Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2eab6603-1084-3eed-b35b-6ce38b1ccce6.roa
File:                     2eab6603-1084-3eed-b35b-6ce38b1ccce6.roa (raw, json)
Hash identifier:          DEjKwhcVMNIdJt66xtUVGyENIs9pL2//8W3PTvfN4Ew=
Subject key identifier:   D4:47:3E:9A:88:26:A9:82:46:88:B6:5A:C2:B4:8A:46:15:3D:48:A6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B87B2324D41D063BA14D1F3C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2eab6603-1084-3eed-b35b-6ce38b1ccce6.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        174.238.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:32:4d:41:d0:63:ba:14:d1:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=956a15ba-f2de-4e6c-a653-eadc171f9ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0d:65:67:37:4e:e0:85:d2:8f:73:13:29:e8:
                    7c:4a:43:43:f9:e4:66:9b:dc:d6:80:7d:43:f5:88:
                    af:51:8a:be:c3:5d:6d:66:d4:92:08:be:91:71:5d:
                    4c:8d:4b:18:dd:d6:00:1b:0b:30:27:3d:3b:be:6e:
                    61:25:78:4e:a5:4e:b6:32:fd:8d:41:00:54:f3:f3:
                    08:6e:68:6d:cf:ca:95:59:bb:4a:66:27:08:28:a2:
                    5f:48:a3:a7:60:66:1d:a5:91:59:fa:2b:7c:a7:e7:
                    e1:52:77:ae:f9:bc:3c:bd:71:f5:9c:ab:c7:2f:a3:
                    83:87:19:69:c8:2c:2c:8f:67:83:c5:05:3e:50:4a:
                    73:cb:43:79:bf:31:8c:a5:b5:83:60:4a:46:91:2e:
                    80:9c:b6:18:2f:3d:7b:bb:bc:e5:2a:56:4a:48:ff:
                    1b:2a:4c:3f:06:85:96:2a:cc:3b:00:ad:6f:5e:9c:
                    f9:6c:30:23:23:bd:34:b6:55:ca:b4:2f:d2:25:c5:
                    f3:3f:24:a2:08:88:fe:3e:3f:2d:87:ce:5c:48:fc:
                    1a:d8:f3:52:71:9e:35:95:9f:b6:1c:4b:1a:1a:11:
                    6d:70:5e:17:53:1f:46:db:85:75:8d:92:2c:6e:0a:
                    83:9e:eb:81:aa:5b:b7:21:d7:a1:6d:cc:d0:bb:25:
                    76:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:47:3E:9A:88:26:A9:82:46:88:B6:5A:C2:B4:8A:46:15:3D:48:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2eab6603-1084-3eed-b35b-6ce38b1ccce6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.238.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:8a:97:67:b3:6f:b4:0d:94:02:f7:de:4f:ea:02:b7:74:17:
         41:1d:77:b2:ba:29:6f:fb:b3:00:8b:e8:f1:95:dc:5b:c4:8d:
         5e:07:f4:9b:ba:c2:43:54:34:fe:2d:cc:10:e9:d4:49:7b:af:
         6a:dc:1f:b0:f6:cc:02:85:05:34:c7:22:d0:3f:c9:4d:dd:a0:
         0d:1f:b8:f2:b8:7c:b5:57:61:c2:d5:bb:9f:69:0c:e8:58:aa:
         15:e2:2e:b0:c7:57:3c:51:46:8a:a2:3c:c4:1b:12:1e:be:0e:
         ec:c5:02:2e:ce:f3:f0:a6:eb:cf:75:66:98:a3:93:41:60:7a:
         43:b3:97:4e:b9:3a:24:01:56:e5:56:9a:f8:8c:e0:5e:5c:8b:
         f5:e5:fd:49:1e:b7:f7:c3:da:6e:37:b2:28:40:62:ee:f8:4c:
         33:3b:24:2d:49:c2:39:11:9f:93:b8:dd:44:d1:ce:ff:50:9a:
         3d:a0:ee:47:df:2f:fd:16:be:f5:74:ed:d0:53:52:e1:80:54:
         a7:92:e2:ed:c3:a3:7b:d1:05:57:bc:ca:e4:cc:0a:f0:8f:67:
         7d:ff:ec:22:c7:01:68:a2:e2:57:11:f8:2d:41:ac:9f:9f:37:
         13:8e:63:44:9a:65:65:b9:74:13:1c:77:24:0b:1b:68:cc:68:
         ad:ac:81:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsjJNQdBjuhTR88AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk
OTU2YTE1YmEtZjJkZS00ZTZjLWE2NTMtZWFkYzE3MWY5ZWQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw1lZzdO4IXSj3MTKeh8SkND+eRmm9zWgH1D
9YivUYq+w11tZtSSCL6RcV1MjUsY3dYAGwswJz07vm5hJXhOpU62Mv2NQQBU8/MI
bmhtz8qVWbtKZicIKKJfSKOnYGYdpZFZ+it8p+fhUneu+bw8vXH1nKvHL6ODhxlp
yCwsj2eDxQU+UEpzy0N5vzGMpbWDYEpGkS6AnLYYLz17u7zlKlZKSP8bKkw/BoWW
Ksw7AK1vXpz5bDAjI700tlXKtC/SJcXzPySiCIj+Pj8th85cSPwa2PNScZ41lZ+2
HEsaGhFtcF4XUx9G24V1jZIsbgqDnuuBqlu3IdehbczQuyV2hwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNRHPpqIJqmCRoi2WsK0ikYVPUimMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmVhYjY2MDMtMTA4NC0z
ZWVkLWIzNWItNmNlMzhiMWNjY2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDru4IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAACKl2ezb7QNlAL33k/qArd0F0Edd7K6KW/7swCL6PGV3FvEjV4H9Ju6
wkNUNP4tzBDp1El7r2rcH7D2zAKFBTTHItA/yU3doA0fuPK4fLVXYcLVu59pDOhY
qhXiLrDHVzxRRoqiPMQbEh6+DuzFAi7O8/Cm6891Zpijk0FgekOzl065OiQBVuVW
mviM4F5ci/Xl/Uket/fD2m43sihAYu74TDM7JC1JwjkRn5O43UTRzv9Qmj2g7kff
L/0WvvV07dBTUuGAVKeS4u3Do3vRBVe8yuTMCvCPZ33/7CLHAWii4lcR+C1BrJ+f
NxOOY0SaZWW5dBMcdyQLG2jMaK2sgQc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:24:28 2025 by rpki-client