Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5890faf4-3c7e-3172-b497-e236c63daa94.roa
File:                     5890faf4-3c7e-3172-b497-e236c63daa94.roa (raw, json)
Hash identifier:          WndS4slaJhbbjJWcvfmLC5fS//asJe8DCLX2fBHPCdY=
Subject key identifier:   1F:8E:6D:A5:4A:BE:56:05:54:6C:9A:82:CE:C5:DE:3C:3A:0A:43:84
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ACB40F399D7DC5E087A99C8E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5890faf4-3c7e-3172-b497-e236c63daa94.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     701
IP address blocks:        71.125.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:f3:99:d7:dc:5e:08:7a:99:c8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=99c3112d-e3b6-4750-aad7-f309497fa3ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d6:5e:10:05:d3:06:fc:d2:d5:c1:e3:1d:ab:
                    0c:68:48:1e:ec:ef:1b:d7:d7:14:4c:13:b4:0a:82:
                    1e:bd:b2:4e:79:f2:80:63:4a:36:44:78:13:d2:f2:
                    5d:31:fa:50:65:8a:da:82:39:74:81:5e:01:14:a6:
                    1b:11:fd:7e:6a:e3:50:ee:d0:32:9b:70:23:65:a5:
                    39:16:c1:ce:ad:98:68:0c:9e:e3:8b:97:b8:32:5d:
                    c1:04:b8:b6:76:f6:60:c8:0f:27:53:36:cb:36:59:
                    53:4d:9d:89:42:ae:35:bd:5d:51:1a:80:c2:40:6c:
                    1f:fb:56:ec:ef:9c:cb:9f:ef:fa:8b:5c:ba:ac:c2:
                    49:90:b8:f6:90:f5:80:b5:91:b4:f5:55:3f:8e:d3:
                    fc:be:7e:a3:a1:0d:34:ad:5e:70:cd:e6:3e:2a:95:
                    4c:63:60:d0:fc:09:1e:a3:f8:03:7a:84:c6:f1:8a:
                    7a:3a:00:0a:ae:18:0a:15:09:17:e1:22:fa:4f:2b:
                    d7:ae:b6:63:ac:80:eb:08:9a:08:64:c6:c3:c9:63:
                    bf:b0:e8:91:ba:dd:cd:f5:9a:fe:a4:4a:bc:04:23:
                    56:8a:70:c3:a9:d6:6f:21:2e:ee:d6:33:00:3d:4d:
                    40:5c:78:99:d3:cd:22:c0:ac:03:14:1c:28:c5:b2:
                    43:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8E:6D:A5:4A:BE:56:05:54:6C:9A:82:CE:C5:DE:3C:3A:0A:43:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5890faf4-3c7e-3172-b497-e236c63daa94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.125.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:57:2d:53:43:36:d2:01:5e:ac:0e:52:ab:ae:4a:91:e6:83:
         79:d9:fb:05:7f:0d:06:b2:4c:36:2c:0a:5e:26:45:b6:cb:c2:
         0e:21:cb:6e:92:82:95:28:01:e8:02:91:66:87:64:bc:8f:58:
         f2:cd:f6:7a:64:5f:3c:96:79:06:34:1d:a4:a4:e7:30:ac:5d:
         0c:bf:23:f4:1d:80:0d:7e:44:07:2e:88:c3:8a:1b:e1:a8:76:
         82:b2:76:d3:9b:39:a4:7c:be:c9:72:69:a4:33:29:ac:0f:da:
         b4:f7:f9:bb:54:c8:ea:60:a9:46:ee:1a:87:c6:7b:d1:df:26:
         9e:0b:26:b2:c9:df:1f:61:a3:cf:73:27:23:8b:3d:1e:98:39:
         da:b2:2a:da:1b:ca:e4:1a:dc:03:9b:2d:1b:bb:52:31:f5:8d:
         10:48:0d:3d:40:c7:b3:e1:4e:47:ee:55:83:3f:e9:1c:9d:61:
         43:09:b7:4f:8e:bb:ab:d9:27:b3:7e:30:31:b0:8b:61:49:03:
         0a:e1:69:5c:60:b1:89:ea:af:c8:c4:de:95:93:00:69:dd:88:
         c9:f2:d9:72:00:08:42:cc:4a:f3:a3:55:4f:61:d6:0e:91:9e:
         de:55:8e:5e:1b:f6:d8:7d:67:89:5e:3e:7a:a3:73:39:cd:31:
         15:36:7e:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQPOZ19xeCHqZyOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk
OTljMzExMmQtZTNiNi00NzUwLWFhZDctZjMwOTQ5N2ZhM2NlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtZeEAXTBvzS1cHjHasMaEge7O8b19cUTBO0
CoIevbJOefKAY0o2RHgT0vJdMfpQZYragjl0gV4BFKYbEf1+auNQ7tAym3AjZaU5
FsHOrZhoDJ7ji5e4Ml3BBLi2dvZgyA8nUzbLNllTTZ2JQq41vV1RGoDCQGwf+1bs
75zLn+/6i1y6rMJJkLj2kPWAtZG09VU/jtP8vn6joQ00rV5wzeY+KpVMY2DQ/Ake
o/gDeoTG8Yp6OgAKrhgKFQkX4SL6TyvXrrZjrIDrCJoIZMbDyWO/sOiRut3N9Zr+
pEq8BCNWinDDqdZvIS7u1jMAPU1AXHiZ080iwKwDFBwoxbJDTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB+ObaVKvlYFVGyags7F3jw6CkOEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTg5MGZhZjQtM2M3ZS0z
MTcyLWI0OTctZTIzNmM2M2RhYTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFR31AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACpXLVNDNtIBXqwOUquuSpHmg3nZ+wV/DQayTDYsCl4mRbbLwg4hy26S
gpUoAegCkWaHZLyPWPLN9npkXzyWeQY0HaSk5zCsXQy/I/QdgA1+RAcuiMOKG+Go
doKydtObOaR8vslyaaQzKawP2rT3+btUyOpgqUbuGofGe9HfJp4LJrLJ3x9ho89z
JyOLPR6YOdqyKtobyuQa3AObLRu7UjH1jRBIDT1Ax7PhTkfuVYM/6RydYUMJt0+O
u6vZJ7N+MDGwi2FJAwrhaVxgsYnqr8jE3pWTAGndiMny2XIACELMSvOjVU9h1g6R
nt5Vjl4b9th9Z4lePnqjcznNMRU2fo0=
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:35 2025 by rpki-client