Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/81b13904-27b0-3f6c-8ff0-71b1197bb5e5.roa
File:                     81b13904-27b0-3f6c-8ff0-71b1197bb5e5.roa (raw, json)
Hash identifier:          NOe+kvQQExZ8Gej1mDWu5GWb3kP3bbi4/WDIKUrxbBc=
Subject key identifier:   60:A2:7B:3B:9E:BD:8C:1B:3E:1D:F0:54:C3:1F:FC:79:A4:F9:A3:83
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B87B22CD247417826D18ABF18
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/81b13904-27b0-3f6c-8ff0-71b1197bb5e5.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        174.229.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:2c:d2:47:41:78:26:d1:8a:bf:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=b10560c1-2280-4cc7-87fc-04975239d9eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a0:de:da:55:0b:eb:5c:8e:d1:b2:15:8b:33:
                    82:06:d5:51:12:86:20:fd:d7:93:01:4e:59:b9:52:
                    62:d0:2e:b7:e2:ca:f2:3c:49:55:51:63:75:00:b9:
                    b4:93:5d:14:73:33:5c:0d:28:a0:f8:95:ec:3e:47:
                    f1:34:9e:b7:ff:f8:ac:ee:e9:4d:a3:cb:dc:2d:c7:
                    42:f8:6c:5a:e8:7a:37:de:2f:d5:21:67:25:63:20:
                    f2:08:18:92:4b:06:83:18:fd:69:b9:31:65:84:ad:
                    06:4f:c2:06:73:70:2f:e6:c8:25:b9:02:79:89:99:
                    22:31:4d:ec:fa:84:14:9b:29:bb:ae:3d:f1:4d:94:
                    d7:2a:68:fd:ab:37:29:71:24:bd:79:0e:18:e2:d5:
                    44:4a:c7:d8:14:20:51:b3:a1:ab:8b:64:31:80:89:
                    fd:84:f9:75:f2:da:2a:8a:dd:37:bf:79:0e:ee:38:
                    b7:ca:82:bb:10:35:78:b7:2f:88:26:c0:0b:fb:5a:
                    12:db:98:9d:2f:b2:74:e4:c4:43:98:49:7d:fc:45:
                    2f:44:33:16:74:af:2f:c0:48:09:50:b1:6b:67:25:
                    ab:0d:43:c6:1b:1c:de:64:0f:81:9d:4d:22:52:64:
                    eb:66:f5:8f:75:d4:ea:5b:dc:90:47:dd:0e:58:00:
                    78:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A2:7B:3B:9E:BD:8C:1B:3E:1D:F0:54:C3:1F:FC:79:A4:F9:A3:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/81b13904-27b0-3f6c-8ff0-71b1197bb5e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.229.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:7e:b8:a2:93:52:f8:b9:aa:71:62:f1:4e:1c:1f:d9:97:e6:
         83:ff:54:f2:3d:69:cc:d6:85:7d:19:d7:11:45:72:d4:35:ee:
         d4:76:62:97:4c:bf:ea:b1:e3:a1:98:44:67:39:18:94:2f:14:
         05:1e:27:b8:d2:2a:95:1e:35:96:04:af:7e:fd:ff:86:18:fe:
         1a:ce:06:6d:d5:57:9c:6f:7e:9a:8b:85:5f:5f:02:f8:e1:6f:
         15:4a:66:68:e4:f6:99:59:3c:ed:f8:bb:c3:b3:d8:ae:0d:9e:
         fa:24:cd:84:0f:ec:63:98:f6:fa:29:3b:4f:c4:71:bd:ee:13:
         df:ec:6c:54:e9:14:16:a9:97:1f:cd:3b:4e:0f:4c:5d:4f:73:
         e5:a5:0b:e0:b5:ed:9c:ca:ae:e9:d6:ad:1b:a6:bc:3b:6d:b4:
         d2:ea:41:da:9b:ff:e1:e0:20:62:e3:82:5b:2c:bb:02:19:2c:
         5b:d1:d9:25:08:b9:33:c2:27:19:68:58:4c:4a:b4:24:53:76:
         19:eb:67:46:19:e7:4b:a8:97:e9:3f:3f:d3:c9:26:ca:73:87:
         16:91:2f:f4:b8:31:fc:9a:49:0f:81:21:a4:aa:bc:df:16:d1:
         f6:e5:bb:be:5b:d7:35:98:be:ef:cb:e0:d7:0a:ee:28:c4:8c:
         cf:60:7b:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsizSR0F4JtGKvxgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk
YjEwNTYwYzEtMjI4MC00Y2M3LTg3ZmMtMDQ5NzUyMzlkOWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26De2lUL61yO0bIVizOCBtVREoYg/deTAU5Z
uVJi0C634sryPElVUWN1ALm0k10UczNcDSig+JXsPkfxNJ63//is7ulNo8vcLcdC
+Gxa6Ho33i/VIWclYyDyCBiSSwaDGP1puTFlhK0GT8IGc3Av5sgluQJ5iZkiMU3s
+oQUmym7rj3xTZTXKmj9qzcpcSS9eQ4Y4tVESsfYFCBRs6Gri2QxgIn9hPl18toq
it03v3kO7ji3yoK7EDV4ty+IJsAL+1oS25idL7J05MRDmEl9/EUvRDMWdK8vwEgJ
ULFrZyWrDUPGGxzeZA+BnU0iUmTrZvWPddTqW9yQR90OWAB4qwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGCiezuevYwbPh3wVMMf/Hmk+aODMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODFiMTM5MDQtMjdiMC0z
ZjZjLThmZjAtNzFiMTE5N2JiNWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruUAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEh+uKKTUvi5qnFi8U4cH9mX5oP/VPI9aczWhX0Z1xFFctQ17tR2YpdM
v+qx46GYRGc5GJQvFAUeJ7jSKpUeNZYEr379/4YY/hrOBm3VV5xvfpqLhV9fAvjh
bxVKZmjk9plZPO34u8Oz2K4NnvokzYQP7GOY9vopO0/Ecb3uE9/sbFTpFBaplx/N
O04PTF1Pc+WlC+C17ZzKrunWrRumvDtttNLqQdqb/+HgIGLjglssuwIZLFvR2SUI
uTPCJxloWExKtCRTdhnrZ0YZ50uol+k/P9PJJspzhxaRL/S4MfyaSQ+BIaSqvN8W
0fblu75b1zWYvu/L4NcK7ijEjM9ge+I=
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:53:29 2025 by rpki-client