Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f350a1e-5ab2-376c-9a0b-cbee24fde81d.roa
File:                     8f350a1e-5ab2-376c-9a0b-cbee24fde81d.roa (raw, json)
Hash identifier:          jH1ssiqJaCJqc+Fi2pIPDN/19F+mWgKl4t0breCr/j4=
Subject key identifier:   7E:0A:75:EB:10:45:BF:A9:E8:B6:D3:56:2F:DB:85:09:56:6D:70:0C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7D15E7B170C506A8E5895600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f350a1e-5ab2-376c-9a0b-cbee24fde81d.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        97.220.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:e7:b1:70:c5:06:a8:e5:89:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=83eee568-75fd-40bb-baed-b1aad74b6d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a4:4d:e1:0b:d8:36:6e:c4:8e:cd:bd:78:f7:
                    2b:19:f8:28:1c:2e:0d:5a:23:8d:51:13:83:d3:1b:
                    be:96:3c:c0:e5:07:26:82:24:93:8a:7c:d6:e2:2d:
                    d4:9f:8b:d8:9f:98:ee:c1:0e:3a:ee:bc:dc:99:34:
                    b8:4c:46:77:b1:26:a8:34:97:1e:f2:7b:78:ae:fb:
                    f4:a4:39:4d:36:92:50:e6:d5:95:2f:f9:9d:85:d4:
                    be:86:9f:10:55:db:c3:9e:0d:55:2a:fc:18:98:a1:
                    b5:d0:c6:5e:27:f7:4a:79:de:25:7b:4d:88:65:74:
                    17:5c:19:0a:6c:37:b3:8a:60:94:c4:e2:6f:1d:00:
                    67:05:20:26:f2:23:cf:dd:89:6e:27:2e:10:f2:d3:
                    69:78:ae:86:40:cc:37:b3:55:c6:23:b3:67:a8:c2:
                    6a:99:c5:3a:7a:f3:a4:db:16:91:2f:a6:2d:e6:b8:
                    14:f6:46:f8:88:45:a3:55:8c:7a:6d:4f:ba:75:61:
                    c0:1e:69:54:93:95:77:2a:2b:24:78:99:a3:ac:f9:
                    26:74:1c:33:23:80:28:51:1b:c7:52:50:db:1b:6f:
                    e7:a2:ab:de:5d:89:20:15:32:b1:8f:0b:16:9e:9e:
                    1d:5c:0a:ae:c9:79:a6:a9:ea:b2:5f:10:bf:9a:b1:
                    3f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0A:75:EB:10:45:BF:A9:E8:B6:D3:56:2F:DB:85:09:56:6D:70:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f350a1e-5ab2-376c-9a0b-cbee24fde81d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.220.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:5e:d1:76:c4:e5:41:94:cf:ba:36:e1:65:3e:2b:5c:eb:99:
         45:47:9d:4a:8a:c6:d1:35:fb:15:5f:14:d4:29:23:b4:4a:ac:
         c8:3d:57:0e:21:6d:04:11:cc:9d:6b:7d:85:20:dc:be:e3:7a:
         18:d0:67:60:f2:65:91:34:d5:5a:d3:2e:c2:17:01:af:1d:a9:
         42:80:84:5d:c7:e9:cb:fd:c5:b4:7f:65:87:5f:21:d7:1f:00:
         ac:6d:f5:a2:99:96:ab:fc:5b:42:35:32:e6:50:e5:9e:e8:95:
         ff:36:f3:2c:55:5f:63:19:75:0d:2b:6c:39:e1:ac:05:d7:d8:
         5f:9e:2d:cf:ee:d5:a9:4d:59:31:2a:94:72:69:df:62:50:95:
         27:62:e9:43:48:dc:fe:4f:af:15:9f:db:f0:f5:d5:05:a8:c1:
         4d:7c:99:47:a3:01:57:cb:ff:2c:df:c8:86:09:38:68:74:fc:
         f4:d7:54:92:b1:ae:0a:37:50:da:ce:56:14:8e:61:e2:ea:6e:
         8d:f1:73:35:ea:45:e5:15:41:b7:c2:63:9d:fb:99:49:34:b8:
         6d:df:97:03:b4:84:1c:59:91:af:21:c4:c9:34:0d:5b:f6:89:
         64:c3:8f:65:ae:11:21:f6:76:4b:01:91:2e:bc:24:4b:83:d1:
         df:bf:01:f1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEp9FeexcMUGqOWJVgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk
ODNlZWU1NjgtNzVmZC00MGJiLWJhZWQtYjFhYWQ3NGI2ZDQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaRN4QvYNm7Ejs29ePcrGfgoHC4NWiONUROD
0xu+ljzA5QcmgiSTinzW4i3Un4vYn5juwQ467rzcmTS4TEZ3sSaoNJce8nt4rvv0
pDlNNpJQ5tWVL/mdhdS+hp8QVdvDng1VKvwYmKG10MZeJ/dKed4le02IZXQXXBkK
bDezimCUxOJvHQBnBSAm8iPP3YluJy4Q8tNpeK6GQMw3s1XGI7NnqMJqmcU6evOk
2xaRL6Yt5rgU9kb4iEWjVYx6bU+6dWHAHmlUk5V3KiskeJmjrPkmdBwzI4AoURvH
UlDbG2/noqveXYkgFTKxjwsWnp4dXAquyXmmqeqyXxC/mrE/5wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFH4KdesQRb+p6LbTVi/bhQlWbXAMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGYzNTBhMWUtNWFiMi0z
NzZjLTlhMGItY2JlZTI0ZmRlODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYdwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAXF7RdsTlQZTPujbhZT4rXOuZRUedSorG0TX7FV8U1CkjtEqsyD1XDiFt
BBHMnWt9hSDcvuN6GNBnYPJlkTTVWtMuwhcBrx2pQoCEXcfpy/3FtH9lh18h1x8A
rG31opmWq/xbQjUy5lDlnuiV/zbzLFVfYxl1DStsOeGsBdfYX54tz+7VqU1ZMSqU
cmnfYlCVJ2LpQ0jc/k+vFZ/b8PXVBajBTXyZR6MBV8v/LN/Ihgk4aHT89NdUkrGu
CjdQ2s5WFI5h4upujfFzNepF5RVBt8JjnfuZSTS4bd+XA7SEHFmRryHEyTQNW/aJ
ZMOPZa4RIfZ2SwGRLrwkS4PR378B8Q==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:37:11 2025 by rpki-client