Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d651637-1ab6-36b6-9560-3f60fe8d6c8b.roa
File:                     2d651637-1ab6-36b6-9560-3f60fe8d6c8b.roa (raw, json)
Hash identifier:          iZTHukyLGmno6/6YgMTIYyOOCg60OFjpBkAb8PIa9Y8=
Subject key identifier:   4B:72:EC:4F:28:FA:2B:48:B5:55:C4:09:CB:99:10:7D:41:DD:DF:C0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B87B23A31AFB76026520ABB00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d651637-1ab6-36b6-9560-3f60fe8d6c8b.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        174.247.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:3a:31:af:b7:60:26:52:0a:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=1fb2bcac-e6ec-4ce4-8a55-d5e317a4db5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:42:c4:da:0b:18:4b:31:ec:9d:cb:c0:e9:ed:
                    de:fc:e2:de:17:c7:a1:22:67:9f:35:fd:43:16:2b:
                    ba:a6:75:b0:1e:aa:ab:fb:42:91:00:fb:45:34:b0:
                    3e:39:46:13:eb:1b:b9:0c:0f:f5:b3:72:6a:a2:22:
                    79:c5:49:28:0b:26:82:06:18:be:eb:d5:73:14:5c:
                    9d:62:16:9a:d8:5b:d6:e0:1e:f9:2d:26:fd:c3:87:
                    41:f0:31:8e:1b:da:6e:bf:3b:93:5e:dc:25:b6:07:
                    dd:8f:ff:93:5d:bc:91:2b:94:e7:22:f6:c7:a0:e4:
                    2a:e3:86:d5:eb:f0:9e:2a:ab:59:df:7f:aa:69:f8:
                    e4:7f:c6:44:eb:8f:b6:b3:61:8c:88:9e:f7:4e:04:
                    2e:63:6c:01:cf:d0:22:56:40:35:51:47:dc:cb:f3:
                    75:a2:74:75:4f:97:ce:a3:a4:87:bf:7b:c4:6e:72:
                    ba:02:14:b6:2c:e5:1c:12:4d:2d:98:7e:14:32:58:
                    84:5f:29:d3:82:5c:49:48:a6:14:71:c1:ca:ad:87:
                    d7:8a:7e:4b:72:a6:8c:5f:77:6d:9f:53:fd:98:d5:
                    80:ac:0d:49:09:9b:2e:8d:b6:a8:d3:45:86:77:2c:
                    60:34:a7:77:ce:87:c0:42:71:cf:31:ff:ab:01:d7:
                    8a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:72:EC:4F:28:FA:2B:48:B5:55:C4:09:CB:99:10:7D:41:DD:DF:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d651637-1ab6-36b6-9560-3f60fe8d6c8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.247.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:35:df:da:1b:62:35:7b:d9:d6:f8:fe:fc:83:b8:0e:45:4b:
         05:41:f0:47:b3:9f:be:de:57:61:c9:18:e1:8b:73:10:8f:a6:
         d5:c3:6a:ce:42:57:e4:dc:7a:b7:06:4e:65:74:99:d8:f5:53:
         9f:db:ca:95:c9:7e:01:7f:61:3d:3e:37:39:8b:19:7d:0e:97:
         9b:3d:11:33:fb:6b:d8:97:dc:84:a0:be:05:2b:e5:84:54:c2:
         b9:2b:81:ad:cc:f6:0d:74:77:a4:58:b4:38:35:44:b8:61:8a:
         06:2c:2d:9b:a9:4e:f2:8e:8d:4d:90:f0:ed:66:14:1d:c6:de:
         58:f4:83:27:dc:96:c1:6a:e8:f0:25:73:35:bf:cf:bb:aa:dc:
         47:a2:3d:32:ef:05:ec:80:9c:1b:f0:26:85:b0:ba:39:06:9b:
         18:77:83:19:e0:34:6e:2c:44:c6:a1:e8:7e:44:a5:75:31:a4:
         9e:36:1e:aa:32:36:12:8c:68:ee:cd:0d:65:5d:cb:a3:63:b1:
         7e:cb:82:f9:7b:ea:80:64:26:b1:de:73:ed:95:1c:89:fd:b2:
         d7:74:dc:39:2e:1c:07:84:9d:f7:5d:32:84:ab:33:cb:fd:6d:
         65:6c:ad:d9:cd:59:3b:b4:2f:4f:84:22:5a:be:96:66:e5:4c:
         df:b2:01:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsjoxr7dgJlIKuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk
MWZiMmJjYWMtZTZlYy00Y2U0LThhNTUtZDVlMzE3YTRkYjVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgULE2gsYSzHsncvA6e3e/OLeF8ehImefNf1D
Fiu6pnWwHqqr+0KRAPtFNLA+OUYT6xu5DA/1s3JqoiJ5xUkoCyaCBhi+69VzFFyd
Yhaa2FvW4B75LSb9w4dB8DGOG9puvzuTXtwltgfdj/+TXbyRK5TnIvbHoOQq44bV
6/CeKqtZ33+qafjkf8ZE64+2s2GMiJ73TgQuY2wBz9AiVkA1UUfcy/N1onR1T5fO
o6SHv3vEbnK6AhS2LOUcEk0tmH4UMliEXynTglxJSKYUccHKrYfXin5LcqaMX3dt
n1P9mNWArA1JCZsujbao00WGdyxgNKd3zofAQnHPMf+rAdeKHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEty7E8o+itItVXECcuZEH1B3d/AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmQ2NTE2MzctMWFiNi0z
NmI2LTk1NjAtM2Y2MGZlOGQ2YzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvfQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJA139obYjV72db4/vyDuA5FSwVB8Eezn77eV2HJGOGLcxCPptXDas5C
V+TcercGTmV0mdj1U5/bypXJfgF/YT0+NzmLGX0Ol5s9ETP7a9iX3ISgvgUr5YRU
wrkrga3M9g10d6RYtDg1RLhhigYsLZupTvKOjU2Q8O1mFB3G3lj0gyfclsFq6PAl
czW/z7uq3EeiPTLvBeyAnBvwJoWwujkGmxh3gxngNG4sRMah6H5EpXUxpJ42Hqoy
NhKMaO7NDWVdy6NjsX7Lgvl76oBkJrHec+2VHIn9std03DkuHAeEnfddMoSrM8v9
bWVsrdnNWTu0L0+EIlq+lmblTN+yASI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:51:05 2025 by rpki-client