Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4b64fb15-53c9-3df8-ae4b-3ff506b1872b.roa
File:                     4b64fb15-53c9-3df8-ae4b-3ff506b1872b.roa (raw, json)
Hash identifier:          n2iCO2n/LZROcdqvsE65/Godzlcm89y0csd3tSj5/oI=
Subject key identifier:   6E:FC:16:4D:30:19:89:57:3C:28:01:33:5B:86:B4:03:7F:A5:BE:C8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AE2FBC55BC7FCDF95E5FB5A40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4b64fb15-53c9-3df8-ae4b-3ff506b1872b.roa
Signing time:             Sun 17 Aug 2025 13:00:41 +0000
ROA not before:           Sun 17 Aug 2025 13:00:41 +0000
ROA not after:            Sat 15 Nov 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        174.254.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e2:fb:c5:5b:c7:fc:df:95:e5:fb:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 17 13:00:41 2025 GMT
            Not After : Nov 15 14:00:41 2025 GMT
        Subject: CN=beef3d0b-6358-44a3-938d-6f7d80a8eca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:35:32:26:d8:ab:3b:ac:ac:7e:86:85:ac:36:
                    6e:67:41:14:6c:34:cf:4a:0e:e5:c5:bf:e6:61:d5:
                    bc:73:65:3f:f4:41:15:79:da:de:ef:51:6d:95:c9:
                    38:0e:ef:63:3d:85:0f:bb:80:b2:bc:b9:9b:94:bc:
                    17:fb:d7:88:b5:74:cf:b5:09:13:ad:4f:f8:e2:73:
                    2d:b3:d6:b5:6b:b4:1c:eb:34:8e:3c:ef:36:be:c4:
                    a7:11:08:8c:14:15:9a:67:e3:c5:ce:56:77:a9:37:
                    d3:da:ed:2f:b0:0c:50:0c:34:1d:75:30:51:b0:ec:
                    0f:2a:d5:52:f2:8a:3d:a1:2f:70:43:a0:df:c0:7d:
                    74:04:b5:94:26:1e:14:9c:2f:43:e9:16:76:66:f3:
                    6d:c6:54:a6:3a:a5:c1:ae:f0:9e:3c:48:b1:af:38:
                    f9:42:f4:32:98:1a:20:d0:da:f9:bb:9c:23:b4:3e:
                    c1:14:14:6d:48:04:34:4f:94:4e:5b:03:de:79:70:
                    a6:96:03:62:88:1f:17:20:8b:28:84:bc:23:2c:43:
                    95:4a:30:db:16:7a:55:ab:f5:ff:03:38:66:2d:73:
                    fb:c5:2e:71:97:2e:b2:05:e5:5a:30:86:b0:ae:24:
                    45:a2:4f:d7:8a:2c:49:9e:c3:58:c4:0e:d0:32:87:
                    6a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FC:16:4D:30:19:89:57:3C:28:01:33:5B:86:B4:03:7F:A5:BE:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4b64fb15-53c9-3df8-ae4b-3ff506b1872b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.254.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:26:86:5f:45:21:bd:92:99:f5:13:b0:9e:44:40:d3:cd:0d:
         be:03:28:0f:cc:a6:97:05:50:32:b0:76:b1:24:8c:33:74:a6:
         b3:42:e0:3d:53:28:61:0a:2b:68:63:a1:06:9c:d0:09:30:7d:
         23:73:3d:e8:60:5f:41:fb:7f:86:e4:e2:88:35:30:7e:44:36:
         01:1e:c6:f4:23:d6:79:8b:d8:7f:16:91:09:32:58:81:02:6f:
         a2:ef:5c:90:68:41:82:d0:b7:65:1f:98:92:ce:de:89:39:0d:
         70:29:99:cd:64:5c:91:64:58:fa:34:19:a6:9f:88:17:63:a3:
         e9:45:ba:49:21:d8:23:b4:ae:65:e2:e2:0e:71:36:52:5b:3a:
         71:52:bc:22:8a:fe:54:13:4d:2d:9a:68:52:de:d0:1b:fe:6e:
         31:af:8e:03:f1:72:71:a8:a1:4f:c6:ef:53:55:57:98:18:3d:
         6f:f5:9f:5c:fc:ab:a9:9c:99:d2:77:f4:52:71:4e:59:ce:a7:
         a1:64:96:08:58:eb:3c:46:d1:65:19:73:da:cc:b9:c7:56:dc:
         1c:50:9f:8d:71:eb:e2:f9:5c:c5:6c:fd:73:02:bd:5d:b8:02:
         92:c8:51:f0:eb:7c:e5:22:25:9c:54:97:1d:5b:ad:dc:3c:f3:
         5b:73:38:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEri+8Vbx/zfleX7WkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgxNzEzMDA0MVoXDTI1MTExNTE0MDA0MVowLzEtMCsGA1UEAxMk
YmVlZjNkMGItNjM1OC00NGEzLTkzOGQtNmY3ZDgwYThlY2E3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzUyJtirO6ysfoaFrDZuZ0EUbDTPSg7lxb/m
YdW8c2U/9EEVedre71Ftlck4Du9jPYUPu4CyvLmblLwX+9eItXTPtQkTrU/44nMt
s9a1a7Qc6zSOPO82vsSnEQiMFBWaZ+PFzlZ3qTfT2u0vsAxQDDQddTBRsOwPKtVS
8oo9oS9wQ6DfwH10BLWUJh4UnC9D6RZ2ZvNtxlSmOqXBrvCePEixrzj5QvQymBog
0Nr5u5wjtD7BFBRtSAQ0T5ROWwPeeXCmlgNiiB8XIIsohLwjLEOVSjDbFnpVq/X/
AzhmLXP7xS5xly6yBeVaMIawriRFok/XiixJnsNYxA7QModqxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG78Fk0wGYlXPCgBM1uGtAN/pb7IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGI2NGZiMTUtNTNjOS0z
ZGY4LWFlNGItM2ZmNTA2YjE4NzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErv6AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGgmhl9FIb2SmfUTsJ5EQNPNDb4DKA/MppcFUDKwdrEkjDN0prNC4D1T
KGEKK2hjoQac0AkwfSNzPehgX0H7f4bk4og1MH5ENgEexvQj1nmL2H8WkQkyWIEC
b6LvXJBoQYLQt2UfmJLO3ok5DXApmc1kXJFkWPo0GaafiBdjo+lFukkh2CO0rmXi
4g5xNlJbOnFSvCKK/lQTTS2aaFLe0Bv+bjGvjgPxcnGooU/G71NVV5gYPW/1n1z8
q6mcmdJ39FJxTlnOp6FklghY6zxG0WUZc9rMucdW3BxQn41x6+L5XMVs/XMCvV24
ApLIUfDrfOUiJZxUlx1brdw881tzON0=
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:25:53 2025 by rpki-client