Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff0a29fa-b6d0-3702-aed7-4dfb67f71597.roa
File:                     ff0a29fa-b6d0-3702-aed7-4dfb67f71597.roa (raw, json)
Hash identifier:          563xb0SA5OsjJDpawQFWxIcamlL76uK93Q8nZS/xfrY=
Subject key identifier:   4F:B5:67:9A:AD:72:69:90:BE:D0:94:09:A5:87:C9:A2:BE:64:C7:B4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AA6F635668F76602FFE7BA240
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff0a29fa-b6d0-3702-aed7-4dfb67f71597.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        174.254.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:35:66:8f:76:60:2f:fe:7b:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=5c960ac5-e004-4bc4-b157-3ba8a0598129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cf:55:73:e9:2f:39:f1:af:d7:b8:ef:77:2c:
                    e8:e0:54:35:f1:91:71:8b:40:99:c4:f1:ef:de:f9:
                    bd:69:64:13:32:34:b7:5b:90:a5:ac:f8:7c:0b:21:
                    dc:c9:3b:6d:f4:c2:85:6f:9f:3e:27:38:f9:15:a0:
                    0d:ef:55:9b:5a:d1:ff:23:02:fa:b2:e4:f8:eb:c3:
                    4f:9e:d6:10:c8:ed:0f:96:32:6a:88:07:0f:6a:fe:
                    72:2c:b4:5d:da:e2:34:68:bf:1e:b0:3c:a0:f6:bd:
                    bf:1a:94:e5:31:57:6b:e8:4f:f2:4e:5b:16:67:98:
                    e6:5d:40:53:96:4a:8e:87:e5:ec:83:e1:61:3b:ae:
                    3c:42:bb:96:ab:ae:fa:b1:35:b5:96:46:2c:5f:9e:
                    7c:25:dd:08:c1:88:a0:ef:e3:c3:f2:72:07:53:c2:
                    d0:25:dc:c5:cd:f9:a9:45:bf:0d:b6:58:cf:e7:09:
                    6a:73:24:d0:60:a4:d1:d3:57:34:63:b6:77:06:78:
                    9d:7b:66:fd:01:4d:d8:14:85:32:4b:1c:2a:2d:c9:
                    d7:db:2e:4b:be:ba:7c:a5:bf:84:75:c1:9f:2a:92:
                    bc:19:13:8b:6b:c8:e1:25:ba:69:df:e0:e9:4b:dc:
                    3d:0d:b3:41:72:b2:20:83:c3:e9:4a:c0:d0:65:99:
                    d7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B5:67:9A:AD:72:69:90:BE:D0:94:09:A5:87:C9:A2:BE:64:C7:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff0a29fa-b6d0-3702-aed7-4dfb67f71597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.254.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:64:04:92:91:30:84:04:24:72:6a:4a:18:90:0b:dd:82:a3:
         a1:61:4f:ab:ec:ff:c0:a5:6c:84:4c:17:31:f7:c6:e7:03:e9:
         f6:9c:1d:a4:b8:2b:97:30:1f:32:5a:ec:9b:5d:94:65:42:10:
         75:5c:a9:ca:75:22:0f:06:e4:9f:9a:ef:3f:9a:a5:c3:4b:61:
         76:5d:32:68:67:bb:95:ba:43:44:97:00:aa:68:e7:1b:d4:51:
         5c:01:e2:f7:64:85:f9:35:ef:10:08:12:d6:5b:ed:be:7b:0c:
         b8:1b:a2:4c:47:3c:18:5b:10:b7:88:d8:9e:e4:01:65:59:89:
         11:85:0b:50:b0:6d:4c:17:fd:ae:5d:49:25:fa:fe:6b:5d:22:
         33:33:32:53:1e:37:d7:91:14:34:de:3e:a7:99:9c:ee:14:9d:
         13:29:f6:16:7c:8e:c2:f5:a9:b3:95:13:4e:34:49:a7:aa:30:
         fd:02:48:de:5a:f8:a3:c7:1d:9a:c6:5f:8c:70:c0:5f:36:50:
         6f:bb:74:ac:02:41:7a:53:69:02:5b:d3:d6:af:39:4a:7c:61:
         94:3f:6c:7d:5c:12:21:61:8a:68:dc:58:04:19:d5:b1:fb:ca:
         24:8a:fe:b2:79:f8:64:b6:38:d2:2c:35:59:f2:70:f2:0c:39:
         34:13:dc:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9jVmj3ZgL/57okAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk
NWM5NjBhYzUtZTAwNC00YmM0LWIxNTctM2JhOGEwNTk4MTI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh89Vc+kvOfGv17jvdyzo4FQ18ZFxi0CZxPHv
3vm9aWQTMjS3W5ClrPh8CyHcyTtt9MKFb58+Jzj5FaAN71WbWtH/IwL6suT468NP
ntYQyO0PljJqiAcPav5yLLRd2uI0aL8esDyg9r2/GpTlMVdr6E/yTlsWZ5jmXUBT
lkqOh+Xsg+FhO648QruWq676sTW1lkYsX558Jd0IwYig7+PD8nIHU8LQJdzFzfmp
Rb8NtljP5wlqcyTQYKTR01c0Y7Z3Bnide2b9AU3YFIUySxwqLcnX2y5Lvrp8pb+E
dcGfKpK8GROLa8jhJbpp3+DpS9w9DbNBcrIgg8PpSsDQZZnX8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE+1Z5qtcmmQvtCUCaWHyaK+ZMe0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmYwYTI5ZmEtYjZkMC0z
NzAyLWFlZDctNGRmYjY3ZjcxNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrv4UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAChkBJKRMIQEJHJqShiQC92Co6FhT6vs/8ClbIRMFzH3xucD6facHaS4
K5cwHzJa7JtdlGVCEHVcqcp1Ig8G5J+a7z+apcNLYXZdMmhnu5W6Q0SXAKpo5xvU
UVwB4vdkhfk17xAIEtZb7b57DLgbokxHPBhbELeI2J7kAWVZiRGFC1CwbUwX/a5d
SSX6/mtdIjMzMlMeN9eRFDTePqeZnO4UnRMp9hZ8jsL1qbOVE040SaeqMP0CSN5a
+KPHHZrGX4xwwF82UG+7dKwCQXpTaQJb09avOUp8YZQ/bH1cEiFhimjcWAQZ1bH7
yiSK/rJ5+GS2ONIsNVnycPIMOTQT3CY=
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:12:44 2025 by rpki-client