Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbe2af2f-3ed5-30b7-8c4f-d45703526c0d.roa
File:                     bbe2af2f-3ed5-30b7-8c4f-d45703526c0d.roa (raw, json)
Hash identifier:          KOiJ4tvbDKtLwQym9mPRfIV8080XBU5/kCVg2awdTL8=
Subject key identifier:   C3:2A:C0:51:41:A1:2A:85:B7:56:C4:95:EA:9D:DD:60:47:A9:E2:D7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AADF12F394CBC40E88B80A480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbe2af2f-3ed5-30b7-8c4f-d45703526c0d.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        174.42.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:2f:39:4c:bc:40:e8:8b:80:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=93d3b3db-d0d6-439a-af74-010b7833b5b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:48:8f:49:d8:80:83:47:72:d5:4c:14:41:9f:
                    a6:28:1b:d7:46:63:38:f5:d6:5f:b6:4e:75:49:5f:
                    b8:b0:ad:85:f4:9d:fd:fc:37:5e:5c:b2:1e:e0:e7:
                    d3:25:88:a8:ae:bd:7b:67:4d:ac:bf:6e:3a:85:fc:
                    5e:cd:7e:cf:8d:0e:17:42:42:f3:ab:06:19:9b:75:
                    40:74:63:d9:02:0a:dc:46:9b:6a:ba:75:c0:c4:ae:
                    58:60:e5:34:54:dc:13:d5:c5:82:35:f3:fe:03:9d:
                    68:31:d3:13:d2:d5:1d:d2:d1:e7:78:12:61:22:2f:
                    ad:7b:ac:b5:7b:56:7b:bc:39:28:76:47:e0:99:9a:
                    ae:3a:32:ac:98:fa:51:6d:15:dc:a9:00:da:0e:a3:
                    95:f6:5f:08:58:9b:68:b2:7b:5c:21:3a:41:4e:ca:
                    cb:73:19:b0:33:67:48:ca:71:c1:4b:5f:ad:f2:87:
                    8e:9a:85:25:c3:a9:6a:29:84:3e:1c:f6:eb:be:88:
                    31:26:6a:dd:9d:88:f8:00:ae:48:25:df:01:92:b2:
                    30:ef:a3:dc:3e:07:9d:6e:68:93:da:f9:78:6d:86:
                    64:f2:c9:7e:44:6a:cb:73:f9:0c:7e:58:50:85:e9:
                    80:f0:4b:8b:87:03:34:42:e8:b8:60:e7:5a:93:57:
                    b9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2A:C0:51:41:A1:2A:85:B7:56:C4:95:EA:9D:DD:60:47:A9:E2:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbe2af2f-3ed5-30b7-8c4f-d45703526c0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.42.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:8c:bd:0e:ee:6e:1b:27:3d:30:71:68:f6:c8:d9:7e:b8:fb:
         13:b2:96:aa:3c:1a:d5:b6:75:6c:7b:33:a7:f7:11:81:34:21:
         cc:f6:aa:a9:24:d0:ec:ab:75:15:85:7c:5d:46:9c:0f:8f:48:
         62:59:87:a1:6c:de:70:83:74:e4:c9:48:c9:79:cf:77:4f:36:
         c5:26:31:64:b6:35:b0:8f:6a:02:3f:c9:34:c5:0e:fc:49:30:
         86:9a:01:01:e5:b8:2d:b4:67:51:79:88:c5:fb:a5:1a:d2:d3:
         74:15:5e:e1:fa:08:57:e3:c0:ea:8e:39:47:9b:eb:8f:9a:8a:
         04:c9:e4:84:92:45:62:3b:19:18:ee:4f:f6:54:1f:7c:1c:02:
         c5:89:f6:b3:c0:74:0f:46:d6:74:f9:5b:81:5b:f3:ed:fa:69:
         12:49:35:35:06:8c:f6:f2:48:74:70:50:a9:bc:e9:8b:71:70:
         86:f4:8e:53:76:22:e9:2f:5e:74:2b:44:4f:19:c6:64:bb:a3:
         0a:cf:a6:21:30:c3:18:08:9c:f3:a0:d4:f1:e1:b7:69:a7:20:
         b9:c8:ee:3d:57:8e:a3:59:4a:62:e5:49:27:25:b8:12:ad:5c:
         1e:bd:b3:0f:31:c2:13:27:32:cb:df:9f:35:63:8b:16:a8:5c:
         72:78:72:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8S85TLxA6IuApIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk
OTNkM2IzZGItZDBkNi00MzlhLWFmNzQtMDEwYjc4MzNiNWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUiPSdiAg0dy1UwUQZ+mKBvXRmM49dZftk51
SV+4sK2F9J39/DdeXLIe4OfTJYiorr17Z02sv246hfxezX7PjQ4XQkLzqwYZm3VA
dGPZAgrcRptqunXAxK5YYOU0VNwT1cWCNfP+A51oMdMT0tUd0tHneBJhIi+te6y1
e1Z7vDkodkfgmZquOjKsmPpRbRXcqQDaDqOV9l8IWJtosntcITpBTsrLcxmwM2dI
ynHBS1+t8oeOmoUlw6lqKYQ+HPbrvogxJmrdnYj4AK5IJd8BkrIw76PcPgedbmiT
2vl4bYZk8sl+RGrLc/kMflhQhemA8EuLhwM0Qui4YOdak1e5fwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMMqwFFBoSqFt1bEleqd3WBHqeLXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmJlMmFmMmYtM2VkNS0z
MGI3LThjNGYtZDQ1NzAzNTI2YzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrioMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG2MvQ7ubhsnPTBxaPbI2X64+xOylqo8GtW2dWx7M6f3EYE0Icz2qqkk
0OyrdRWFfF1GnA+PSGJZh6Fs3nCDdOTJSMl5z3dPNsUmMWS2NbCPagI/yTTFDvxJ
MIaaAQHluC20Z1F5iMX7pRrS03QVXuH6CFfjwOqOOUeb64+aigTJ5ISSRWI7GRju
T/ZUH3wcAsWJ9rPAdA9G1nT5W4Fb8+36aRJJNTUGjPbySHRwUKm86YtxcIb0jlN2
IukvXnQrRE8ZxmS7owrPpiEwwxgInPOg1PHht2mnILnI7j1XjqNZSmLlSScluBKt
XB69sw8xwhMnMsvfnzVjixaoXHJ4cvs=
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:16:59 2025 by rpki-client