Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b45ba815-b860-3c2a-933b-147ea8062b90.roa
File:                     b45ba815-b860-3c2a-933b-147ea8062b90.roa (raw, json)
Hash identifier:          IdH+lIWdNDXYaWhBgKF+dF2sa+3K6dl6MkSMTLMhplw=
Subject key identifier:   0B:D1:68:0D:60:FD:BE:1F:86:F5:74:E7:E4:C5:A6:CE:DF:96:E1:3D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849C79F7B0C10C5AE10EFD43C20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b45ba815-b860-3c2a-933b-147ea8062b90.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.245.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:7b:0c:10:c5:ae:10:ef:d4:3c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=f1319d9b-2fee-4266-8f36-2b9009da20c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:94:49:c9:84:0d:cd:e5:40:11:ad:cd:bd:36:
                    c1:8d:27:e4:52:80:7c:d0:dc:97:0e:10:0e:51:19:
                    b6:64:c4:5d:c0:35:d3:d1:89:47:09:53:64:68:78:
                    69:f8:f7:03:ff:3a:13:84:b9:36:0d:0a:e2:a0:b2:
                    a5:7e:3a:7c:13:c8:75:58:ad:da:9e:25:a1:cc:2e:
                    34:a5:c0:1a:c2:1a:85:58:9b:40:f1:9b:1c:8a:e8:
                    a3:3a:0b:b6:c8:50:e7:64:4f:fe:44:01:31:ec:83:
                    7f:48:f5:3a:96:28:fa:5a:1d:37:7e:df:ed:23:fc:
                    a5:d8:92:4e:ea:c1:c5:67:e6:5d:d7:ec:8f:66:3b:
                    eb:83:a5:f0:8b:5d:48:2f:7c:2c:ff:10:2d:65:4e:
                    ad:78:2e:7c:a8:35:df:96:00:3a:23:3a:2b:f3:04:
                    32:a2:63:85:b2:6e:14:7d:8c:63:db:e2:a8:db:78:
                    3a:ff:24:d0:3c:d0:e1:77:fd:ea:e9:69:7a:03:ac:
                    4b:bd:dc:9a:8a:30:1e:b4:65:19:3b:db:ba:c8:73:
                    05:e9:65:5e:9c:be:06:55:24:f2:42:8d:9d:98:05:
                    1d:1b:48:74:d2:e4:50:0f:ad:00:b7:ac:01:6c:60:
                    e6:6a:6b:48:d0:dd:36:fe:1c:14:e6:d5:02:b7:51:
                    8e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D1:68:0D:60:FD:BE:1F:86:F5:74:E7:E4:C5:A6:CE:DF:96:E1:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b45ba815-b860-3c2a-933b-147ea8062b90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.245.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:82:e1:ce:08:c3:4b:9c:99:7e:b1:a7:cc:22:a2:87:3c:60:
         36:66:03:8e:54:b0:b9:64:bc:8f:12:7a:25:af:ba:ff:f5:a3:
         f9:18:d8:fc:ce:7f:4f:87:78:04:a2:17:ed:5e:92:94:0c:3c:
         09:58:a3:88:6e:0c:47:24:2f:e9:0e:13:6f:49:60:3b:49:95:
         c9:83:87:85:61:94:2e:68:44:10:34:60:82:a5:84:cb:f2:b6:
         78:34:94:77:d2:bc:70:a4:22:26:bd:ef:78:c4:f1:f6:8b:8a:
         15:7a:3c:df:d2:c6:a8:7d:df:d8:c9:c6:f3:57:aa:e5:b5:df:
         97:a2:cf:e5:c3:c1:32:9f:36:5f:39:a6:94:58:9b:a2:83:72:
         03:35:27:e4:69:76:5f:43:e2:3e:64:d2:34:56:cb:47:22:fb:
         07:7c:d3:e9:4f:f4:da:02:2a:44:c5:cd:3f:2a:3e:28:72:ad:
         cd:82:a0:13:22:52:47:1f:16:fb:74:cf:2f:f8:60:d8:87:16:
         90:58:e7:88:6d:39:0f:e3:e2:44:15:2b:f1:84:8b:37:7f:a5:
         c8:8b:e8:61:c8:ec:00:62:14:a5:d5:20:e2:43:ec:41:95:b6:
         a6:cd:94:62:5c:a3:80:54:0e:04:8d:7a:04:c2:6b:42:87:fa:
         98:00:76:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn3sMEMWuEO/UPCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk
ZjEzMTlkOWItMmZlZS00MjY2LThmMzYtMmI5MDA5ZGEyMGM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJRJyYQNzeVAEa3NvTbBjSfkUoB80NyXDhAO
URm2ZMRdwDXT0YlHCVNkaHhp+PcD/zoThLk2DQrioLKlfjp8E8h1WK3aniWhzC40
pcAawhqFWJtA8ZsciuijOgu2yFDnZE/+RAEx7IN/SPU6lij6Wh03ft/tI/yl2JJO
6sHFZ+Zd1+yPZjvrg6Xwi11IL3ws/xAtZU6teC58qDXflgA6Izor8wQyomOFsm4U
fYxj2+Ko23g6/yTQPNDhd/3q6Wl6A6xLvdyaijAetGUZO9u6yHMF6WVenL4GVSTy
Qo2dmAUdG0h00uRQD60At6wBbGDmamtI0N02/hwU5tUCt1GOjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAvRaA1g/b4fhvV05+TFps7fluE9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjQ1YmE4MTUtYjg2MC0z
YzJhLTkzM2ItMTQ3ZWE4MDYyYjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvVgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE+C4c4Iw0ucmX6xp8wiooc8YDZmA45UsLlkvI8SeiWvuv/1o/kY2PzO
f0+HeASiF+1ekpQMPAlYo4huDEckL+kOE29JYDtJlcmDh4VhlC5oRBA0YIKlhMvy
tng0lHfSvHCkIia973jE8faLihV6PN/Sxqh939jJxvNXquW135eiz+XDwTKfNl85
ppRYm6KDcgM1J+Rpdl9D4j5k0jRWy0ci+wd80+lP9NoCKkTFzT8qPihyrc2CoBMi
UkcfFvt0zy/4YNiHFpBY54htOQ/j4kQVK/GEizd/pciL6GHI7ABiFKXVIOJD7EGV
tqbNlGJco4BUDgSNegTCa0KH+pgAdug=
-----END CERTIFICATE-----
Generated at Wed Jun 18 01:48:46 2025 by rpki-client