Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32e2c198-0d29-3ec0-9baa-e29683a0a534.roa
File:                     32e2c198-0d29-3ec0-9baa-e29683a0a534.roa (raw, json)
Hash identifier:          +eJUK4TCcW2ESGyKLQbEHO4ZHWxW9oX5pWZ/IKRyuu8=
Subject key identifier:   C5:F3:76:FC:30:4B:D1:0B:9D:92:B3:B5:3A:4D:1E:8C:C5:8F:83:BB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AE196A254C2625560DC425000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32e2c198-0d29-3ec0-9baa-e29683a0a534.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        97.129.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:a2:54:c2:62:55:60:dc:42:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=df0c2c05-b594-4a43-8fca-3ac0944babc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ef:f5:00:e8:05:7d:c6:69:74:e5:77:f8:4d:
                    ca:d5:42:fc:c1:f3:55:5c:69:71:b1:bc:f9:69:6d:
                    be:de:9d:f7:53:2e:b5:48:27:ed:56:0b:b1:15:91:
                    7b:58:c8:6d:6b:3f:cb:cb:99:3b:df:d7:ae:be:63:
                    8a:fe:e2:f5:b1:80:93:e7:5c:61:7a:83:84:f6:bf:
                    7d:20:c0:bf:cc:8c:ae:72:5a:36:5c:cf:47:a7:65:
                    ff:37:a4:d6:87:81:ed:b6:a0:ef:bf:56:c6:81:44:
                    54:63:88:ea:b0:a7:90:96:45:c7:9d:fd:64:4b:d5:
                    3f:f4:91:0f:df:9b:7c:48:03:c4:94:08:a7:2a:d0:
                    78:8a:df:38:a0:9f:8c:71:a5:92:c7:f7:fa:54:ad:
                    8f:76:12:c6:cb:43:8b:00:9d:ff:cb:65:5d:04:6a:
                    ee:d4:b5:9a:ff:d1:c2:44:58:ea:12:39:d0:d4:6f:
                    73:60:2c:c8:95:df:de:86:49:a3:ff:52:bc:3e:21:
                    4b:ab:b2:7e:19:8a:ad:2f:9d:1a:56:9a:84:a9:52:
                    03:be:a8:15:c2:41:60:cd:17:a7:17:a8:a6:ee:67:
                    65:06:a7:c6:f5:16:bc:da:d2:70:6b:af:83:db:b9:
                    c6:70:ca:a6:dd:83:a7:64:56:49:7f:ae:86:45:74:
                    fa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F3:76:FC:30:4B:D1:0B:9D:92:B3:B5:3A:4D:1E:8C:C5:8F:83:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32e2c198-0d29-3ec0-9baa-e29683a0a534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.129.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:cf:05:82:1a:89:a2:97:0b:60:0c:bd:1e:6e:3f:4a:9f:a3:
         13:96:f5:b7:f6:4d:7c:b8:3d:63:e8:d2:37:06:49:37:49:0a:
         69:1e:0b:8e:60:a2:8e:5a:5f:f6:05:a3:83:a7:17:d7:65:6c:
         ed:16:0f:42:09:7a:fb:be:d2:a3:96:2a:8b:50:98:b3:6e:63:
         cd:87:c7:5c:2d:7d:f1:18:f0:79:35:06:19:88:0e:a4:c4:2e:
         84:65:02:35:4f:e2:4d:0b:4c:f3:21:a6:7a:be:77:eb:57:31:
         d5:9d:cf:62:2f:5d:bc:d8:af:a6:57:fa:d9:bf:a8:65:46:fa:
         3b:12:53:7a:31:59:69:a2:59:bb:94:c5:5a:37:d9:53:38:e7:
         e8:3d:04:76:11:1c:b6:64:84:0b:5d:a7:0e:31:84:20:fd:5e:
         51:a3:86:a0:7a:c8:4b:e3:0d:bf:89:f9:92:66:3e:f4:c5:1e:
         af:ca:22:39:7d:1f:1b:08:05:ef:c8:01:b4:41:24:34:a1:0a:
         57:93:7a:ff:e1:3e:df:5c:77:99:bc:90:57:ea:69:cf:4d:c8:
         73:a9:41:d0:8c:62:78:12:87:8a:24:a9:32:69:a5:e1:f8:a7:
         8e:3c:6c:c0:7b:be:a4:53:37:7b:d6:54:e8:ef:9c:5f:34:64:
         e1:a8:a2:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlqJUwmJVYNxCUAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
ZGYwYzJjMDUtYjU5NC00YTQzLThmY2EtM2FjMDk0NGJhYmM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+/1AOgFfcZpdOV3+E3K1UL8wfNVXGlxsbz5
aW2+3p33Uy61SCftVguxFZF7WMhtaz/Ly5k739euvmOK/uL1sYCT51xheoOE9r99
IMC/zIyuclo2XM9Hp2X/N6TWh4HttqDvv1bGgURUY4jqsKeQlkXHnf1kS9U/9JEP
35t8SAPElAinKtB4it84oJ+McaWSx/f6VK2PdhLGy0OLAJ3/y2VdBGru1LWa/9HC
RFjqEjnQ1G9zYCzIld/ehkmj/1K8PiFLq7J+GYqtL50aVpqEqVIDvqgVwkFgzRen
F6im7mdlBqfG9Ra82tJwa6+D27nGcMqm3YOnZFZJf66GRXT6BwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMXzdvwwS9ELnZKztTpNHozFj4O7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzJlMmMxOTgtMGQyOS0z
ZWMwLTliYWEtZTI5NjgzYTBhNTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYYGAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKPPBYIaiaKXC2AMvR5uP0qfoxOW9bf2TXy4PWPo0jcGSTdJCmkeC45g
oo5aX/YFo4OnF9dlbO0WD0IJevu+0qOWKotQmLNuY82Hx1wtffEY8Hk1BhmIDqTE
LoRlAjVP4k0LTPMhpnq+d+tXMdWdz2IvXbzYr6ZX+tm/qGVG+jsSU3oxWWmiWbuU
xVo32VM45+g9BHYRHLZkhAtdpw4xhCD9XlGjhqB6yEvjDb+J+ZJmPvTFHq/KIjl9
HxsIBe/IAbRBJDShCleTev/hPt9cd5m8kFfqac9NyHOpQdCMYngSh4okqTJppeH4
p448bMB7vqRTN3vWVOjvnF80ZOGoois=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:26:35 2025 by rpki-client