Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/771c2e52-39c8-3152-a65c-b4706d034fa6.roa
File:                     771c2e52-39c8-3152-a65c-b4706d034fa6.roa (raw, json)
Hash identifier:          +zO+as2EBS4eUWYPNPNOk4uNg9FiWmQevMBmpbc8RnE=
Subject key identifier:   C3:F8:B1:AE:36:0C:FF:D9:3C:90:11:1C:7E:3B:31:2B:AD:D3:FA:F2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849C79F73C9353E6ACD4F61CF00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/771c2e52-39c8-3152-a65c-b4706d034fa6.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.234.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:73:c9:35:3e:6a:cd:4f:61:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=cd5a1638-301d-471c-8439-ead86476e4cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1d:5c:d0:e1:68:fa:e7:2e:03:31:ee:6f:a8:
                    39:6d:f8:87:7e:8b:47:39:6d:d2:4f:02:c4:dd:53:
                    8a:72:02:9a:96:2d:1e:ca:48:72:37:53:49:c0:db:
                    87:3e:34:77:9e:fb:01:4f:f9:c3:f9:84:04:3c:a6:
                    8d:6e:ba:98:cd:a4:3c:2a:9c:fb:1a:41:ff:65:11:
                    7a:c0:8e:d6:fe:b8:09:32:8b:f3:b4:b2:a2:40:36:
                    d7:6d:50:1e:c5:1a:e3:ce:a1:75:dd:fe:7b:93:c6:
                    9f:a9:a7:82:3f:48:22:45:f7:7a:29:91:72:19:65:
                    f6:fe:ad:72:b0:d2:44:ff:a8:79:7d:6b:0b:93:c3:
                    7f:d7:65:c8:8e:10:cc:d1:20:d8:30:74:c3:34:2e:
                    e4:35:03:18:ab:d6:31:83:96:d5:43:fd:08:44:74:
                    e8:91:80:37:93:08:af:50:66:92:92:56:5d:93:fa:
                    2f:2f:a1:45:cd:be:92:85:54:d7:9b:75:b0:b4:9a:
                    f7:68:0e:62:c0:6b:f4:a1:5b:59:12:87:42:66:9b:
                    00:ab:06:bb:e2:eb:34:7e:66:56:ce:ca:34:1c:f0:
                    57:1f:c2:fa:ef:21:ae:08:e0:53:3d:a6:1d:78:20:
                    1d:14:46:76:ef:2c:d0:fa:e2:19:4b:4f:dd:72:d4:
                    d9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F8:B1:AE:36:0C:FF:D9:3C:90:11:1C:7E:3B:31:2B:AD:D3:FA:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/771c2e52-39c8-3152-a65c-b4706d034fa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.234.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:82:d9:48:36:b1:09:f7:4b:f7:9a:ca:89:24:46:bb:2b:97:
         15:a8:02:0a:93:6d:c0:9f:bd:ba:8a:39:f3:fd:cf:6c:a8:f5:
         f5:68:c1:ad:d9:f9:6e:b9:0d:eb:dc:d0:db:a3:64:82:14:f7:
         12:31:14:20:5f:8b:c2:12:02:0c:35:5c:bd:99:09:79:19:4c:
         45:a7:21:84:40:ce:25:b5:ca:16:2c:33:18:f3:ba:37:a7:1b:
         40:09:23:52:b4:1a:22:3e:5f:68:32:25:54:65:62:ba:a7:77:
         a6:f6:f8:48:54:73:55:43:fc:0d:7b:b0:6b:2f:31:82:33:04:
         fd:56:63:25:dd:fa:10:e9:dc:15:fc:37:6f:ae:3b:41:4d:b1:
         62:52:73:3d:34:11:ae:91:b9:bd:53:77:8c:7f:87:e8:b6:a4:
         0c:e4:d6:a3:0a:55:7f:25:c0:19:48:b2:5b:53:d2:57:7b:5b:
         4d:cd:1c:2c:21:e7:2f:96:ff:00:d4:20:f9:93:c4:e1:19:c0:
         d8:cd:ef:c1:6b:7b:be:ee:af:90:de:8a:bb:9f:81:e8:79:64:
         aa:aa:c6:40:87:76:97:ab:8d:a2:b0:01:70:ed:f1:c6:ba:ff:
         eb:c2:e7:df:fe:22:a0:bf:37:6f:e7:cc:01:79:4a:7c:58:d8:
         4e:61:73:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn3PJNT5qzU9hzwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk
Y2Q1YTE2MzgtMzAxZC00NzFjLTg0MzktZWFkODY0NzZlNGNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhh1c0OFo+ucuAzHub6g5bfiHfotHOW3STwLE
3VOKcgKali0eykhyN1NJwNuHPjR3nvsBT/nD+YQEPKaNbrqYzaQ8Kpz7GkH/ZRF6
wI7W/rgJMovztLKiQDbXbVAexRrjzqF13f57k8afqaeCP0giRfd6KZFyGWX2/q1y
sNJE/6h5fWsLk8N/12XIjhDM0SDYMHTDNC7kNQMYq9Yxg5bVQ/0IRHTokYA3kwiv
UGaSklZdk/ovL6FFzb6ShVTXm3WwtJr3aA5iwGv0oVtZEodCZpsAqwa74us0fmZW
zso0HPBXH8L67yGuCOBTPaYdeCAdFEZ27yzQ+uIZS0/dctTZswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMP4sa42DP/ZPJARHH47MSut0/ryMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzcxYzJlNTItMzljOC0z
MTUyLWE2NWMtYjQ3MDZkMDM0ZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErupgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABKC2Ug2sQn3S/eayokkRrsrlxWoAgqTbcCfvbqKOfP9z2yo9fVowa3Z
+W65Devc0NujZIIU9xIxFCBfi8ISAgw1XL2ZCXkZTEWnIYRAziW1yhYsMxjzujen
G0AJI1K0GiI+X2gyJVRlYrqnd6b2+EhUc1VD/A17sGsvMYIzBP1WYyXd+hDp3BX8
N2+uO0FNsWJScz00Ea6Rub1Td4x/h+i2pAzk1qMKVX8lwBlIsltT0ld7W03NHCwh
5y+W/wDUIPmTxOEZwNjN78Fre77ur5Deirufgeh5ZKqqxkCHdperjaKwAXDt8ca6
/+vC59/+IqC/N2/nzAF5SnxY2E5hc/A=
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:23:46 2025 by rpki-client