Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/480d1d4a-ad7b-3665-ae61-9031515e4a30.roa
File:                     480d1d4a-ad7b-3665-ae61-9031515e4a30.roa (raw, json)
Hash identifier:          ISHJKmslNY7tsGVMjPCwOqiP2slrFUs8Zd8Ljdc+0u4=
Subject key identifier:   12:35:36:42:0D:79:4A:E5:BB:75:65:D5:E9:EF:2B:82:4E:3A:B2:F3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A43DB0DDA439041E2CCFD7E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/480d1d4a-ad7b-3665-ae61-9031515e4a30.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     6167
IP address blocks:        75.221.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:0d:da:43:90:41:e2:cc:fd:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=ed262f2a-0d35-41cf-aa96-45d388a27887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:35:5e:2c:93:43:33:7d:93:d0:f5:b6:61:20:
                    21:c5:87:79:ed:4e:c4:ff:dc:8e:43:80:22:2a:23:
                    32:25:05:5d:71:6c:04:14:40:89:ad:9a:8e:37:6d:
                    c0:a1:86:57:f9:6c:95:b4:36:b3:39:51:d3:38:18:
                    d8:53:8d:7d:39:36:3c:7d:45:b1:42:0d:00:ca:24:
                    b6:ad:44:96:18:ee:7a:be:29:1a:9b:72:89:40:fc:
                    36:bf:28:75:e2:78:c1:a6:58:c3:11:e6:1f:66:a0:
                    7e:6a:e9:9b:85:e5:42:06:05:d9:f5:52:e0:07:ff:
                    7e:2f:f8:48:47:04:33:7e:67:6c:be:71:ca:f5:35:
                    04:d2:27:f5:42:bd:e5:dd:a0:08:e8:65:f7:35:58:
                    9d:79:7d:36:22:03:1c:94:11:84:78:7a:32:30:d3:
                    77:28:a1:47:dd:ba:19:35:d1:af:eb:18:f7:1d:46:
                    74:5b:88:a8:d6:a9:a2:b5:94:cb:56:cb:2f:f8:00:
                    65:5d:8c:b4:9a:15:ec:26:b2:e5:d8:76:7f:91:a3:
                    57:e4:49:e0:92:e6:3a:a9:ca:61:0b:87:64:1b:cd:
                    93:ad:66:69:38:85:bf:4f:a6:41:f5:ce:61:f7:c6:
                    75:02:06:ca:f0:ba:f5:e7:3e:55:9b:63:13:29:ef:
                    45:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:35:36:42:0D:79:4A:E5:BB:75:65:D5:E9:EF:2B:82:4E:3A:B2:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/480d1d4a-ad7b-3665-ae61-9031515e4a30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.221.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:74:57:de:88:10:de:91:db:3c:b7:ec:39:7f:01:f8:a2:f4:
         0a:9b:86:43:5f:6a:d5:ae:de:55:9f:d0:dc:30:a5:56:16:f0:
         84:8b:81:94:d7:aa:e6:c3:41:5d:77:63:96:3f:e8:28:ec:63:
         ee:f2:a0:f4:a3:06:35:ca:b8:d5:27:af:56:89:69:52:e9:4d:
         ed:94:54:9c:4d:e0:86:ad:3a:5d:a4:12:30:e3:65:26:83:80:
         31:43:6d:88:0b:06:d9:6a:20:b0:cf:17:8c:20:a0:5f:98:34:
         6f:f5:db:ce:d3:9c:7f:ac:8c:d8:03:df:74:ce:60:18:40:e9:
         a7:1c:ed:16:07:ae:15:31:91:21:d5:b8:b0:c0:ba:11:6b:5d:
         16:07:11:56:12:75:b6:dd:63:f2:4d:4e:e7:1a:ea:04:77:28:
         07:83:17:9b:01:19:d6:f5:43:2b:f4:15:9e:f1:23:36:57:f3:
         2b:3e:4c:30:b4:a8:05:9a:db:cf:49:61:7f:83:e1:23:29:52:
         a0:f1:40:dd:e5:23:70:b2:c7:5a:e1:6c:44:22:a6:2f:b6:e3:
         5b:ff:63:7a:6e:f5:90:8d:11:b3:91:0c:19:ae:fb:62:ac:4d:
         db:57:56:40:bb:63:9a:65:e7:22:34:d4:7b:66:4c:f5:1e:99:
         4e:02:c8:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2w3aQ5BB4sz9foAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk
ZWQyNjJmMmEtMGQzNS00MWNmLWFhOTYtNDVkMzg4YTI3ODg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjVeLJNDM32T0PW2YSAhxYd57U7E/9yOQ4Ai
KiMyJQVdcWwEFECJrZqON23AoYZX+WyVtDazOVHTOBjYU419OTY8fUWxQg0AyiS2
rUSWGO56vikam3KJQPw2vyh14njBpljDEeYfZqB+aumbheVCBgXZ9VLgB/9+L/hI
RwQzfmdsvnHK9TUE0if1Qr3l3aAI6GX3NVideX02IgMclBGEeHoyMNN3KKFH3boZ
NdGv6xj3HUZ0W4io1qmitZTLVssv+ABlXYy0mhXsJrLl2HZ/kaNX5EngkuY6qcph
C4dkG82TrWZpOIW/T6ZB9c5h98Z1AgbK8Lr15z5Vm2MTKe9FvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBI1NkINeUrlu3Vl1envK4JOOrLzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDgwZDFkNGEtYWQ3Yi0z
NjY1LWFlNjEtOTAzMTUxNWU0YTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES93AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF90V96IEN6R2zy37Dl/Afii9AqbhkNfatWu3lWf0NwwpVYW8ISLgZTX
qubDQV13Y5Y/6CjsY+7yoPSjBjXKuNUnr1aJaVLpTe2UVJxN4IatOl2kEjDjZSaD
gDFDbYgLBtlqILDPF4wgoF+YNG/1287TnH+sjNgD33TOYBhA6acc7RYHrhUxkSHV
uLDAuhFrXRYHEVYSdbbdY/JNTuca6gR3KAeDF5sBGdb1Qyv0FZ7xIzZX8ys+TDC0
qAWa289JYX+D4SMpUqDxQN3lI3Cyx1rhbEQipi+241v/Y3pu9ZCNEbORDBmu+2Ks
TdtXVkC7Y5pl5yI01HtmTPUemU4CyFQ=
-----END CERTIFICATE-----
Generated at Wed Jul 2 07:30:36 2025 by rpki-client