Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6605a57f-6abf-3c7d-a097-a2a932f49ec8.roa
File:                     6605a57f-6abf-3c7d-a097-a2a932f49ec8.roa (raw, json)
Hash identifier:          LgXeq/XzFmOlJnhMmhVSZZ2s2FH0zEs89MibTTNt/qs=
Subject key identifier:   20:DE:D7:76:4C:4B:61:C4:32:4D:65:B0:97:63:F5:21:65:95:FC:C2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AC2E11138172B2918B6476B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6605a57f-6abf-3c7d-a097-a2a932f49ec8.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     701
IP address blocks:        141.155.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:11:38:17:2b:29:18:b6:47:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=3df52b99-7882-4c1c-82b4-7492427fef1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7e:a9:96:da:f1:5a:a5:a8:eb:b8:6c:31:86:
                    c3:26:14:d6:03:c6:f5:47:cf:36:aa:a9:c5:fe:07:
                    63:77:79:58:de:2c:93:31:b3:0b:b4:ad:d6:34:93:
                    c7:5b:30:5b:c6:2e:03:53:d1:96:88:7c:52:9a:22:
                    42:33:f7:49:50:f3:54:76:fb:a0:df:6c:2a:d3:86:
                    0f:c5:67:4b:3d:e2:07:57:5e:e9:c0:0b:1f:91:26:
                    03:a7:c7:2f:c0:cb:d1:94:ab:4d:11:da:25:13:42:
                    88:8d:c0:91:81:a8:aa:a3:1f:c9:2d:a1:1a:36:d2:
                    e3:d9:dd:f1:5f:9a:7f:1c:3e:27:94:cc:45:98:40:
                    3a:c2:71:99:67:e5:88:28:57:92:6d:e7:17:35:dc:
                    11:80:a7:6c:ee:d0:e2:3a:dc:f3:37:6e:85:eb:77:
                    d2:66:56:b2:4c:9b:e4:4d:27:47:ca:9f:76:7e:2e:
                    b9:ae:66:13:0b:dc:ba:9d:f1:07:2b:2b:d8:c1:19:
                    3e:95:48:12:a0:b4:f3:af:3a:ea:b0:4e:bc:09:79:
                    d2:f2:29:12:f2:5f:3f:1d:ff:65:7c:66:2e:95:b0:
                    7c:fc:c7:f3:89:65:0f:39:34:6d:9b:18:32:3c:14:
                    60:35:aa:1c:50:55:5f:0a:da:77:82:cd:bc:d8:e5:
                    2f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DE:D7:76:4C:4B:61:C4:32:4D:65:B0:97:63:F5:21:65:95:FC:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6605a57f-6abf-3c7d-a097-a2a932f49ec8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.155.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:d0:6a:88:80:34:65:22:78:36:69:1e:6f:48:cf:09:e4:3c:
         db:32:ee:c4:a6:35:30:2a:d8:4d:fa:da:0c:4b:96:8a:1a:6e:
         b7:a7:93:f9:b3:3e:8e:0f:f6:78:96:eb:78:a6:a6:95:3a:5c:
         4a:dc:f5:ee:f6:38:1a:53:73:e2:50:c5:8d:77:ca:e2:f3:a5:
         18:38:17:33:2d:ea:02:06:a5:53:b7:e0:4f:2b:5c:2e:52:cc:
         ec:6b:b7:6b:5b:7c:dc:ae:03:b5:af:59:c4:4a:c9:7c:da:a5:
         87:2d:17:a4:70:d0:30:f5:32:c4:33:b0:84:a2:c1:83:c0:09:
         05:52:09:61:94:24:e5:87:68:bc:45:9d:83:79:67:2c:68:6a:
         e9:7c:89:cc:df:42:36:d4:85:9a:29:6e:95:7e:6b:d5:0d:be:
         e5:8b:4d:97:1a:82:be:03:6d:8a:28:c2:f3:d4:c9:ec:6e:b9:
         44:1e:35:10:e2:2d:70:e3:31:8d:f7:ca:94:1f:7c:ca:3f:f8:
         cd:4f:ea:ee:53:3a:4a:3f:6b:a8:5e:b0:2c:f9:80:c3:b9:36:
         9c:c1:8c:1e:1c:bb:f6:30:7c:23:ab:50:9d:2d:9d:99:92:a4:
         6e:34:99:a8:2f:f4:fa:d6:42:a0:f6:bd:d2:79:23:a4:16:0b:
         d1:ee:e4:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4RE4FyspGLZHawAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
M2RmNTJiOTktNzg4Mi00YzFjLTgyYjQtNzQ5MjQyN2ZlZjFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH6pltrxWqWo67hsMYbDJhTWA8b1R882qqnF
/gdjd3lY3iyTMbMLtK3WNJPHWzBbxi4DU9GWiHxSmiJCM/dJUPNUdvug32wq04YP
xWdLPeIHV17pwAsfkSYDp8cvwMvRlKtNEdolE0KIjcCRgaiqox/JLaEaNtLj2d3x
X5p/HD4nlMxFmEA6wnGZZ+WIKFeSbecXNdwRgKds7tDiOtzzN26F63fSZlayTJvk
TSdHyp92fi65rmYTC9y6nfEHKyvYwRk+lUgSoLTzrzrqsE68CXnS8ikS8l8/Hf9l
fGYulbB8/MfziWUPOTRtmxgyPBRgNaocUFVfCtp3gs282OUvPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCDe13ZMS2HEMk1lsJdj9SFllfzCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjYwNWE1N2YtNmFiZi0z
YzdkLWEwOTctYTJhOTMyZjQ5ZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjZsnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABLQaoiANGUieDZpHm9IzwnkPNsy7sSmNTAq2E362gxLlooabrenk/mz
Po4P9niW63imppU6XErc9e72OBpTc+JQxY13yuLzpRg4FzMt6gIGpVO34E8rXC5S
zOxrt2tbfNyuA7WvWcRKyXzapYctF6Rw0DD1MsQzsISiwYPACQVSCWGUJOWHaLxF
nYN5Zyxoaul8iczfQjbUhZopbpV+a9UNvuWLTZcagr4DbYoowvPUyexuuUQeNRDi
LXDjMY33ypQffMo/+M1P6u5TOko/a6hesCz5gMO5NpzBjB4cu/YwfCOrUJ0tnZmS
pG40magv9PrWQqD2vdJ5I6QWC9Hu5Nk=
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:53 2025 by rpki-client