Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65e6b9f1-4dc2-3875-8b70-e0e5a812d981.roa
File:                     65e6b9f1-4dc2-3875-8b70-e0e5a812d981.roa (raw, json)
Hash identifier:          5+o5RYoMRWccV5dCV/GSKj59ksvtVf9h3TBstBRzZ6U=
Subject key identifier:   5A:8D:27:65:3C:3D:BE:6C:CA:31:FA:52:33:96:CD:35:9F:70:F0:E9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849C79F79FD96BF9F3C2B11EB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65e6b9f1-4dc2-3875-8b70-e0e5a812d981.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.243.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:79:fd:96:bf:9f:3c:2b:11:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=64502542-ae1e-4028-a9c9-1a9bbbb811ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cc:63:9c:d0:bf:61:a1:69:1f:d3:4a:9d:fc:
                    46:72:d2:d5:e5:3b:a0:5b:e5:b6:65:ba:e6:d6:ad:
                    fd:bc:5f:4b:84:91:93:ed:65:5c:59:cd:e5:e8:91:
                    1f:1e:9e:8d:d1:6e:85:f2:12:ba:e8:45:9c:d8:44:
                    6c:7e:62:f2:3e:ea:3f:4c:3d:2f:d9:7a:86:b6:8a:
                    d9:d4:a6:a3:e2:a9:8d:f4:c3:89:6a:08:e6:15:64:
                    11:64:8d:fe:24:fb:7d:80:bd:b7:07:99:71:a9:08:
                    31:8e:59:a3:e4:d1:46:e7:98:8f:9e:26:22:5f:f0:
                    53:62:6a:60:57:83:1f:17:3a:f5:01:bd:6d:1f:e3:
                    16:b1:8b:b8:17:d5:79:d4:f7:89:53:75:f1:9f:a8:
                    29:4e:a1:30:09:26:42:0c:34:cb:a5:14:64:d9:d0:
                    fc:d7:19:fe:b7:93:8e:46:d2:90:d9:57:ce:7d:09:
                    6b:b9:9e:8d:e1:61:f9:1b:be:72:15:7b:b5:5b:a2:
                    98:b5:2a:8f:09:c2:85:3c:14:e2:27:16:ce:ff:17:
                    76:5c:ad:4c:12:00:f3:70:c1:d3:86:00:f4:17:cd:
                    2e:53:be:2e:55:22:31:eb:65:a7:9a:33:93:c1:db:
                    6a:32:a5:fc:ba:1e:3b:d5:4a:a0:0a:c2:90:d8:0d:
                    32:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8D:27:65:3C:3D:BE:6C:CA:31:FA:52:33:96:CD:35:9F:70:F0:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65e6b9f1-4dc2-3875-8b70-e0e5a812d981.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.243.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:03:55:99:07:71:64:e8:e1:95:f9:3a:38:63:0b:4d:7f:e8:
         46:77:fc:1f:9f:f0:52:18:b5:a2:40:5f:29:8b:62:c1:c5:e0:
         3b:73:be:02:d0:c3:ce:b6:e5:01:ee:d1:57:1a:6c:08:89:4f:
         6c:cd:14:14:44:0d:ef:58:82:7a:9c:07:ca:3f:a8:a0:0b:b7:
         a7:47:76:ff:ae:71:6b:56:e9:52:47:39:6c:91:90:82:d6:d8:
         f4:d8:dc:20:21:0c:06:4f:e0:ee:77:90:ff:de:66:81:43:cf:
         37:5a:10:f0:24:35:d8:31:01:09:8d:f9:07:3e:29:75:63:76:
         b6:ae:57:ab:8f:82:cc:8d:5b:b3:c2:fd:b4:61:b7:85:51:6c:
         91:bc:89:fe:d9:ad:a2:10:ea:f6:b3:9a:44:2f:65:a3:b8:20:
         0d:ec:b9:78:d0:82:3c:43:f1:a9:cf:95:63:93:0f:b1:c0:aa:
         b6:6e:e5:92:cf:e8:af:37:3a:ed:4f:4c:3a:51:df:ca:32:95:
         71:5d:3c:99:9b:ac:cd:20:d2:32:67:0f:cf:37:e8:74:9e:e1:
         ea:94:06:68:f2:b4:60:d1:b3:e6:66:a8:70:63:a6:38:56:1d:
         70:0b:08:29:05:5a:23:34:db:d6:be:3f:34:d4:da:16:cc:c3:
         35:be:ec:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn3n9lr+fPCsR64AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk
NjQ1MDI1NDItYWUxZS00MDI4LWE5YzktMWE5YmJiYjgxMWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsxjnNC/YaFpH9NKnfxGctLV5TugW+W2Zbrm
1q39vF9LhJGT7WVcWc3l6JEfHp6N0W6F8hK66EWc2ERsfmLyPuo/TD0v2XqGtorZ
1Kaj4qmN9MOJagjmFWQRZI3+JPt9gL23B5lxqQgxjlmj5NFG55iPniYiX/BTYmpg
V4MfFzr1Ab1tH+MWsYu4F9V51PeJU3Xxn6gpTqEwCSZCDDTLpRRk2dD81xn+t5OO
RtKQ2VfOfQlruZ6N4WH5G75yFXu1W6KYtSqPCcKFPBTiJxbO/xd2XK1MEgDzcMHT
hgD0F80uU74uVSIx62WnmjOTwdtqMqX8uh471UqgCsKQ2A0yRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFqNJ2U8Pb5syjH6UjOWzTWfcPDpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjVlNmI5ZjEtNGRjMi0z
ODc1LThiNzAtZTBlNWE4MTJkOTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvOAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACoDVZkHcWTo4ZX5OjhjC01/6EZ3/B+f8FIYtaJAXymLYsHF4DtzvgLQ
w8625QHu0VcabAiJT2zNFBREDe9YgnqcB8o/qKALt6dHdv+ucWtW6VJHOWyRkILW
2PTY3CAhDAZP4O53kP/eZoFDzzdaEPAkNdgxAQmN+Qc+KXVjdrauV6uPgsyNW7PC
/bRht4VRbJG8if7ZraIQ6vazmkQvZaO4IA3suXjQgjxD8anPlWOTD7HAqrZu5ZLP
6K83Ou1PTDpR38oylXFdPJmbrM0g0jJnD8836HSe4eqUBmjytGDRs+ZmqHBjpjhW
HXALCCkFWiM029a+PzTU2hbMwzW+7AE=
-----END CERTIFICATE-----
Generated at Sun May 11 00:35:38 2025 by rpki-client