Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e20f1681-95ed-3e29-9e9d-31d27c954fa3.roa
File:                     e20f1681-95ed-3e29-9e9d-31d27c954fa3.roa (raw, json)
Hash identifier:          aFJOLk9Wj3HgmjURqeqQ8VTJ5X5I02lBqwpVyWhV8EE=
Subject key identifier:   DE:30:52:61:B1:F2:BF:C3:AB:47:41:83:35:25:82:A3:AD:1D:36:4A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E2809B8CD8EDA0E52A3A91C40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e20f1681-95ed-3e29-9e9d-31d27c954fa3.roa
Signing time:             Sat 13 Jun 2026 09:00:12 +0000
ROA not before:           Sat 13 Jun 2026 09:00:12 +0000
ROA not after:            Fri 11 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        174.249.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:28:09:b8:cd:8e:da:0e:52:a3:a9:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 13 09:00:12 2026 GMT
            Not After : Sep 11 09:00:12 2026 GMT
        Subject: CN=cc5ba5b2-9202-443b-a4b3-6aa8320ec804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:62:30:0c:af:e9:09:69:fc:bb:0e:a0:49:23:
                    98:11:d9:63:71:27:06:76:cb:9a:1f:73:84:59:bb:
                    d6:12:fe:3c:0e:71:fa:1e:a0:53:e2:62:ff:ef:b4:
                    61:75:5a:bc:06:c3:8e:b0:f6:43:b9:cf:fb:42:ba:
                    be:df:cc:c7:ce:48:54:1b:54:97:ea:0a:06:fe:ec:
                    7c:30:02:c3:41:cd:80:64:37:a9:94:1f:86:02:94:
                    2c:77:59:e2:d3:2b:86:47:f1:5e:7d:f0:44:12:30:
                    f5:50:79:6c:ba:e5:66:da:d6:d9:cd:19:79:b7:09:
                    dc:2a:29:aa:ff:a5:2c:ef:8c:f4:0c:01:24:a5:de:
                    8d:3d:ac:27:f4:84:6c:41:e6:65:30:da:a1:47:b1:
                    2b:7f:fb:b5:da:91:c9:5d:4c:8f:19:bd:2b:ed:a3:
                    e7:36:ed:3d:9a:21:47:ce:22:4c:69:aa:3d:30:08:
                    61:d5:d1:74:ac:a5:58:11:c0:9e:17:d4:52:97:d6:
                    cf:f9:b6:ac:f6:06:89:1c:90:53:9a:6c:59:c3:a4:
                    83:3f:08:29:d4:a5:16:fa:97:5b:d8:ec:04:72:48:
                    77:23:e8:fa:04:eb:14:19:00:69:8a:1b:71:4b:02:
                    fd:a6:66:3a:eb:20:6b:cb:41:59:0d:c4:46:42:49:
                    f9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:30:52:61:B1:F2:BF:C3:AB:47:41:83:35:25:82:A3:AD:1D:36:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e20f1681-95ed-3e29-9e9d-31d27c954fa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.249.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:98:ae:6d:57:ab:78:17:a8:43:73:38:33:8b:3b:35:18:e7:
         40:fb:2f:28:50:b9:e5:8a:58:4b:85:ae:0d:a1:a4:d8:3f:00:
         a3:46:4e:de:f2:e1:9b:fc:2f:59:59:e2:5a:e0:70:42:e7:1d:
         c0:2f:d2:1e:5f:da:cf:2e:77:7a:1e:1f:09:34:06:34:1b:63:
         ad:49:1e:d7:72:11:95:b4:dc:67:4a:37:87:7b:9a:dd:7d:19:
         76:5c:9c:7b:eb:51:e2:9b:7b:da:f6:d3:34:8b:67:f3:a1:fb:
         71:07:1d:d0:46:e3:28:fd:64:5e:46:4a:36:07:14:41:54:44:
         da:9c:a0:c2:e2:cd:1c:c5:e2:51:08:a5:3f:94:fd:7d:ef:b6:
         88:bd:18:4a:99:d3:0d:92:33:18:60:6c:c0:ae:42:ac:69:36:
         ae:8c:df:f4:40:d0:0a:81:be:40:d5:c9:45:f4:a8:30:06:20:
         f1:08:85:0e:dd:1b:81:f9:8b:2a:6b:88:5b:ec:04:4e:0e:ff:
         a6:1e:21:46:2b:10:0f:39:ba:e2:a9:e6:8b:7c:05:53:3e:ef:
         ed:2a:ee:74:20:80:d5:c3:26:48:96:43:62:b9:15:76:3d:03:
         50:5e:d7:c3:9d:c1:7f:45:dc:4f:98:62:f9:72:09:82:86:1c:
         07:f6:71:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4oCbjNjtoOUqOpHEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDYxMzA5MDAxMloXDTI2MDkxMTA5MDAxMlowLzEtMCsGA1UEAxMk
Y2M1YmE1YjItOTIwMi00NDNiLWE0YjMtNmFhODMyMGVjODA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12IwDK/pCWn8uw6gSSOYEdljcScGdsuaH3OE
WbvWEv48DnH6HqBT4mL/77RhdVq8BsOOsPZDuc/7Qrq+38zHzkhUG1SX6goG/ux8
MALDQc2AZDeplB+GApQsd1ni0yuGR/FeffBEEjD1UHlsuuVm2tbZzRl5twncKimq
/6Us74z0DAEkpd6NPawn9IRsQeZlMNqhR7Erf/u12pHJXUyPGb0r7aPnNu09miFH
ziJMaao9MAhh1dF0rKVYEcCeF9RSl9bP+bas9gaJHJBTmmxZw6SDPwgp1KUW+pdb
2OwEckh3I+j6BOsUGQBpihtxSwL9pmY66yBry0FZDcRGQkn5rQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN4wUmGx8r/Dq0dBgzUlgqOtHTZKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTIwZjE2ODEtOTVlZC0z
ZTI5LTllOWQtMzFkMjdjOTU0ZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrvnIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKqYrm1Xq3gXqENzODOLOzUY50D7LyhQueWKWEuFrg2hpNg/AKNGTt7y
4Zv8L1lZ4lrgcELnHcAv0h5f2s8ud3oeHwk0BjQbY61JHtdyEZW03GdKN4d7mt19
GXZcnHvrUeKbe9r20zSLZ/Oh+3EHHdBG4yj9ZF5GSjYHFEFURNqcoMLizRzF4lEI
pT+U/X3vtoi9GEqZ0w2SMxhgbMCuQqxpNq6M3/RA0AqBvkDVyUX0qDAGIPEIhQ7d
G4H5iypriFvsBE4O/6YeIUYrEA85uuKp5ot8BVM+7+0q7nQggNXDJkiWQ2K5FXY9
A1Be18OdwX9F3E+YYvlyCYKGHAf2cbA=
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:02:23 2026 by rpki-client