Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/502f3f18-d19c-335b-9014-e1b9b3488140.roa
File:                     502f3f18-d19c-335b-9014-e1b9b3488140.roa (raw, json)
Hash identifier:          CEdp8eQMIEn7OKkbgMvcfDBRWI+4OtDzZrbCzckulgw=
Subject key identifier:   5B:06:72:6A:81:54:4D:44:AF:18:C0:65:56:8D:40:89:74:29:43:E7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ACB40F817199DADF77C6CF620
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/502f3f18-d19c-335b-9014-e1b9b3488140.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     701
IP address blocks:        96.239.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:f8:17:19:9d:ad:f7:7c:6c:f6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=d9f0b6a3-1770-4f83-93ee-f3c6d2ccfbbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5b:c9:4f:cd:6e:cb:9f:8e:9a:73:d6:41:71:
                    21:99:14:4d:0c:19:0d:ba:5a:66:fd:82:88:f5:e8:
                    93:c3:f3:45:00:35:65:25:77:42:47:d9:02:95:bc:
                    0f:b0:be:1a:b1:6a:25:b2:d3:7c:a8:34:90:a0:8a:
                    45:21:d7:4a:6b:57:e5:08:72:86:e0:ad:aa:57:cf:
                    05:08:96:f7:de:d7:68:82:73:aa:80:2c:33:ba:3a:
                    30:94:62:7c:75:4f:42:89:f5:6e:f4:0a:b5:1c:76:
                    5e:bb:bf:f3:e3:73:2d:49:33:a2:23:c9:19:9c:8e:
                    8f:1b:4a:7a:e8:37:39:72:3c:54:f9:85:38:ac:97:
                    55:8a:14:82:34:cb:47:e5:7c:c5:5b:c3:18:92:82:
                    71:85:2b:58:92:5a:f0:35:3f:83:54:ed:57:9a:7b:
                    9a:89:b5:82:8f:03:14:9f:35:55:c7:77:3f:90:b7:
                    cc:4f:5d:cc:21:db:ce:d5:8b:bd:51:92:77:4e:4e:
                    f0:e2:bd:fd:ba:3e:6b:36:b1:60:40:a9:c6:30:3a:
                    f5:6c:8f:99:dd:48:aa:df:2f:75:8b:f1:13:1b:8e:
                    5a:4e:f5:1a:bf:4f:61:13:79:04:ab:94:1e:e3:38:
                    40:38:69:01:d8:9a:ed:b8:b0:01:db:91:5b:be:56:
                    6c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:06:72:6A:81:54:4D:44:AF:18:C0:65:56:8D:40:89:74:29:43:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/502f3f18-d19c-335b-9014-e1b9b3488140.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.239.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:0c:6d:1e:4b:4a:26:d1:50:cb:1e:f9:54:2d:81:68:ac:e1:
         f0:e9:2c:9b:fe:ed:e1:93:c6:db:d1:b9:24:dd:6e:d2:f1:92:
         fa:84:c5:28:26:72:b5:53:a9:f9:96:92:ab:30:74:3f:f3:0e:
         1e:6b:82:60:4f:75:b7:a3:09:f0:3d:97:60:23:e1:5a:74:c6:
         90:97:72:fd:bd:cd:86:d2:38:6f:9d:bf:d7:a0:d0:50:18:f9:
         d1:54:1d:da:c2:74:9a:03:9a:a1:d2:7e:c1:86:51:c9:df:67:
         c1:28:59:c4:a1:75:30:3a:e6:92:25:b0:93:38:90:87:42:3e:
         1f:8c:31:12:54:67:4e:8a:ac:7b:b7:03:55:db:03:eb:c6:9a:
         ef:ce:c4:48:e7:fb:a8:94:4b:97:42:b0:ea:32:12:f1:ff:2b:
         4d:b8:bf:47:34:87:2d:fb:33:6f:ce:2d:9b:1d:1e:f4:be:4e:
         c0:4f:e0:3b:25:a9:22:8d:1f:d3:aa:26:24:47:bb:8c:c0:fe:
         52:2a:27:29:f0:ec:3d:74:9d:bc:fa:c8:e6:25:54:4a:1b:e5:
         6e:37:d4:87:93:ec:8f:e7:60:66:e2:dc:e4:98:d1:f4:d8:01:
         f0:95:43:7a:34:cd:b5:f8:55:8c:d9:a7:a4:fa:68:75:28:dc:
         99:95:23:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQPgXGZ2t93xs9iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk
ZDlmMGI2YTMtMTc3MC00ZjgzLTkzZWUtZjNjNmQyY2NmYmJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFvJT81uy5+OmnPWQXEhmRRNDBkNulpm/YKI
9eiTw/NFADVlJXdCR9kClbwPsL4asWolstN8qDSQoIpFIddKa1flCHKG4K2qV88F
CJb33tdognOqgCwzujowlGJ8dU9CifVu9Aq1HHZeu7/z43MtSTOiI8kZnI6PG0p6
6Dc5cjxU+YU4rJdVihSCNMtH5XzFW8MYkoJxhStYklrwNT+DVO1XmnuaibWCjwMU
nzVVx3c/kLfMT13MIdvO1Yu9UZJ3Tk7w4r39uj5rNrFgQKnGMDr1bI+Z3Uiq3y91
i/ETG45aTvUav09hE3kEq5Qe4zhAOGkB2JrtuLAB25FbvlZsuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFsGcmqBVE1ErxjAZVaNQIl0KUPnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTAyZjNmMTgtZDE5Yy0z
MzViLTkwMTQtZTFiOWIzNDg4MTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYO8AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAIMbR5LSibRUMse+VQtgWis4fDpLJv+7eGTxtvRuSTdbtLxkvqExSgm
crVTqfmWkqswdD/zDh5rgmBPdbejCfA9l2Aj4Vp0xpCXcv29zYbSOG+dv9eg0FAY
+dFUHdrCdJoDmqHSfsGGUcnfZ8EoWcShdTA65pIlsJM4kIdCPh+MMRJUZ06KrHu3
A1XbA+vGmu/OxEjn+6iUS5dCsOoyEvH/K024v0c0hy37M2/OLZsdHvS+TsBP4Dsl
qSKNH9OqJiRHu4zA/lIqJynw7D10nbz6yOYlVEob5W431IeT7I/nYGbi3OSY0fTY
AfCVQ3o0zbX4VYzZp6T6aHUo3JmVIwY=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:59:46 2025 by rpki-client