Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d10c169a-ae70-3a68-9f57-5160dba5487d.roa
File:                     d10c169a-ae70-3a68-9f57-5160dba5487d.roa (raw, json)
Hash identifier:          grzwRQqQSAkPF7aigWy074YQ+1dfipG07BfGIn5KGrE=
Subject key identifier:   F1:5E:9B:57:BA:43:39:D8:C6:3A:90:87:A4:05:F3:6E:3B:74:FB:2A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ACB410924AC03EECF2EBD6E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d10c169a-ae70-3a68-9f57-5160dba5487d.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     701
IP address blocks:        74.98.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:41:09:24:ac:03:ee:cf:2e:bd:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=212401ff-5a78-405f-a66e-4d075318dbe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c7:9d:ad:1f:b1:58:6d:a5:6c:4a:c7:dd:01:
                    2f:6f:b1:ee:8e:86:b2:4d:8e:ed:31:33:68:a2:e9:
                    5b:c6:ca:80:57:38:ae:3e:5d:e9:24:87:7d:5e:89:
                    04:81:0e:9e:00:00:4a:99:36:de:46:0d:a5:50:91:
                    15:1d:dc:74:d4:6a:a7:c7:29:62:d7:f0:ab:69:7c:
                    20:94:e9:8b:b9:93:d4:da:7f:52:46:80:65:37:a5:
                    10:a5:10:22:f0:8b:bb:ca:e1:1b:93:da:40:ba:03:
                    2a:71:5a:c5:d6:fe:79:73:41:3c:12:fe:84:71:22:
                    a3:9a:bf:73:b7:82:93:c0:f9:a3:2d:86:c3:3c:4d:
                    2c:09:40:2a:d4:31:25:59:a0:83:ec:7e:97:ed:73:
                    b2:40:e1:29:d3:80:44:0d:1b:31:d9:f4:f3:cd:81:
                    98:b7:0b:77:42:85:66:68:54:46:db:71:6c:06:52:
                    b8:ad:5c:e9:d0:cd:f6:fc:8e:bc:79:8d:0b:1b:a0:
                    1d:a3:2b:a2:b0:e5:60:1f:59:2e:bc:df:44:a7:7b:
                    61:d5:a6:1c:60:d9:6b:93:36:9f:2a:88:f0:37:2b:
                    d8:99:cb:ce:40:ce:ac:f3:92:bf:59:2a:06:ea:46:
                    b5:45:8e:24:00:94:f4:f0:1a:44:28:b8:e6:a8:72:
                    15:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5E:9B:57:BA:43:39:D8:C6:3A:90:87:A4:05:F3:6E:3B:74:FB:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d10c169a-ae70-3a68-9f57-5160dba5487d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.98.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:a5:8f:42:b6:83:15:1b:8a:db:77:35:33:5f:39:fe:b7:90:
         2d:6b:4c:4e:fa:9f:4f:63:f0:81:95:1e:4a:9c:18:80:4f:e5:
         5d:b9:30:62:d3:39:f7:a9:ce:04:a0:b2:06:c0:46:f0:9c:6f:
         58:cd:e5:61:cf:69:8c:2a:eb:34:63:31:cf:21:a6:ec:a9:4a:
         ce:c9:1f:ee:9d:6a:1e:23:d5:4d:83:76:c1:f7:69:22:4f:32:
         86:e2:02:99:41:2a:9b:9d:a5:19:99:23:a9:58:09:6d:41:2c:
         29:5c:d2:f2:d6:9c:ca:5a:1f:00:23:f1:7f:54:58:91:a1:de:
         ef:92:6c:41:8c:4b:66:dd:5f:c7:d9:10:ca:3f:6f:01:29:8b:
         26:4a:b6:fa:0c:c9:cc:9e:a2:90:ec:66:5c:e8:4a:dd:cd:68:
         86:43:92:65:48:74:cd:6c:29:18:56:04:17:ba:89:21:0c:5f:
         7f:0e:19:d9:28:b5:f9:94:5e:fa:d6:bf:fe:5f:5e:a3:09:f6:
         15:26:07:98:e9:bb:ea:8f:88:0f:da:27:d4:06:d7:14:42:6d:
         b0:8f:19:51:cc:f9:4f:18:79:4b:87:67:8b:30:86:40:d6:e9:
         04:44:99:56:44:70:fe:ae:11:9a:62:e0:8f:32:2b:af:78:bd:
         9c:55:c7:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQQkkrAPuzy69bgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk
MjEyNDAxZmYtNWE3OC00MDVmLWE2NmUtNGQwNzUzMThkYmU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsedrR+xWG2lbErH3QEvb7HujoayTY7tMTNo
oulbxsqAVziuPl3pJId9XokEgQ6eAABKmTbeRg2lUJEVHdx01Gqnxyli1/CraXwg
lOmLuZPU2n9SRoBlN6UQpRAi8Iu7yuEbk9pAugMqcVrF1v55c0E8Ev6EcSKjmr9z
t4KTwPmjLYbDPE0sCUAq1DElWaCD7H6X7XOyQOEp04BEDRsx2fTzzYGYtwt3QoVm
aFRG23FsBlK4rVzp0M32/I68eY0LG6AdoyuisOVgH1kuvN9Ep3th1aYcYNlrkzaf
KojwNyvYmcvOQM6s85K/WSoG6ka1RY4kAJT08BpEKLjmqHIVOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPFem1e6QznYxjqQh6QF8247dPsqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDEwYzE2OWEtYWU3MC0z
YTY4LTlmNTctNTE2MGRiYTU0ODdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSmIAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJulj0K2gxUbitt3NTNfOf63kC1rTE76n09j8IGVHkqcGIBP5V25MGLT
OfepzgSgsgbARvCcb1jN5WHPaYwq6zRjMc8hpuypSs7JH+6dah4j1U2DdsH3aSJP
MobiAplBKpudpRmZI6lYCW1BLClc0vLWnMpaHwAj8X9UWJGh3u+SbEGMS2bdX8fZ
EMo/bwEpiyZKtvoMycyeopDsZlzoSt3NaIZDkmVIdM1sKRhWBBe6iSEMX38OGdko
tfmUXvrWv/5fXqMJ9hUmB5jpu+qPiA/aJ9QG1xRCbbCPGVHM+U8YeUuHZ4swhkDW
6QREmVZEcP6uEZpi4I8yK694vZxVx6c=
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:16:18 2025 by rpki-client