Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c2e13001-1bbc-3b8b-a50a-499892cce640.roa
File:                     c2e13001-1bbc-3b8b-a50a-499892cce640.roa (raw, json)
Hash identifier:          KbwqnaYckrNoNGKH7JEo5S/yqAhgIGR8/nb5X2/bSws=
Subject key identifier:   7C:3F:E5:8B:C1:9C:B0:7E:8D:89:3C:22:29:88:55:F3:96:19:BF:1E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AA6F63AA80CD581045B548FC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c2e13001-1bbc-3b8b-a50a-499892cce640.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        174.234.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:3a:a8:0c:d5:81:04:5b:54:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=ab2529c8-bfcf-467b-9e52-6151497814f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:16:a5:d1:ee:70:07:ff:5f:67:4b:52:da:55:
                    0e:7b:3d:fd:3d:d1:e1:68:9c:cb:89:90:dc:cf:57:
                    2c:21:e4:5c:ff:4f:10:89:22:03:81:45:3e:db:16:
                    0d:27:41:d9:a7:fb:96:ea:91:09:12:9a:dd:07:47:
                    c0:f8:9a:d5:87:d5:ca:57:e6:bd:b3:68:4a:bb:25:
                    ea:b5:ba:6a:55:7b:b5:d8:00:ee:9c:13:0e:b0:df:
                    00:ef:26:70:ea:ff:4a:3a:4d:9c:19:d0:c7:ab:87:
                    77:a3:81:91:7a:30:53:41:61:d5:25:99:a7:d3:27:
                    c9:84:45:de:d3:f5:02:08:6f:32:92:7f:d4:bf:15:
                    7f:ba:e6:a0:d4:b3:2b:bf:0b:ad:54:39:a8:a2:8a:
                    1e:63:97:33:bb:7f:fc:47:30:c9:57:37:de:1f:4d:
                    f5:18:2a:58:8b:eb:36:cd:66:a8:2d:8e:ed:59:33:
                    92:9c:d8:a1:97:f5:10:a1:1c:00:f5:46:52:a5:8e:
                    2b:57:f0:89:51:dd:73:e1:3c:0c:b4:d0:82:7a:aa:
                    21:5b:1e:0d:5f:ab:d5:18:72:d3:80:e6:6c:a2:02:
                    6d:df:ff:74:79:ed:e6:30:ad:79:34:ed:67:5c:78:
                    01:ad:31:f9:54:f4:53:e4:91:6f:48:f0:ed:a3:0c:
                    97:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:3F:E5:8B:C1:9C:B0:7E:8D:89:3C:22:29:88:55:F3:96:19:BF:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c2e13001-1bbc-3b8b-a50a-499892cce640.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.234.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:16:71:2c:74:97:df:91:14:a3:67:8d:09:0f:12:cb:dd:ab:
         4e:cb:31:d6:6f:8c:5f:96:83:3d:01:f0:6c:b9:a1:5f:5c:30:
         67:70:06:59:e9:a6:51:de:9a:04:95:7f:96:7f:58:c8:40:30:
         48:d4:81:0f:c3:84:1b:71:00:18:1e:f3:09:c2:8e:bc:c6:55:
         f9:48:9e:4f:49:7d:92:9e:c9:ed:06:d4:51:3c:75:54:7a:32:
         58:b7:02:e7:03:9a:40:8a:04:05:80:d3:d4:e5:e2:b4:ec:04:
         92:64:3f:0a:76:7b:b4:47:4b:2e:10:55:b3:f6:05:36:65:ab:
         27:f3:63:13:63:50:1f:18:57:52:9b:52:ca:99:7b:95:1f:29:
         67:f1:51:fa:df:06:0d:03:13:6e:af:60:63:c5:84:3f:44:b0:
         37:c4:f1:1a:0d:b1:1b:1f:41:63:20:a2:54:3d:4f:49:db:f9:
         f5:fa:92:df:bb:ba:b6:6c:8a:1c:32:84:34:56:29:fd:3a:0c:
         49:2c:33:d0:9b:18:68:85:ac:cd:f4:76:89:ac:9a:6b:91:c1:
         37:c8:2b:e8:41:3b:b9:4c:d1:64:22:42:3b:14:d7:ba:2b:08:
         2d:dd:f2:9e:85:e3:d1:aa:47:07:59:d1:0e:f0:5d:93:6b:36:
         cf:71:50:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9jqoDNWBBFtUj8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk
YWIyNTI5YzgtYmZjZi00NjdiLTllNTItNjE1MTQ5NzgxNGYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthal0e5wB/9fZ0tS2lUOez39PdHhaJzLiZDc
z1csIeRc/08QiSIDgUU+2xYNJ0HZp/uW6pEJEprdB0fA+JrVh9XKV+a9s2hKuyXq
tbpqVXu12ADunBMOsN8A7yZw6v9KOk2cGdDHq4d3o4GRejBTQWHVJZmn0yfJhEXe
0/UCCG8ykn/UvxV/uuag1LMrvwutVDmooooeY5czu3/8RzDJVzfeH031GCpYi+s2
zWaoLY7tWTOSnNihl/UQoRwA9UZSpY4rV/CJUd1z4TwMtNCCeqohWx4NX6vVGHLT
gOZsogJt3/90ee3mMK15NO1nXHgBrTH5VPRT5JFvSPDtowyXkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHw/5YvBnLB+jYk8IimIVfOWGb8eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzJlMTMwMDEtMWJiYy0z
YjhiLWE1MGEtNDk5ODkyY2NlNjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGruoAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAMWcSx0l9+RFKNnjQkPEsvdq07LMdZvjF+Wgz0B8Gy5oV9cMGdwBlnp
plHemgSVf5Z/WMhAMEjUgQ/DhBtxABge8wnCjrzGVflInk9JfZKeye0G1FE8dVR6
Mli3AucDmkCKBAWA09Tl4rTsBJJkPwp2e7RHSy4QVbP2BTZlqyfzYxNjUB8YV1Kb
UsqZe5UfKWfxUfrfBg0DE26vYGPFhD9EsDfE8RoNsRsfQWMgolQ9T0nb+fX6kt+7
urZsihwyhDRWKf06DEksM9CbGGiFrM30domsmmuRwTfIK+hBO7lM0WQiQjsU17or
CC3d8p6F49GqRwdZ0Q7wXZNrNs9xUB8=
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:36:40 2025 by rpki-client