Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d853bc6-fb20-3518-b7a5-c8746eba8684.roa
File:                     7d853bc6-fb20-3518-b7a5-c8746eba8684.roa (raw, json)
Hash identifier:          9qANdBrcNMKBVxx/8kqgU+LO6cEdwPuGGrm2Y86J3QE=
Subject key identifier:   6A:A0:AE:68:19:73:75:6C:74:E0:14:5F:98:FC:62:2C:0D:79:3C:26
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B87B22A673C32A560103BF880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d853bc6-fb20-3518-b7a5-c8746eba8684.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        174.226.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:2a:67:3c:32:a5:60:10:3b:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=a2775bda-bcc2-4a05-a0a9-419a3e2f6ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e9:8e:be:19:db:cf:ce:d6:a3:62:7e:86:b8:
                    f2:76:47:dd:09:80:dc:2e:6d:ea:23:ce:44:07:3b:
                    8d:da:0d:b5:45:80:db:78:1c:36:47:a2:b5:7f:0a:
                    9a:54:eb:af:61:61:33:44:2e:41:ea:91:17:60:63:
                    2b:dd:f1:a3:2a:09:8b:00:f0:14:6f:db:89:5f:6c:
                    c9:6f:a9:79:8b:52:a6:50:95:16:95:e9:2b:fa:33:
                    c5:24:72:f4:8c:ce:ce:5d:77:17:d2:fc:8e:25:75:
                    44:9a:7f:d8:72:8d:cd:15:2c:62:79:c9:ea:a6:cd:
                    ca:8d:98:9e:cf:dd:5d:b9:fd:cc:05:90:21:43:34:
                    24:95:ab:f7:ed:f5:9c:3d:ff:41:28:83:60:d8:b8:
                    31:73:f7:ea:0b:d1:18:9d:81:af:7e:05:cb:c5:f3:
                    61:8c:53:9d:7c:d4:f6:85:13:ad:cc:12:40:87:79:
                    cd:d3:a9:0c:90:a4:74:3c:f0:f5:3d:b1:df:2b:43:
                    6c:8e:57:07:7a:a5:08:48:89:7d:b2:bb:fd:77:ed:
                    14:43:8d:41:65:80:15:c2:28:6c:b3:cd:73:04:48:
                    6b:f3:72:b1:e3:2a:b2:35:18:ae:86:09:41:a3:eb:
                    ef:b7:ae:aa:f8:cb:67:e6:8b:89:04:f4:9d:35:9b:
                    00:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A0:AE:68:19:73:75:6C:74:E0:14:5F:98:FC:62:2C:0D:79:3C:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d853bc6-fb20-3518-b7a5-c8746eba8684.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.226.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:47:9e:63:92:56:be:b1:82:da:d2:e8:24:90:85:5f:03:a2:
         c7:5d:67:1d:c9:15:7a:b5:bb:a9:ed:21:34:74:2f:68:38:3d:
         c1:fd:f3:0a:9a:db:b6:a8:2e:da:26:74:5c:47:4e:7b:e4:47:
         93:37:4f:14:28:31:ec:65:c7:c3:ac:7c:c0:10:20:95:91:e5:
         95:8d:10:bc:c1:4e:d4:85:2a:c9:03:53:b8:42:b4:e8:0d:5d:
         e9:eb:bd:fd:bb:3d:ab:99:a1:00:d6:6d:e3:af:d3:44:c9:4a:
         94:f2:77:43:3f:29:3e:e0:d7:9f:0b:56:fa:e9:fd:b2:fc:1f:
         8b:bd:19:bf:cc:ed:8c:01:8f:24:30:6e:94:25:0d:63:b0:eb:
         c4:8a:b2:1c:52:66:ef:2d:73:7a:60:18:39:22:e6:60:d9:d0:
         52:f9:57:bd:46:24:9e:a4:ce:fe:25:19:56:5a:35:ec:ad:b6:
         a5:0b:82:c0:1d:fa:6b:1f:8c:43:86:ec:c7:7f:f6:05:d5:de:
         fc:f2:33:81:17:af:2e:0f:fd:45:be:6d:2d:c6:5d:a6:0e:ea:
         d9:40:93:d0:85:63:73:81:a1:9c:86:95:7d:ea:d6:8a:c2:f8:
         59:da:ed:78:ec:43:46:fc:5e:a8:b7:c0:c4:1e:d1:1f:ac:ed:
         a4:9b:39:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsipnPDKlYBA7+IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk
YTI3NzViZGEtYmNjMi00YTA1LWEwYTktNDE5YTNlMmY2Y2E4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOmOvhnbz87Wo2J+hrjydkfdCYDcLm3qI85E
BzuN2g21RYDbeBw2R6K1fwqaVOuvYWEzRC5B6pEXYGMr3fGjKgmLAPAUb9uJX2zJ
b6l5i1KmUJUWlekr+jPFJHL0jM7OXXcX0vyOJXVEmn/Yco3NFSxiecnqps3KjZie
z91duf3MBZAhQzQklav37fWcPf9BKINg2Lgxc/fqC9EYnYGvfgXLxfNhjFOdfNT2
hROtzBJAh3nN06kMkKR0PPD1PbHfK0NsjlcHeqUISIl9srv9d+0UQ41BZYAVwihs
s81zBEhr83Kx4yqyNRiuhglBo+vvt66q+Mtn5ouJBPSdNZsAYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGqgrmgZc3VsdOAUX5j8YiwNeTwmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2Q4NTNiYzYtZmIyMC0z
NTE4LWI3YTUtYzg3NDZlYmE4Njg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruIgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAFHnmOSVr6xgtrS6CSQhV8DosddZx3JFXq1u6ntITR0L2g4PcH98wqa
27aoLtomdFxHTnvkR5M3TxQoMexlx8OsfMAQIJWR5ZWNELzBTtSFKskDU7hCtOgN
Xenrvf27PauZoQDWbeOv00TJSpTyd0M/KT7g158LVvrp/bL8H4u9Gb/M7YwBjyQw
bpQlDWOw68SKshxSZu8tc3pgGDki5mDZ0FL5V71GJJ6kzv4lGVZaNeyttqULgsAd
+msfjEOG7Md/9gXV3vzyM4EXry4P/UW+bS3GXaYO6tlAk9CFY3OBoZyGlX3q1orC
+Fna7XjsQ0b8Xqi3wMQe0R+s7aSbOaQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:16:50 2025 by rpki-client