Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/85653fbe-fc14-358d-a48c-7a2c2d2a75f2.roa
File:                     85653fbe-fc14-358d-a48c-7a2c2d2a75f2.roa (raw, json)
Hash identifier:          okFmCm1a4LqDnCJYyUID9o0/Mi2Y8yrJ4enkuxMUG3Y=
Subject key identifier:   EC:A9:BA:F7:75:82:96:15:38:3B:69:7E:0A:4D:8C:49:F8:44:FC:81
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7FE0A59248F24DA250D52F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/85653fbe-fc14-358d-a48c-7a2c2d2a75f2.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        174.219.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:a5:92:48:f2:4d:a2:50:d5:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=4f55152a-9775-47af-a15b-5287129e5f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fa:9e:74:c2:dc:d0:a7:9a:12:5f:c4:09:77:
                    c0:d0:fc:5c:8c:6d:41:03:30:f2:de:2f:a4:66:3d:
                    9b:cc:dd:e4:76:38:30:b5:03:e5:9d:a6:b8:7a:3c:
                    61:85:88:7c:a1:61:96:05:1e:a4:b8:66:f2:aa:fe:
                    d3:d5:ab:6c:d7:f2:19:87:0a:4d:a5:ef:21:ab:16:
                    f6:74:27:b4:b2:17:c0:2e:e5:e2:00:99:c2:f7:1d:
                    1e:e4:c9:9c:eb:c6:08:fe:b6:bf:c7:d9:4f:45:9b:
                    d3:26:5b:bf:7c:76:62:8a:74:ef:d8:dc:d2:f3:c1:
                    4a:3f:d3:fa:b4:00:3b:66:03:34:0f:ae:01:5a:8a:
                    5e:f7:e9:c7:86:6e:80:8e:f5:60:15:ab:55:7b:f1:
                    c8:3a:15:e0:27:3e:82:4b:2a:b9:a1:8f:af:f0:2d:
                    af:ee:91:ee:3c:9e:ec:a1:83:15:84:df:b3:36:b7:
                    3c:f4:9e:9c:62:62:9e:d8:27:08:08:ea:14:9a:c7:
                    e3:04:69:eb:dc:91:01:43:90:61:52:41:7c:ad:cc:
                    64:96:fc:c1:1d:b0:70:c1:ff:2d:e9:fc:e6:cb:94:
                    6f:74:07:fc:9c:38:7b:95:8b:2f:54:48:9a:51:71:
                    fa:e0:39:07:1e:b3:84:b4:78:3d:c5:0d:7b:0d:4c:
                    4e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A9:BA:F7:75:82:96:15:38:3B:69:7E:0A:4D:8C:49:F8:44:FC:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/85653fbe-fc14-358d-a48c-7a2c2d2a75f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.219.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:20:9a:df:7e:87:c3:83:24:f6:a2:f0:14:1e:92:78:bf:9f:
         b3:84:c8:e8:84:86:76:8e:f9:5f:67:d9:0f:e3:f4:76:f0:7a:
         5c:18:d7:50:e3:15:b2:21:84:f7:e4:52:6b:47:dd:c8:57:31:
         7a:3d:7e:8a:c8:d0:54:86:55:ff:4f:af:e6:8e:c8:6a:30:89:
         50:a1:57:d9:a0:5a:f1:c0:d5:3b:6a:38:4f:27:b2:9b:97:ff:
         6c:8b:d3:58:4a:5a:fe:b9:97:92:f6:1c:ce:a4:82:b2:86:2f:
         8b:0f:51:b7:57:f7:d7:55:10:32:ca:60:0f:5f:5d:26:f0:16:
         32:85:04:c3:bf:3b:30:ed:3d:fc:08:c0:b0:41:81:fd:b8:bf:
         31:3d:6d:95:0a:ae:e9:06:f8:80:67:39:6e:69:a1:82:8e:4b:
         d3:53:b1:30:51:b0:5b:72:27:3e:d4:72:dc:23:70:22:fd:9e:
         0d:a8:e9:17:94:30:ed:d0:1c:ee:a4:d4:2d:5e:7c:15:f5:2b:
         4b:e3:8b:fe:18:48:1a:41:36:cf:16:8c:4b:a7:24:b6:bd:3f:
         2c:5d:f6:28:11:fd:af:78:75:cd:0f:fe:f4:2c:a7:35:38:6b:
         e4:a5:68:e7:c2:f2:4b:3e:e7:1e:ba:d9:17:9f:05:b2:83:94:
         39:30:ce:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4KWSSPJNolDVLwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk
NGY1NTE1MmEtOTc3NS00N2FmLWExNWItNTI4NzEyOWU1Zjc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPqedMLc0KeaEl/ECXfA0PxcjG1BAzDy3i+k
Zj2bzN3kdjgwtQPlnaa4ejxhhYh8oWGWBR6kuGbyqv7T1ats1/IZhwpNpe8hqxb2
dCe0shfALuXiAJnC9x0e5Mmc68YI/ra/x9lPRZvTJlu/fHZiinTv2NzS88FKP9P6
tAA7ZgM0D64BWope9+nHhm6AjvVgFatVe/HIOhXgJz6CSyq5oY+v8C2v7pHuPJ7s
oYMVhN+zNrc89J6cYmKe2CcICOoUmsfjBGnr3JEBQ5BhUkF8rcxklvzBHbBwwf8t
6fzmy5RvdAf8nDh7lYsvVEiaUXH64DkHHrOEtHg9xQ17DUxO6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOypuvd1gpYVODtpfgpNjEn4RPyBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODU2NTNmYmUtZmMxNC0z
NThkLWE0OGMtN2EyYzJkMmE3NWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrtsWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJsgmt9+h8ODJPai8BQekni/n7OEyOiEhnaO+V9n2Q/j9HbwelwY11Dj
FbIhhPfkUmtH3chXMXo9forI0FSGVf9Pr+aOyGowiVChV9mgWvHA1TtqOE8nspuX
/2yL01hKWv65l5L2HM6kgrKGL4sPUbdX99dVEDLKYA9fXSbwFjKFBMO/OzDtPfwI
wLBBgf24vzE9bZUKrukG+IBnOW5poYKOS9NTsTBRsFtyJz7UctwjcCL9ng2o6ReU
MO3QHO6k1C1efBX1K0vji/4YSBpBNs8WjEunJLa9Pyxd9igR/a94dc0P/vQspzU4
a+SlaOfC8ks+5x662RefBbKDlDkwziw=
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:43:47 2025 by rpki-client