Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95e252dd-022a-3fbc-a3c9-6a69068afe89.roa
File:                     95e252dd-022a-3fbc-a3c9-6a69068afe89.roa (raw, json)
Hash identifier:          2k2eCCgFRuMpv2o4gbVnfM595bOobuoxvlAiAozGhuA=
Subject key identifier:   56:79:B1:A7:9D:4F:91:65:7B:E1:0D:19:DB:B4:CD:7E:31:D5:CA:46
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7FE0A3247FD813BB93F5EF80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95e252dd-022a-3fbc-a3c9-6a69068afe89.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        174.216.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:a3:24:7f:d8:13:bb:93:f5:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=15f16884-c41f-4789-ac1e-d263bf8cb05e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:16:9f:98:dd:43:95:e2:d1:c9:7c:f9:1e:48:
                    e0:6a:71:02:f8:8d:b1:95:6c:58:84:ef:8d:18:aa:
                    3c:76:1d:3b:f5:71:84:84:ae:ce:2f:34:6c:02:6c:
                    1e:9c:93:6e:3b:26:2d:42:05:7c:9b:86:bf:de:c1:
                    9a:fd:68:6e:cd:36:5c:21:5b:1a:42:7d:93:c8:31:
                    41:cb:e5:cd:7c:ee:1b:2c:e7:9c:04:78:de:e8:ba:
                    cc:5b:4d:e0:9d:ec:9f:b5:f0:9b:8f:4f:00:d2:fb:
                    40:b3:77:0e:d4:df:f8:0c:3b:03:87:6d:8a:5e:14:
                    51:8e:21:2c:22:d4:06:62:9f:ce:8f:82:53:21:3f:
                    cb:6d:0c:48:fc:86:95:6b:6a:31:b5:b7:45:a4:6a:
                    26:2d:5c:13:38:29:0c:ef:6e:e5:4b:ce:1b:26:e6:
                    af:91:89:78:f2:ef:bd:73:24:a9:fc:2d:9f:b9:60:
                    2f:51:0c:79:48:a5:ac:20:51:7a:55:3c:a2:5c:6b:
                    7c:1a:0c:71:42:5b:43:68:76:8a:fd:0f:31:a1:17:
                    ce:04:4b:95:79:bb:da:19:86:b0:c8:46:60:79:84:
                    33:15:28:16:74:9c:fd:2c:33:1d:dc:32:b9:cf:f1:
                    85:68:fa:a2:25:4c:31:96:fd:23:a9:b8:60:ec:3c:
                    34:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:79:B1:A7:9D:4F:91:65:7B:E1:0D:19:DB:B4:CD:7E:31:D5:CA:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95e252dd-022a-3fbc-a3c9-6a69068afe89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.216.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:27:62:1b:14:3e:9a:d0:d4:28:76:d4:9f:b5:e6:4c:f1:18:
         0c:6c:c1:b6:fc:c8:21:8d:4c:14:bd:77:06:7c:76:50:27:46:
         21:6d:36:3f:cb:d3:a0:9e:85:90:b7:eb:37:a9:6b:90:c4:92:
         50:bc:ba:c8:1f:2f:1e:2f:a0:bf:fd:7e:25:a0:77:94:25:b2:
         ab:dc:4b:3f:88:0b:34:f4:68:2a:82:1d:1b:73:97:2d:5c:21:
         26:fe:96:f1:fa:a5:e7:64:4b:bc:3b:68:9c:f6:dd:7e:f7:23:
         a2:5a:4b:31:ea:17:98:ff:e9:c5:dc:f9:48:84:9e:ff:7e:33:
         98:48:b8:7f:92:40:f0:a3:ae:86:dd:3f:e9:96:32:87:26:34:
         1d:7f:99:35:c4:4f:3c:eb:bf:4d:53:f0:22:ba:ba:5e:e1:a9:
         7a:a7:e4:5a:fd:89:ed:09:5d:8d:8c:84:6d:97:3c:ed:88:af:
         24:46:28:1b:31:63:a8:22:14:67:ab:ad:6c:f5:b4:08:b5:59:
         07:80:8b:2a:aa:51:39:c3:cd:9e:b1:e7:1a:76:6c:79:27:0b:
         29:2b:96:87:db:d7:ed:16:99:e8:6b:c3:9d:2d:02:da:d7:f7:
         b9:38:fa:46:ae:b5:26:73:0a:ff:5a:fa:cf:f8:b8:3b:85:1f:
         62:21:b6:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4KMkf9gTu5P174AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk
MTVmMTY4ODQtYzQxZi00Nzg5LWFjMWUtZDI2M2JmOGNiMDVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhafmN1DleLRyXz5HkjganEC+I2xlWxYhO+N
GKo8dh079XGEhK7OLzRsAmwenJNuOyYtQgV8m4a/3sGa/WhuzTZcIVsaQn2TyDFB
y+XNfO4bLOecBHje6LrMW03gneyftfCbj08A0vtAs3cO1N/4DDsDh22KXhRRjiEs
ItQGYp/Oj4JTIT/LbQxI/IaVa2oxtbdFpGomLVwTOCkM727lS84bJuavkYl48u+9
cySp/C2fuWAvUQx5SKWsIFF6VTyiXGt8GgxxQltDaHaK/Q8xoRfOBEuVebvaGYaw
yEZgeYQzFSgWdJz9LDMd3DK5z/GFaPqiJUwxlv0jqbhg7Dw0rwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFZ5saedT5Fle+ENGdu0zX4x1cpGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTVlMjUyZGQtMDIyYS0z
ZmJjLWEzYzktNmE2OTA2OGFmZTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtjAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADMnYhsUPprQ1Ch21J+15kzxGAxswbb8yCGNTBS9dwZ8dlAnRiFtNj/L
06CehZC36zepa5DEklC8usgfLx4voL/9fiWgd5QlsqvcSz+ICzT0aCqCHRtzly1c
ISb+lvH6pedkS7w7aJz23X73I6JaSzHqF5j/6cXc+UiEnv9+M5hIuH+SQPCjrobd
P+mWMocmNB1/mTXETzzrv01T8CK6ul7hqXqn5Fr9ie0JXY2MhG2XPO2IryRGKBsx
Y6giFGerrWz1tAi1WQeAiyqqUTnDzZ6x5xp2bHknCykrlofb1+0Wmehrw50tAtrX
97k4+kautSZzCv9a+s/4uDuFH2Ihtic=
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:49:53 2025 by rpki-client