Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/254eee74-68fe-3db3-aabd-704e3205ec8b.roa
File:                     254eee74-68fe-3db3-aabd-704e3205ec8b.roa (raw, json)
Hash identifier:          VcZFBy166Lo7KJHW/jDccLYKboDzFiYForYiUi7Yapo=
Subject key identifier:   97:7E:B5:75:63:12:B8:60:36:78:DD:C3:37:A4:1E:E3:9C:CE:F0:B9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849C79F720A84C395E642B0AD20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/254eee74-68fe-3db3-aabd-704e3205ec8b.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.232.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:72:0a:84:c3:95:e6:42:b0:ad:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=8d21ee98-730c-47c1-9218-ce3846c32235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:07:5f:36:10:80:02:fc:ac:8b:c6:67:e3:d8:
                    f4:2c:c8:cb:55:4c:8d:5b:e2:96:c9:d0:41:a7:9e:
                    79:d9:65:97:7d:d2:6e:1d:09:8e:9f:68:f8:28:1b:
                    5d:ce:cd:a2:ae:27:86:4f:b5:06:46:b4:0b:11:02:
                    8b:ab:23:50:49:e1:59:07:f0:e6:76:17:06:7b:d9:
                    2b:cb:4d:4c:4f:04:4e:c5:27:e1:6e:b8:c0:d9:54:
                    fa:01:54:ca:13:64:b8:8a:6e:e2:da:b8:46:12:db:
                    26:81:7c:75:1e:77:ff:3e:6d:49:0d:82:a7:12:ed:
                    76:0e:4c:2e:73:21:30:1b:be:7a:13:93:c2:ae:e4:
                    53:fa:2b:a2:da:7a:ad:b4:a1:e1:c9:9a:31:4a:a8:
                    27:0e:c1:2f:d8:7e:cb:fc:b1:3e:d5:5a:35:bd:67:
                    83:79:1b:5c:f1:e7:86:ff:67:3f:43:e9:e2:1b:0d:
                    0e:9b:99:fb:2f:d0:1a:a2:5e:b6:bc:bc:6e:91:72:
                    8b:3f:d3:c6:d4:aa:f3:d8:0b:5a:07:d1:7c:93:52:
                    79:bf:01:8f:00:bc:b8:d7:f3:6f:c7:9d:18:72:18:
                    3d:cb:4d:86:0f:54:78:70:44:97:11:3f:1b:8c:4d:
                    38:bf:dc:13:2a:86:bc:50:30:91:00:b9:3f:68:f5:
                    59:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7E:B5:75:63:12:B8:60:36:78:DD:C3:37:A4:1E:E3:9C:CE:F0:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/254eee74-68fe-3db3-aabd-704e3205ec8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.232.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:98:bc:48:13:df:5b:4d:bd:ea:c2:42:e7:9e:f4:50:e6:62:
         8e:10:44:31:e4:7d:c1:56:41:96:a0:44:7a:bf:0f:2e:85:9c:
         6d:f9:fc:2e:bf:d7:94:5f:97:93:09:ff:0b:e7:7c:15:f8:b2:
         9b:a8:0d:7e:5d:b7:21:f1:e1:ff:0f:ac:ed:28:1c:a1:7f:24:
         a8:5d:e3:d6:fc:3d:4d:6c:ca:b7:7f:78:4f:eb:1f:87:ec:57:
         c2:a7:14:c3:f3:27:8c:6f:06:20:78:76:cc:8d:90:a9:47:08:
         e0:b5:86:ea:0b:3c:31:b4:92:70:6b:4f:ee:b0:9e:de:0b:d9:
         a1:fd:5a:53:fb:0f:9f:56:59:40:23:bb:42:0d:8e:af:d9:1a:
         43:bb:d4:6d:b0:28:d7:67:ce:19:b2:68:13:64:fb:6b:b9:1b:
         38:78:a6:a5:31:a2:35:22:b2:8b:73:3c:29:34:7d:6f:2e:de:
         77:75:d8:c4:c1:4f:06:73:4f:4e:c0:52:6b:7c:52:c1:cd:a5:
         1f:09:47:39:be:d9:bf:c1:e2:5a:fa:b2:b3:87:ad:47:ab:2d:
         81:07:52:1d:1e:e0:10:a2:71:11:60:75:01:2b:74:a4:8e:86:
         49:63:a7:ef:dd:f4:42:f0:59:2c:b6:8b:1f:51:33:6c:0f:fb:
         37:c0:43:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn3IKhMOV5kKwrSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk
OGQyMWVlOTgtNzMwYy00N2MxLTkyMTgtY2UzODQ2YzMyMjM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwdfNhCAAvysi8Zn49j0LMjLVUyNW+KWydBB
p5552WWXfdJuHQmOn2j4KBtdzs2irieGT7UGRrQLEQKLqyNQSeFZB/DmdhcGe9kr
y01MTwROxSfhbrjA2VT6AVTKE2S4im7i2rhGEtsmgXx1Hnf/Pm1JDYKnEu12Dkwu
cyEwG756E5PCruRT+iui2nqttKHhyZoxSqgnDsEv2H7L/LE+1Vo1vWeDeRtc8eeG
/2c/Q+niGw0Om5n7L9Aaol62vLxukXKLP9PG1Krz2AtaB9F8k1J5vwGPALy41/Nv
x50Ychg9y02GD1R4cESXET8bjE04v9wTKoa8UDCRALk/aPVZPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJd+tXVjErhgNnjdwzekHuOczvC5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjU0ZWVlNzQtNjhmZS0z
ZGIzLWFhYmQtNzA0ZTMyMDVlYzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBruiiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFyYvEgT31tNverCQuee9FDmYo4QRDHkfcFWQZagRHq/Dy6FnG35/C6/
15Rfl5MJ/wvnfBX4spuoDX5dtyHx4f8PrO0oHKF/JKhd49b8PU1syrd/eE/rH4fs
V8KnFMPzJ4xvBiB4dsyNkKlHCOC1huoLPDG0knBrT+6wnt4L2aH9WlP7D59WWUAj
u0INjq/ZGkO71G2wKNdnzhmyaBNk+2u5Gzh4pqUxojUisotzPCk0fW8u3nd12MTB
TwZzT07AUmt8UsHNpR8JRzm+2b/B4lr6srOHrUerLYEHUh0e4BCicRFgdQErdKSO
hkljp+/d9ELwWSy2ix9RM2wP+zfAQ58=
-----END CERTIFICATE-----
Generated at Tue Jul 1 09:26:27 2025 by rpki-client