7:ab:ed:34:
                    e3:89:55:f1:cb:d3:ff:af:da:63:60:f7:92:ac:cd:
                    da:ad:04:4a:79:2a:90:81:64:8c:d8:d0:27:72:07:
                    ce:e4:ce:57:8e:50:ff:34:bc:8b:29:46:71:9e:2d:
                    1a:42:f8:4e:6d:72:4b:43:04:46:d7:a2:99:55:98:
                    50:d2:c2:85:ab:e3:ad:aa:62:ef:d9:5f:08:18:1d:
                    b7:56:bc:33:78:fa:39:ec:77:ca:33:c2:58:66:58:
                    a7:00:39:27:d0:b6:21:c8:e9:4d:cd:39:64:93:a4:
                    fc:49:a0:1e:a8:3f:de:36:92:17:12:20:55:83:d2:
                    a0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B8:A0:A4:A2:AF:E9:B6:AC:4B:29:6A:C7:BB:6A:C4:0A:23:B5:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/55c01e46-49f1-3505-8ee2-9e1ce8344eef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.201.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:b3:f9:59:55:41:5b:73:ae:96:fd:23:26:d5:df:9e:cf:df:
         b3:fe:29:9c:95:23:b7:9e:5c:c3:1c:7b:14:ee:61:1d:65:03:
         1c:44:65:39:05:2c:0f:ad:6f:67:7f:56:39:cb:89:c3:9e:9c:
         24:a6:8d:bb:74:75:01:69:33:a2:80:58:c3:cd:ad:0e:d4:e2:
         05:c7:47:af:a8:86:33:60:48:43:6b:f0:b9:3b:6b:20:8e:18:
         d2:3b:65:38:68:6d:d2:83:2e:2a:05:19:78:a8:14:f8:10:7b:
         1e:3c:8a:29:92:71:50:a3:65:da:c9:ee:16:3f:f6:6d:01:ba:
         39:0b:e8:5e:a5:85:76:9f:37:79:86:df:69:f1:c8:65:92:2b:
         f4:4c:c6:fb:3f:cf:b9:c3:36:c4:e3:ae:f4:fd:62:87:70:54:
         cc:06:ef:e9:1b:ab:0a:ec:67:22:95:7f:67:ed:d0:63:0e:c3:
         00:52:8e:0e:02:eb:76:8b:63:c3:23:23:a1:57:b1:19:10:61:
         9e:ac:c1:fa:8c:d5:72:52:1a:07:f7:d0:d4:8f:87:b8:38:64:
         67:f1:48:24:cc:10:74:e9:6e:dc:7c:bb:06:c6:0f:b0:dd:da:
         7c:7b:85:ac:4c:1d:a4:24:a4:8e:67:7e:e6:d2:28:0e:16:0b:
         f6:aa:7f:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidkoN9kSUIn8oYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk
MTU4Y2E0MjktMDQ3ZS00Yjc2LWI0ZmItMzkzOGM5ZDgwYjJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1d9FvZ6DXg07mbHeSj3nytpSfTY10cbgo2w
c7Uq0EnwsIr5PckPE+HO6GkpWtDJSSrsmeS4Js70dOgH/RDDENzfu4jLafo2oC7L
gXFk6O6jf+Zji1W2aAtxwE3v1AmAHb/J4GdTiGcgzxYNla20u+0diXWI6znwJNjD
jPKFYv5rPPer7TTjiVXxy9P/r9pjYPeSrM3arQRKeSqQgWSM2NAncgfO5M5XjlD/
NLyLKUZxni0aQvhObXJLQwRG16KZVZhQ0sKFq+OtqmLv2V8IGB23VrwzePo57HfK
M8JYZlinADkn0LYhyOlNzTlkk6T8SaAeqD/eNpIXEiBVg9Kg+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCa4oKSir+m2rEspase7asQKI7UCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTVjMDFlNDYtNDlmMS0z
NTA1LThlZTItOWUxY2U4MzQ0ZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErslgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHSz+VlVQVtzrpb9IybV357P37P+KZyVI7eeXMMcexTuYR1lAxxEZTkF
LA+tb2d/VjnLicOenCSmjbt0dQFpM6KAWMPNrQ7U4gXHR6+ohjNgSENr8Lk7ayCO
GNI7ZThobdKDLioFGXioFPgQex48iimScVCjZdrJ7hY/9m0BujkL6F6lhXafN3mG
32nxyGWSK/RMxvs/z7nDNsTjrvT9YodwVMwG7+kbqwrsZyKVf2ft0GMOwwBSjg4C
63aLY8MjI6FXsRkQYZ6swfqM1XJSGgf30NSPh7g4ZGfxSCTMEHTpbtx8uwbGD7Dd
2nx7haxMHaQkpI5nfubSKA4WC/aqf98=
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:15:46 2025 by rpki-client