Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b58f1f57-2deb-32b2-925f-49afd10466a2.roa
File:                     b58f1f57-2deb-32b2-925f-49afd10466a2.roa (raw, json)
Hash identifier:          7akSzn4TeClCIq1iAp68LrNC2zSSJVG1xo8tqZEX77Q=
Subject key identifier:   50:02:1A:BD:A1:8D:1E:16:62:34:0B:9B:03:37:CC:18:52:A6:48:D2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AA6F632E05D0884B55F9BFF64
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b58f1f57-2deb-32b2-925f-49afd10466a2.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        174.232.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:32:e0:5d:08:84:b5:5f:9b:ff:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=c95315b5-e345-4b99-a70c-9b41ca6d0040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:30:4f:62:ab:17:57:bb:31:7d:1a:c5:94:ed:
                    00:4c:0a:f3:d2:04:c4:d0:1f:a5:cc:e6:92:d0:d0:
                    46:e5:f3:09:4a:9a:cb:a3:ad:c0:0f:78:4a:0c:cc:
                    d2:f0:fe:59:30:bf:de:42:12:2c:02:7a:f8:d9:15:
                    f3:77:be:02:bc:b4:f3:fb:18:28:48:49:a9:2f:20:
                    dd:f2:c4:8a:3b:a8:f2:26:c9:30:6b:d5:13:75:93:
                    83:fd:bb:56:b3:c7:ec:5b:12:e7:16:df:de:7b:51:
                    55:78:b8:46:e8:77:d4:f4:ba:32:65:6f:fb:a2:64:
                    ea:1f:27:19:e9:6d:c3:f1:65:49:71:ef:d0:15:c1:
                    e5:c7:07:2e:5b:9b:c6:f4:18:de:2f:c5:7a:af:17:
                    e2:aa:2e:52:d1:f6:83:f6:00:51:d8:14:4b:50:c7:
                    a1:6d:3a:38:d6:f6:a3:f7:18:b1:c4:cb:50:10:63:
                    73:bc:78:b3:fd:12:e2:78:8f:d1:b2:ae:d3:28:80:
                    25:fa:90:c5:0f:51:79:0c:2e:76:2c:d9:4b:c6:20:
                    84:35:ff:af:ca:e8:3f:cc:7b:16:15:7d:f1:75:80:
                    3e:55:fa:6e:ea:b1:2e:0a:cf:13:9c:49:4d:99:a8:
                    98:46:7c:df:ee:ac:11:08:b8:bf:2d:74:11:58:4e:
                    13:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:02:1A:BD:A1:8D:1E:16:62:34:0B:9B:03:37:CC:18:52:A6:48:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b58f1f57-2deb-32b2-925f-49afd10466a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.232.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:ed:c9:12:3f:a4:cb:d6:0c:d9:58:6e:c3:cd:1e:14:dd:aa:
         fe:f5:02:44:89:c8:41:42:96:77:49:03:c0:7c:6b:f2:ac:d1:
         4e:dc:ca:bf:be:b3:be:fb:1d:8d:4f:d4:7c:f4:60:ea:f0:6a:
         f6:ba:b2:ef:c4:4d:75:e4:44:dd:de:73:3e:db:70:1c:c7:e0:
         51:7c:8c:13:c3:14:ac:fc:31:41:c6:94:d4:f5:a1:fe:51:d4:
         99:73:45:18:e7:04:aa:df:0a:0b:01:e3:08:c9:06:35:6a:80:
         6c:50:d9:81:ad:34:8f:9f:57:fe:3b:7e:21:f2:f4:03:e9:48:
         b9:10:28:5b:d2:68:27:9f:3b:19:75:a3:48:ce:e4:e5:e0:17:
         04:45:90:86:a4:5c:f9:2b:11:da:25:4e:97:ad:ce:fc:63:03:
         db:04:53:e0:8e:6a:72:99:c6:bc:75:32:49:bb:42:5b:9e:96:
         64:3a:20:83:3e:e3:5a:21:48:2f:f8:e3:9b:2a:b1:61:a2:64:
         de:53:e0:3d:3c:c6:31:8f:fa:bf:8a:ad:9f:57:89:93:15:de:
         83:ca:b8:6e:49:94:9c:10:b7:a5:2a:d9:1a:a7:cc:8d:81:26:
         50:3a:28:23:67:c3:cd:a7:7b:d6:d3:64:55:a3:fe:ed:9e:3d:
         b4:d3:e0:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9jLgXQiEtV+b/2QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk
Yzk1MzE1YjUtZTM0NS00Yjk5LWE3MGMtOWI0MWNhNmQwMDQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjBPYqsXV7sxfRrFlO0ATArz0gTE0B+lzOaS
0NBG5fMJSprLo63AD3hKDMzS8P5ZML/eQhIsAnr42RXzd74CvLTz+xgoSEmpLyDd
8sSKO6jyJskwa9UTdZOD/btWs8fsWxLnFt/ee1FVeLhG6HfU9LoyZW/7omTqHycZ
6W3D8WVJce/QFcHlxwcuW5vG9BjeL8V6rxfiqi5S0faD9gBR2BRLUMehbTo41vaj
9xixxMtQEGNzvHiz/RLieI/Rsq7TKIAl+pDFD1F5DC52LNlLxiCENf+vyug/zHsW
FX3xdYA+Vfpu6rEuCs8TnElNmaiYRnzf7qwRCLi/LXQRWE4T4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFACGr2hjR4WYjQLmwM3zBhSpkjSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjU4ZjFmNTctMmRlYi0z
MmIyLTkyNWYtNDlhZmQxMDQ2NmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBruiWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALLtyRI/pMvWDNlYbsPNHhTdqv71AkSJyEFClndJA8B8a/Ks0U7cyr++
s777HY1P1Hz0YOrwava6su/ETXXkRN3ecz7bcBzH4FF8jBPDFKz8MUHGlNT1of5R
1JlzRRjnBKrfCgsB4wjJBjVqgGxQ2YGtNI+fV/47fiHy9APpSLkQKFvSaCefOxl1
o0jO5OXgFwRFkIakXPkrEdolTpetzvxjA9sEU+COanKZxrx1Mkm7QluelmQ6IIM+
41ohSC/445sqsWGiZN5T4D08xjGP+r+KrZ9XiZMV3oPKuG5JlJwQt6Uq2RqnzI2B
JlA6KCNnw82ne9bTZFWj/u2ePbTT4Gs=
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:06:39 2025 by rpki-client