Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/780c407e-a26c-3757-841a-9d40a14dc153.roa
File:                     780c407e-a26c-3757-841a-9d40a14dc153.roa (raw, json)
Hash identifier:          +G1n6mRgga2c8s4NWf22UhjQkTxFu3dY/emZ80mJ0Ys=
Subject key identifier:   9C:01:E5:69:30:F0:73:6E:09:5F:0A:42:D5:BE:06:8F:3D:1D:9E:98
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B87B23C1B345568C9B8373D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/780c407e-a26c-3757-841a-9d40a14dc153.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        174.249.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:3c:1b:34:55:68:c9:b8:37:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=6c46f40c-1b80-4fd0-a061-6cfb284f15d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:57:db:73:1e:67:1d:7f:f6:89:24:a5:04:e9:
                    8c:5c:b8:1f:b0:46:84:db:7d:c2:21:a8:15:0b:e9:
                    b6:54:21:e2:19:a7:11:c7:30:3a:e3:e1:02:25:06:
                    40:37:f6:96:34:0c:01:1c:bd:1b:6e:13:b6:27:0e:
                    df:3f:34:2f:f6:22:b2:7d:f1:bc:3b:e6:f2:49:1a:
                    31:35:b8:fb:7e:1f:51:c1:b1:2b:28:cc:f9:b4:5b:
                    60:87:20:d3:47:2f:12:84:93:fa:99:34:00:e3:65:
                    e5:09:1c:8f:ab:b3:54:80:f1:b7:ce:c3:b8:17:9c:
                    a0:60:ae:99:0b:f3:a5:4f:f8:09:2a:94:8a:ff:e9:
                    3e:06:b0:97:7a:6c:30:da:54:bc:a7:e8:60:e2:d0:
                    85:8b:e7:8c:d4:a5:a6:26:06:e0:12:96:1d:30:97:
                    06:df:09:96:96:d7:e0:9e:a5:83:07:e9:73:5c:56:
                    d8:5a:1c:bf:fe:d1:fe:f2:83:43:a2:ac:c2:a7:d8:
                    44:84:eb:89:e6:36:d4:e4:ac:7f:72:62:47:2b:1b:
                    0c:98:c7:49:f3:1a:b9:f2:89:b4:e8:2d:dc:b8:06:
                    fc:01:5c:29:68:25:a5:1d:d4:f2:b5:db:a9:bd:4d:
                    21:d7:3e:44:d6:63:ab:3a:36:d9:36:15:d8:34:49:
                    09:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:01:E5:69:30:F0:73:6E:09:5F:0A:42:D5:BE:06:8F:3D:1D:9E:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/780c407e-a26c-3757-841a-9d40a14dc153.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.249.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:6c:f3:4f:d5:3e:19:9e:7b:da:6f:e3:e2:bb:0b:b3:2b:af:
         87:92:4a:f5:58:b4:c1:82:ac:5b:cf:c9:e5:2b:a6:38:6c:9c:
         ef:fe:7a:bf:c6:55:da:05:c2:6e:9a:e6:95:3a:9e:85:bd:6b:
         d5:ad:46:19:0a:92:84:98:24:ee:d1:ae:3c:d6:d8:55:e4:d5:
         70:47:aa:25:87:5a:bd:bd:3f:2e:e5:cf:4c:0e:0b:ac:76:cf:
         58:8a:6b:d4:1e:a7:25:35:3d:b0:86:cb:91:c3:3c:19:c9:ad:
         dd:c1:08:eb:df:03:94:66:d0:ec:31:f8:8b:6b:8b:53:51:90:
         a4:94:2a:06:fe:23:9a:e6:6a:b1:5f:07:ea:e3:3e:9b:81:f0:
         ad:f1:50:e1:ed:72:63:9c:a6:a7:47:b0:64:06:82:a7:ac:d5:
         83:8f:9e:69:34:f7:2f:fe:8b:e3:0c:44:3c:5c:16:8f:1d:60:
         3e:47:b4:18:75:12:40:6f:d0:fd:67:10:37:cd:b1:10:43:2e:
         e1:36:db:14:a9:c5:38:56:a9:af:50:e3:86:d1:60:6e:47:7f:
         4a:96:03:0d:48:a3:fa:ca:92:04:ce:40:97:10:c3:e4:f4:02:
         82:88:c5:5b:75:9a:e1:2d:b6:78:27:6f:a6:a0:50:84:9c:f1:
         4e:64:ae:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsjwbNFVoybg3PQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk
NmM0NmY0MGMtMWI4MC00ZmQwLWEwNjEtNmNmYjI4NGYxNWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFfbcx5nHX/2iSSlBOmMXLgfsEaE233CIagV
C+m2VCHiGacRxzA64+ECJQZAN/aWNAwBHL0bbhO2Jw7fPzQv9iKyffG8O+bySRox
Nbj7fh9RwbErKMz5tFtghyDTRy8ShJP6mTQA42XlCRyPq7NUgPG3zsO4F5ygYK6Z
C/OlT/gJKpSK/+k+BrCXemww2lS8p+hg4tCFi+eM1KWmJgbgEpYdMJcG3wmWltfg
nqWDB+lzXFbYWhy//tH+8oNDoqzCp9hEhOuJ5jbU5Kx/cmJHKxsMmMdJ8xq58om0
6C3cuAb8AVwpaCWlHdTytdupvU0h1z5E1mOrOjbZNhXYNEkJ2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJwB5Wkw8HNuCV8KQtW+Bo89HZ6YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzgwYzQwN2UtYTI2Yy0z
NzU3LTg0MWEtOWQ0MGExNGRjMTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrvk0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJhs80/VPhmee9pv4+K7C7Mrr4eSSvVYtMGCrFvPyeUrpjhsnO/+er/G
VdoFwm6a5pU6noW9a9WtRhkKkoSYJO7RrjzW2FXk1XBHqiWHWr29Py7lz0wOC6x2
z1iKa9QepyU1PbCGy5HDPBnJrd3BCOvfA5Rm0Owx+Itri1NRkKSUKgb+I5rmarFf
B+rjPpuB8K3xUOHtcmOcpqdHsGQGgqes1YOPnmk09y/+i+MMRDxcFo8dYD5HtBh1
EkBv0P1nEDfNsRBDLuE22xSpxThWqa9Q44bRYG5Hf0qWAw1Io/rKkgTOQJcQw+T0
AoKIxVt1muEttngnb6agUISc8U5kruo=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:11:32 2025 by rpki-client