Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cde15c3d-8a9d-3d1b-b9ce-3acb89af9c34.roa
File:                     cde15c3d-8a9d-3d1b-b9ce-3acb89af9c34.roa (raw, json)
Hash identifier:          /3dm3pFVxQA1742vUS+n20cqiyggx7zZjG6dDL61a6Y=
Subject key identifier:   8D:BF:CE:98:7C:7A:F9:E7:9C:2A:E2:2D:AE:99:E7:07:66:1A:FD:DF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849A089E97A2AA7A594A58D5C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cde15c3d-8a9d-3d1b-b9ce-3acb89af9c34.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.193.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:e9:7a:2a:a7:a5:94:a5:8d:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=a6e595cc-0fa9-4d92-a7f5-62f1f90bbcdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4a:38:40:63:60:73:3f:1b:b7:6e:41:86:26:
                    21:60:2e:69:e8:5e:e0:01:04:26:df:d7:43:86:bb:
                    c0:07:3e:91:0e:62:31:a4:b3:bd:e4:dd:39:6d:d6:
                    06:b1:06:5a:10:62:6c:7b:ad:4b:c5:93:0e:12:86:
                    79:47:67:a6:42:28:5f:bf:d8:6f:51:9b:e5:e1:32:
                    fd:5e:49:f6:65:70:e0:8b:fa:b7:2f:e4:9b:de:3e:
                    c3:57:f9:0d:f0:11:8a:63:67:72:61:8c:9b:53:5d:
                    47:b1:a4:1c:32:28:69:08:85:55:53:ca:49:aa:37:
                    24:ee:38:7d:81:a7:f5:94:4c:cd:b9:b4:d7:2d:c0:
                    ad:95:03:22:68:4d:af:f8:86:24:35:24:59:0c:5b:
                    50:31:1a:50:ea:50:b8:26:22:d6:58:e9:5a:65:f4:
                    c5:37:3e:ee:d5:fc:3c:c9:cc:23:7f:8b:8f:47:ba:
                    4c:73:93:34:db:80:04:06:77:84:f9:32:cb:f8:b1:
                    65:a4:9c:96:22:86:47:7b:48:83:af:bb:1a:e1:2a:
                    57:5b:b7:d6:15:74:f0:83:c8:0d:ca:42:0f:6b:46:
                    22:66:38:9c:d9:b5:c9:ed:1c:c9:f7:1e:3e:68:fd:
                    16:6f:d7:41:bd:12:73:21:80:67:54:f5:26:cc:01:
                    34:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:BF:CE:98:7C:7A:F9:E7:9C:2A:E2:2D:AE:99:E7:07:66:1A:FD:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cde15c3d-8a9d-3d1b-b9ce-3acb89af9c34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.193.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:3e:36:50:c9:fb:71:d0:73:c3:f0:c2:7b:a3:fb:de:16:15:
         51:ed:d8:54:e1:fd:35:59:1a:98:0c:91:41:20:60:42:20:42:
         43:c6:c4:49:9d:99:b5:34:cf:83:ef:83:8f:53:de:0f:4c:4d:
         1b:0c:d7:f7:74:eb:ea:20:92:e8:2d:f3:ac:9d:67:5a:99:38:
         68:7c:6a:d0:cd:4f:b8:37:23:19:10:be:c0:a4:62:4f:07:f9:
         3b:99:a5:61:73:35:99:10:8e:37:87:a2:56:53:e0:45:04:fe:
         a5:99:fa:9d:99:c7:ed:8c:97:11:a0:73:11:4c:e3:75:45:0b:
         18:a3:fe:86:7e:51:db:50:ac:ae:0c:08:fd:31:53:10:d0:0d:
         6d:4f:66:6e:1e:82:b5:3c:22:9c:31:81:b5:f7:03:b7:70:60:
         76:8e:ef:e4:74:13:cc:9e:0e:b7:c2:0a:78:5a:07:14:5c:b2:
         3b:6c:88:48:87:9b:d9:f5:58:a8:94:4b:b2:32:9f:0d:27:2f:
         8f:48:38:97:c8:96:54:21:06:0d:9a:e8:67:1e:11:b3:d9:06:
         1c:ae:97:38:6e:df:d7:39:b5:13:68:23:d9:87:ff:b9:00:7a:
         7f:f5:80:11:9a:9f:a6:04:11:0c:96:60:8a:a1:5b:f1:db:e4:
         e3:18:52:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgiel6KqellKWNXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk
YTZlNTk1Y2MtMGZhOS00ZDkyLWE3ZjUtNjJmMWY5MGJiY2RmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEo4QGNgcz8bt25BhiYhYC5p6F7gAQQm39dD
hrvABz6RDmIxpLO95N05bdYGsQZaEGJse61LxZMOEoZ5R2emQihfv9hvUZvl4TL9
Xkn2ZXDgi/q3L+Sb3j7DV/kN8BGKY2dyYYybU11HsaQcMihpCIVVU8pJqjck7jh9
gaf1lEzNubTXLcCtlQMiaE2v+IYkNSRZDFtQMRpQ6lC4JiLWWOlaZfTFNz7u1fw8
ycwjf4uPR7pMc5M024AEBneE+TLL+LFlpJyWIoZHe0iDr7sa4SpXW7fWFXTwg8gN
ykIPa0YiZjic2bXJ7RzJ9x4+aP0Wb9dBvRJzIYBnVPUmzAE0lQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI2/zph8evnnnCriLa6Z5wdmGv3fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2RlMTVjM2QtOGE5ZC0z
ZDFiLWI5Y2UtM2FjYjg5YWY5YzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErsFQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABM+NlDJ+3HQc8Pwwnuj+94WFVHt2FTh/TVZGpgMkUEgYEIgQkPGxEmd
mbU0z4Pvg49T3g9MTRsM1/d06+ogkugt86ydZ1qZOGh8atDNT7g3IxkQvsCkYk8H
+TuZpWFzNZkQjjeHolZT4EUE/qWZ+p2Zx+2MlxGgcxFM43VFCxij/oZ+UdtQrK4M
CP0xUxDQDW1PZm4egrU8IpwxgbX3A7dwYHaO7+R0E8yeDrfCCnhaBxRcsjtsiEiH
m9n1WKiUS7Iynw0nL49IOJfIllQhBg2a6GceEbPZBhyulzhu39c5tRNoI9mH/7kA
en/1gBGan6YEEQyWYIqhW/Hb5OMYUiU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 22:09:21 2025 by rpki-client