Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb69198c-4ed0-32ee-ae95-5a87c2a8de0c.roa
File:                     bb69198c-4ed0-32ee-ae95-5a87c2a8de0c.roa (raw, json)
Hash identifier:          h7SwEOHSs6aNGsvBUZVQpKzHSbcxvjf3W5rlAFgpWOk=
Subject key identifier:   55:FB:A9:B2:C5:F9:F7:C7:C3:C6:74:C6:77:22:6A:21:3B:69:C8:D2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7FE0A3CA5BA7F64605B89100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb69198c-4ed0-32ee-ae95-5a87c2a8de0c.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        174.218.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:a3:ca:5b:a7:f6:46:05:b8:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=a18b1d0d-12ad-4a0e-a4ac-d83f88727385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e0:f2:42:a0:04:03:6d:79:08:99:67:db:5c:
                    d0:db:8f:eb:27:9b:1c:37:b1:8c:9f:e4:c4:53:14:
                    c3:6f:3a:5b:50:3f:95:f3:ff:cd:dd:bc:4e:a0:1b:
                    7c:78:af:dd:7a:66:ec:1b:54:94:fe:d5:52:c5:2d:
                    ad:16:e8:f6:29:61:57:d6:97:8b:8b:80:77:db:6d:
                    68:99:85:d5:dd:93:bd:21:ef:6d:a6:39:6e:56:19:
                    50:0f:9e:62:33:e0:ae:51:43:0e:4d:b4:85:c7:12:
                    ab:d5:ff:4b:e6:7e:46:8c:72:00:74:ef:fc:aa:b3:
                    b1:f1:1e:19:31:2e:cf:d2:e1:18:2f:6b:84:cd:bf:
                    06:36:e6:ca:9b:af:af:cf:b6:9f:26:13:54:56:15:
                    b9:4a:69:b7:ac:d1:3f:62:32:0d:53:e1:cf:a8:da:
                    ff:37:db:75:62:fb:ce:55:18:94:66:ca:17:92:88:
                    98:1d:1e:25:91:77:f0:c0:f3:43:a2:f4:c8:91:3b:
                    19:f6:c1:f7:c3:07:ee:bf:27:4c:96:f4:25:27:ea:
                    f7:1e:ec:af:f2:3b:6b:35:e3:87:d3:d7:7f:4a:05:
                    3b:89:cd:aa:85:6b:10:e1:fe:84:b7:97:1c:2b:1e:
                    a5:71:fa:95:58:4b:99:0f:dc:a0:38:a8:46:56:fc:
                    61:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FB:A9:B2:C5:F9:F7:C7:C3:C6:74:C6:77:22:6A:21:3B:69:C8:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb69198c-4ed0-32ee-ae95-5a87c2a8de0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.218.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:ff:c9:4a:94:36:12:49:b3:61:21:a4:81:68:a7:e2:aa:9a:
         3a:b4:ac:0a:57:7a:37:36:5d:14:e5:9a:66:95:6b:fd:72:67:
         be:6b:90:97:af:17:6b:77:0c:b5:ee:4e:6a:51:fa:87:f6:18:
         50:e5:92:5e:9c:ad:d7:82:eb:1e:69:bd:70:f0:4c:69:e4:d4:
         30:84:f6:52:c7:75:39:2a:bf:71:82:e7:4d:d1:06:30:d8:d7:
         80:7f:1f:ec:b8:c8:3a:40:60:06:24:be:0b:c7:3e:fc:75:df:
         c8:ff:f3:28:a8:0a:12:b8:89:24:db:44:0c:f6:dd:4a:48:c1:
         b2:26:0f:88:bd:4f:1b:fb:b9:f1:8d:12:a0:54:c7:70:79:07:
         74:57:dd:3e:c5:9e:7c:5a:df:ea:c8:ca:f6:a9:5d:28:6f:bd:
         7e:f3:8e:0c:68:8f:9b:3f:ee:0a:d0:09:55:d3:b2:b0:88:e7:
         f6:3b:31:e1:45:31:0a:0f:38:87:90:48:33:40:52:85:ca:c9:
         5a:d0:d5:be:f5:6e:c4:cf:46:55:02:45:07:93:cb:11:17:35:
         2a:a2:04:6c:67:db:5c:7d:c6:ce:17:b0:37:d0:26:bf:77:9e:
         aa:10:99:d7:1b:23:1f:ae:59:a4:ef:08:e3:55:16:fe:58:b8:
         09:cd:aa:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4KPKW6f2RgW4kQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk
YTE4YjFkMGQtMTJhZC00YTBlLWE0YWMtZDgzZjg4NzI3Mzg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArODyQqAEA215CJln21zQ24/rJ5scN7GMn+TE
UxTDbzpbUD+V8//N3bxOoBt8eK/dembsG1SU/tVSxS2tFuj2KWFX1peLi4B3221o
mYXV3ZO9Ie9tpjluVhlQD55iM+CuUUMOTbSFxxKr1f9L5n5GjHIAdO/8qrOx8R4Z
MS7P0uEYL2uEzb8GNubKm6+vz7afJhNUVhW5Smm3rNE/YjINU+HPqNr/N9t1YvvO
VRiUZsoXkoiYHR4lkXfwwPNDovTIkTsZ9sH3wwfuvydMlvQlJ+r3Huyv8jtrNeOH
09d/SgU7ic2qhWsQ4f6Et5ccKx6lcfqVWEuZD9ygOKhGVvxhxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFX7qbLF+ffHw8Z0xnciaiE7acjSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmI2OTE5OGMtNGVkMC0z
MmVlLWFlOTUtNWE4N2MyYThkZTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtpoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABn/yUqUNhJJs2EhpIFop+Kqmjq0rApXejc2XRTlmmaVa/1yZ75rkJev
F2t3DLXuTmpR+of2GFDlkl6crdeC6x5pvXDwTGnk1DCE9lLHdTkqv3GC503RBjDY
14B/H+y4yDpAYAYkvgvHPvx138j/8yioChK4iSTbRAz23UpIwbImD4i9Txv7ufGN
EqBUx3B5B3RX3T7Fnnxa3+rIyvapXShvvX7zjgxoj5s/7grQCVXTsrCI5/Y7MeFF
MQoPOIeQSDNAUoXKyVrQ1b71bsTPRlUCRQeTyxEXNSqiBGxn21x9xs4XsDfQJr93
nqoQmdcbIx+uWaTvCONVFv5YuAnNqmw=
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:15:31 2025 by rpki-client