Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f350be45-38c0-3c66-983e-c1baa018e289.roa
File:                     f350be45-38c0-3c66-983e-c1baa018e289.roa (raw, json)
Hash identifier:          M5HtP3yJacELf/IxGw9G+xdT/5Y46R9r7GQEeosyd18=
Subject key identifier:   F3:08:34:07:31:14:67:60:5D:E1:44:17:8B:4B:35:DC:0B:46:99:79
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858499D1082493C671FC50BAEBC80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f350be45-38c0-3c66-983e-c1baa018e289.roa
Signing time:             Tue 22 Apr 2025 19:09:00 +0000
ROA not before:           Tue 22 Apr 2025 19:09:00 +0000
ROA not after:            Mon 21 Jul 2025 19:09:00 +0000
asID:                     6167
IP address blocks:        174.250.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:10:82:49:3c:67:1f:c5:0b:ae:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 22 19:09:00 2025 GMT
            Not After : Jul 21 19:09:00 2025 GMT
        Subject: CN=65b66db5-bc78-4aa6-b8c7-8673fa79bd8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:44:76:15:2d:e7:ea:4f:8b:72:54:29:9e:22:
                    06:60:8c:58:d9:a4:43:84:f8:89:b3:58:4a:81:c5:
                    47:96:be:9d:83:73:aa:b8:df:66:d8:7e:f0:98:93:
                    cf:bd:d9:6b:a8:77:10:6d:c7:2b:e3:b2:96:2e:c0:
                    ab:19:da:69:de:97:b1:2e:08:a2:a0:5c:b9:d5:74:
                    93:5e:93:c4:03:41:37:0c:9c:13:ff:c1:98:a4:ff:
                    ca:dc:6e:af:fa:ac:e8:7c:32:73:83:fc:8e:e5:57:
                    9f:9c:42:84:c5:3c:af:a4:ed:ee:6e:63:0f:b0:19:
                    74:83:6d:67:2c:44:c7:87:8b:09:17:94:41:0a:0f:
                    76:5e:a5:3a:01:19:0e:7e:5a:eb:21:fd:e2:7f:e4:
                    68:e3:f1:12:9d:b2:a6:14:22:62:e5:eb:ff:1b:98:
                    5c:0d:38:cd:a7:fa:5b:cd:f8:e3:cf:5e:70:e3:2f:
                    06:72:62:b4:b9:26:b8:57:6f:63:72:d7:db:b4:75:
                    ec:99:ca:ca:9f:cd:f0:bf:0a:be:d0:35:ef:d2:bd:
                    c8:a4:ce:9d:92:35:1e:9e:fb:eb:07:de:68:b9:f7:
                    f6:1b:ac:ae:56:50:71:e4:f0:60:3d:eb:53:e5:c7:
                    9d:23:97:9c:07:23:05:9c:07:d0:8f:9e:21:11:fa:
                    93:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:08:34:07:31:14:67:60:5D:E1:44:17:8B:4B:35:DC:0B:46:99:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f350be45-38c0-3c66-983e-c1baa018e289.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.250.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:63:19:6d:80:9e:9f:6b:63:92:ae:2d:40:cf:05:21:9a:56:
         7a:fd:f0:a6:0b:65:c6:c8:4c:8d:0a:55:2d:2d:8e:49:d6:6a:
         47:2d:d3:18:1d:5d:a2:85:d8:b4:2b:a4:e4:ef:5a:c8:fc:bb:
         e4:58:f8:b9:af:ed:26:05:2f:37:64:82:4b:8d:91:a1:3f:24:
         7f:cc:f6:46:d9:6b:a9:fa:43:16:47:4b:d5:dd:29:0d:bd:09:
         60:a1:a8:73:2f:fa:01:26:d8:b3:20:f8:4d:8a:2e:9f:d3:48:
         a8:50:95:6a:6d:78:a1:22:87:d2:6d:d2:81:fe:8a:1d:0b:ff:
         35:6c:3e:05:e3:2f:59:ee:13:2f:3d:61:5e:fd:80:0a:81:bd:
         af:68:05:1b:0b:54:74:73:70:2a:eb:73:fd:3c:17:ad:d2:f8:
         1c:6d:3e:1e:3e:b9:3e:3d:8a:58:86:21:e0:a4:e9:f4:2c:71:
         94:b3:9a:26:4d:82:14:f2:4d:d7:80:be:11:b2:8b:a8:10:8e:
         74:4e:6f:c4:57:9d:58:42:3c:55:70:8a:b7:29:e8:37:76:c3:
         16:51:90:42:ad:4c:99:d1:51:ac:41:bc:82:cd:ee:08:54:39:
         9b:9a:a2:75:23:c1:52:dd:34:61:d9:76:d5:14:78:2c:d2:a2:
         07:d7:5f:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdEIJJPGcfxQuuvIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDQyMjE5MDkwMFoXDTI1MDcyMTE5MDkwMFowLzEtMCsGA1UEAxMk
NjViNjZkYjUtYmM3OC00YWE2LWI4YzctODY3M2ZhNzliZDhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUR2FS3n6k+LclQpniIGYIxY2aRDhPiJs1hK
gcVHlr6dg3OquN9m2H7wmJPPvdlrqHcQbccr47KWLsCrGdpp3pexLgiioFy51XST
XpPEA0E3DJwT/8GYpP/K3G6v+qzofDJzg/yO5VefnEKExTyvpO3ubmMPsBl0g21n
LETHh4sJF5RBCg92XqU6ARkOflrrIf3if+Ro4/ESnbKmFCJi5ev/G5hcDTjNp/pb
zfjjz15w4y8GcmK0uSa4V29jctfbtHXsmcrKn83wvwq+0DXv0r3IpM6dkjUenvvr
B95ouff2G6yuVlBx5PBgPetT5cedI5ecByMFnAfQj54hEfqTLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPMINAcxFGdgXeFEF4tLNdwLRpl5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjM1MGJlNDUtMzhjMC0z
YzY2LTk4M2UtYzFiYWEwMThlMjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvowMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK5jGW2Anp9rY5KuLUDPBSGaVnr98KYLZcbITI0KVS0tjknWakct0xgd
XaKF2LQrpOTvWsj8u+RY+Lmv7SYFLzdkgkuNkaE/JH/M9kbZa6n6QxZHS9XdKQ29
CWChqHMv+gEm2LMg+E2KLp/TSKhQlWpteKEih9Jt0oH+ih0L/zVsPgXjL1nuEy89
YV79gAqBva9oBRsLVHRzcCrrc/08F63S+BxtPh4+uT49iliGIeCk6fQscZSzmiZN
ghTyTdeAvhGyi6gQjnROb8RXnVhCPFVwircp6Dd2wxZRkEKtTJnRUaxBvILN7ghU
OZuaonUjwVLdNGHZdtUUeCzSogfXX2Q=
-----END CERTIFICATE-----
Generated at Sat Apr 26 23:08:04 2025 by rpki-client