Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/79c34dde-e960-3fef-bed4-5fb39cc310f0.roa
File:                     79c34dde-e960-3fef-bed4-5fb39cc310f0.roa (raw, json)
Hash identifier:          DUxTJn2jTAdiANQrDa5WBIR7P18yruTo+J+CWWCZnLI=
Subject key identifier:   7A:A1:32:9F:1E:96:1D:EE:70:F4:C3:0B:B7:A1:31:11:5B:FE:AD:70
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB2F7DE33312707FF9BB725C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/79c34dde-e960-3fef-bed4-5fb39cc310f0.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     701
IP address blocks:        141.149.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:de:33:31:27:07:ff:9b:b7:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=56bb3c0c-4a28-409d-a717-664e820f212b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1c:3f:6b:01:a7:cd:23:f7:11:af:55:f4:7a:
                    d8:19:fc:fc:52:9a:50:f4:23:c6:d5:6c:ae:14:e3:
                    14:dd:d8:e5:b3:ea:4a:bb:c1:48:96:b3:05:20:7c:
                    9f:e9:43:75:4c:67:52:be:83:bf:de:82:5e:9c:ec:
                    be:8f:a8:cc:12:6e:a2:df:39:33:05:26:4b:bd:7d:
                    f4:64:96:3e:c9:72:58:1d:42:67:df:c4:b9:f4:84:
                    32:d3:2b:19:e1:2f:5b:2e:98:cd:1e:b3:c2:f2:2c:
                    21:7f:21:a7:20:8a:35:6b:58:74:22:a7:00:1b:12:
                    6c:44:56:45:e5:d3:89:e9:51:89:da:a4:6a:56:ca:
                    82:26:33:3d:4e:bb:5f:c7:d1:84:d3:69:98:64:cf:
                    46:8c:e3:5d:40:e7:df:15:77:f4:d1:70:7d:c3:96:
                    f9:f4:79:9b:d8:ef:70:ad:68:2f:66:d3:32:79:77:
                    be:0d:ad:95:58:5e:aa:c1:6a:6f:3e:5c:91:c6:3e:
                    3f:ad:ce:a9:f4:3f:27:56:15:94:c6:11:7a:ac:b8:
                    13:2e:23:25:53:4f:13:ce:1d:31:46:e8:be:35:25:
                    13:73:96:22:55:84:b0:e1:21:ec:d1:d1:44:df:ca:
                    d9:77:cf:ed:a4:bc:58:96:c7:b1:ab:34:8a:26:6c:
                    66:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A1:32:9F:1E:96:1D:EE:70:F4:C3:0B:B7:A1:31:11:5B:FE:AD:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/79c34dde-e960-3fef-bed4-5fb39cc310f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.149.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:51:e3:81:aa:fb:58:a8:67:ec:47:a2:88:e1:b1:c1:ba:28:
         2c:cd:3f:02:a7:d6:07:77:44:b8:6f:03:db:2e:9c:db:aa:a3:
         73:1f:e1:b9:54:4d:6b:25:d6:54:a0:21:0d:26:e6:f5:24:6c:
         90:66:ce:96:30:e0:d6:4e:a5:36:bd:bd:97:ff:51:ed:ab:99:
         c2:3a:ef:60:72:9c:b5:46:6d:93:c9:c2:12:0f:31:3d:8d:f4:
         3e:4e:2f:3e:9e:c4:48:f1:ac:ec:b6:b3:06:15:9a:12:e5:c5:
         6a:ca:85:dc:5f:4e:65:09:cb:13:a5:b2:0c:5c:82:e2:a1:d5:
         7b:4c:0f:12:8d:b7:7e:14:18:6e:14:06:b6:ce:92:96:cd:70:
         c2:d2:bc:5a:67:58:b9:76:55:5d:76:18:79:ee:a9:03:b0:7d:
         d4:9b:79:d6:48:b6:7e:21:45:33:b8:75:ff:ea:c2:df:82:04:
         74:da:2c:4e:90:3d:82:c7:86:6e:48:41:0d:06:13:99:b0:2c:
         44:37:87:20:8f:86:24:9b:04:96:27:64:7f:49:60:5e:7b:67:
         62:6a:54:d5:38:7b:6c:72:7c:33:80:8e:75:0f:ea:00:01:aa:
         04:14:d6:ad:3c:50:00:3c:20:94:13:d0:43:3a:f4:4b:c0:c7:
         80:08:88:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy994zMScH/5u3JcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk
NTZiYjNjMGMtNGEyOC00MDlkLWE3MTctNjY0ZTgyMGYyMTJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBw/awGnzSP3Ea9V9HrYGfz8UppQ9CPG1Wyu
FOMU3djls+pKu8FIlrMFIHyf6UN1TGdSvoO/3oJenOy+j6jMEm6i3zkzBSZLvX30
ZJY+yXJYHUJn38S59IQy0ysZ4S9bLpjNHrPC8iwhfyGnIIo1a1h0IqcAGxJsRFZF
5dOJ6VGJ2qRqVsqCJjM9Trtfx9GE02mYZM9GjONdQOffFXf00XB9w5b59Hmb2O9w
rWgvZtMyeXe+Da2VWF6qwWpvPlyRxj4/rc6p9D8nVhWUxhF6rLgTLiMlU08Tzh0x
Rui+NSUTc5YiVYSw4SHs0dFE38rZd8/tpLxYlsexqzSKJmxmcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHqhMp8elh3ucPTDC7ehMRFb/q1wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzljMzRkZGUtZTk2MC0z
ZmVmLWJlZDQtNWZiMzljYzMxMGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjZXAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADtR44Gq+1ioZ+xHoojhscG6KCzNPwKn1gd3RLhvA9sunNuqo3Mf4blU
TWsl1lSgIQ0m5vUkbJBmzpYw4NZOpTa9vZf/Ue2rmcI672BynLVGbZPJwhIPMT2N
9D5OLz6exEjxrOy2swYVmhLlxWrKhdxfTmUJyxOlsgxcguKh1XtMDxKNt34UGG4U
BrbOkpbNcMLSvFpnWLl2VV12GHnuqQOwfdSbedZItn4hRTO4df/qwt+CBHTaLE6Q
PYLHhm5IQQ0GE5mwLEQ3hyCPhiSbBJYnZH9JYF57Z2JqVNU4e2xyfDOAjnUP6gAB
qgQU1q08UAA8IJQT0EM69EvAx4AIiGE=
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:05:39 2025 by rpki-client