Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f2e7337-a1f5-36a3-8484-9d5674772ae1.roa
File:                     8f2e7337-a1f5-36a3-8484-9d5674772ae1.roa (raw, json)
Hash identifier:          GjwNW3cNmpBy7EM5oSh39kI+9KzrXYAnQkWCR8u+75c=
Subject key identifier:   C9:7B:BA:45:43:B9:04:0F:50:DE:76:41:5D:C0:1E:18:B1:FD:35:88
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AC17B8E8A5FC0DEE383D60600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f2e7337-a1f5-36a3-8484-9d5674772ae1.roa
Signing time:             Tue 05 Aug 2025 13:00:41 +0000
ROA not before:           Tue 05 Aug 2025 13:00:41 +0000
ROA not after:            Mon 03 Nov 2025 14:00:41 +0000
asID:                     0
IP address blocks:        208.254.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c1:7b:8e:8a:5f:c0:de:e3:83:d6:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  5 13:00:41 2025 GMT
            Not After : Nov  3 14:00:41 2025 GMT
        Subject: CN=e688180f-85ed-4b37-b477-d65e9043c0e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9c:4f:80:d6:7d:22:32:01:1e:c4:b5:2d:20:
                    cf:f7:5d:b8:5c:f0:5f:09:d6:a6:5f:d3:c1:7e:5b:
                    23:b2:d0:6d:8c:60:94:70:fc:84:b3:a0:50:e1:b0:
                    67:50:fa:c1:4d:d6:32:33:7d:f4:93:f8:31:2d:4d:
                    1b:bc:8e:2e:d3:8b:06:4c:fe:89:43:6f:d1:89:a8:
                    92:4b:6f:e4:a5:72:fe:e6:41:2b:ee:d8:73:50:7d:
                    e1:7f:e0:b0:7d:1a:86:3e:90:27:d7:e1:60:c9:d7:
                    27:2b:41:83:2d:6a:7c:65:58:eb:1f:14:49:58:a3:
                    4d:2a:a3:0e:20:f4:fb:34:dc:e5:6e:02:74:58:36:
                    bc:fb:e6:a0:fc:e1:ca:25:02:94:20:ac:52:16:80:
                    0e:a2:e4:79:ff:c1:54:67:2a:3b:14:17:23:72:3c:
                    8a:19:e5:b7:b7:0c:89:b8:fe:2b:a1:d0:71:e5:9c:
                    20:78:cf:f1:05:14:a3:b3:90:04:2d:56:d8:5d:ce:
                    45:ba:86:73:ef:67:45:81:3f:4b:f1:72:c4:6d:4d:
                    b2:af:35:9a:d3:b9:bf:4c:60:c7:62:2b:1a:ce:2b:
                    c9:cf:bc:2b:72:b2:1b:48:72:5c:fb:1c:85:5f:c3:
                    93:33:e3:b2:c8:46:3b:28:04:d8:83:1d:51:86:b6:
                    37:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7B:BA:45:43:B9:04:0F:50:DE:76:41:5D:C0:1E:18:B1:FD:35:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f2e7337-a1f5-36a3-8484-9d5674772ae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.254.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:79:c3:88:ce:9f:52:a9:1b:8d:42:af:43:d2:81:74:dc:31:
         a3:8b:9a:bc:d5:39:c7:74:aa:7d:a7:70:b4:62:fe:62:9b:83:
         dc:e7:18:a2:ae:19:0f:b6:96:19:c8:65:c3:24:93:26:37:77:
         93:a1:28:c7:3d:7a:14:ea:c8:9c:52:5e:b7:68:06:f8:66:df:
         e6:54:33:ab:7a:dc:9f:cd:13:ff:3f:33:09:5b:66:7c:f6:82:
         aa:42:55:4a:e9:ee:22:4d:bc:90:87:f3:f0:31:25:d2:f5:42:
         3a:5d:46:df:65:a7:7f:40:53:1d:6c:10:4e:8b:b4:7d:7a:50:
         74:b4:f5:6f:b3:ca:9a:fe:de:dc:fa:d0:27:a5:cd:c5:85:63:
         6e:99:f8:06:de:95:10:0a:74:89:e4:ad:d9:ba:95:3c:02:fe:
         49:2e:ae:80:a0:11:91:0a:0f:32:3a:c6:9a:b9:92:ae:3f:5c:
         8c:d1:5c:50:52:03:d6:72:1b:b5:82:b7:65:2e:58:25:e7:af:
         5d:fe:ee:8b:c4:ab:9f:d5:ed:14:19:b8:00:46:27:8e:2a:97:
         d5:e6:11:f3:4a:ec:bb:88:4e:57:3e:f8:53:ea:a0:8f:b5:1f:
         41:09:72:2b:75:3a:27:1a:1d:12:ee:05:61:fc:13:82:3b:a0:
         34:99:77:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErBe46KX8De44PWBgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgwNTEzMDA0MVoXDTI1MTEwMzE0MDA0MVowLzEtMCsGA1UEAxMk
ZTY4ODE4MGYtODVlZC00YjM3LWI0NzctZDY1ZTkwNDNjMGUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZxPgNZ9IjIBHsS1LSDP9124XPBfCdamX9PB
flsjstBtjGCUcPyEs6BQ4bBnUPrBTdYyM330k/gxLU0bvI4u04sGTP6JQ2/RiaiS
S2/kpXL+5kEr7thzUH3hf+CwfRqGPpAn1+FgydcnK0GDLWp8ZVjrHxRJWKNNKqMO
IPT7NNzlbgJ0WDa8++ag/OHKJQKUIKxSFoAOouR5/8FUZyo7FBcjcjyKGeW3twyJ
uP4rodBx5ZwgeM/xBRSjs5AELVbYXc5FuoZz72dFgT9L8XLEbU2yrzWa07m/TGDH
YisazivJz7wrcrIbSHJc+xyFX8OTM+OyyEY7KATYgx1RhrY3FQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMl7ukVDuQQPUN52QV3AHhix/TWIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGYyZTczMzctYTFmNS0z
NmEzLTg0ODQtOWQ1Njc0NzcyYWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0P6uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAN5w4jOn1KpG41Cr0PSgXTcMaOLmrzVOcd0qn2ncLRi/mKbg9znGKKu
GQ+2lhnIZcMkkyY3d5OhKMc9ehTqyJxSXrdoBvhm3+ZUM6t63J/NE/8/MwlbZnz2
gqpCVUrp7iJNvJCH8/AxJdL1QjpdRt9lp39AUx1sEE6LtH16UHS09W+zypr+3tz6
0CelzcWFY26Z+AbelRAKdInkrdm6lTwC/kkuroCgEZEKDzI6xpq5kq4/XIzRXFBS
A9ZyG7WCt2UuWCXnr13+7ovEq5/V7RQZuABGJ44ql9XmEfNK7LuITlc++FPqoI+1
H0EJcit1OicaHRLuBWH8E4I7oDSZdyk=
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:36:07 2025 by rpki-client