Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c5f82ffc-3c37-309e-8134-534f834ff93f.roa
File:                     c5f82ffc-3c37-309e-8134-534f834ff93f.roa (raw, json)
Hash identifier:          IJGhkDmvdYQSJNmmLb/+aRIEOmQQ3EGm+BFRgOBNFF4=
Subject key identifier:   EF:BC:3A:6D:BA:91:41:58:32:EC:F0:5D:1A:58:C6:39:67:6D:9E:E9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B87B233ED09FC1C970E47B660
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c5f82ffc-3c37-309e-8134-534f834ff93f.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        174.240.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:33:ed:09:fc:1c:97:0e:47:b6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=1bfb1e7b-e93c-4b58-a60e-efa13be0e874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4f:32:14:ac:90:6a:e2:66:b6:20:8c:4d:55:
                    e5:03:aa:3c:5f:8a:71:94:80:8f:1f:53:10:66:e3:
                    21:a4:22:27:90:99:1d:73:1a:31:0c:7b:7d:de:81:
                    32:8c:5b:a3:fc:12:02:4d:2c:f5:28:d1:dc:3e:ed:
                    dc:0b:87:50:7a:c5:2b:d9:5a:72:8e:15:55:fb:e7:
                    23:e6:5c:8a:a9:10:4c:2e:c5:c6:a9:55:24:64:53:
                    cf:73:3c:5d:1c:f8:0e:17:a4:2a:14:97:13:3b:aa:
                    aa:dd:95:a1:3f:b3:c0:39:a4:49:50:bc:79:e7:33:
                    de:e0:c7:e7:2d:1b:e4:75:1d:c6:8a:de:62:22:90:
                    a3:6e:47:21:8b:64:18:3f:31:29:9a:00:b0:97:e7:
                    d2:93:49:0c:1e:98:4a:68:00:b3:be:c7:03:95:8e:
                    96:1f:00:44:53:a5:fd:87:ae:d9:c5:00:cb:5a:b7:
                    a4:d1:d0:b1:2d:ac:6c:53:ab:06:d0:18:e1:f1:ff:
                    d0:e0:49:a2:2d:18:28:3a:f1:cb:e0:c4:62:67:ac:
                    5c:52:03:4e:2a:7f:02:e9:d9:ca:2a:e9:82:39:5f:
                    5f:e5:28:cb:3a:32:5b:9c:a0:f3:e3:c7:eb:cb:d6:
                    04:49:a4:a0:3e:d7:2b:02:3d:ec:05:a9:c9:ff:8d:
                    63:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BC:3A:6D:BA:91:41:58:32:EC:F0:5D:1A:58:C6:39:67:6D:9E:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c5f82ffc-3c37-309e-8134-534f834ff93f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.240.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f8:df:e6:79:ae:5a:7b:41:2e:96:9c:1f:37:5d:cd:8e:dd:
         2d:7d:53:17:54:c3:fc:53:64:b3:da:41:a7:73:df:9f:08:71:
         bb:19:6c:88:80:fd:93:ad:c5:63:dc:3c:e4:98:b3:e1:c2:a3:
         a6:af:33:d3:48:c4:71:97:3b:1f:be:db:63:bd:7c:6a:45:90:
         e5:e3:87:d4:7c:cb:3e:53:5b:15:1b:f3:a7:37:6f:ba:bf:ca:
         9c:4d:9d:80:46:ba:c1:33:08:03:dd:3a:48:97:90:32:3d:02:
         ec:c3:ee:e6:3f:b5:d4:16:7f:a2:df:18:be:ff:a8:1e:3c:cf:
         4b:1c:22:cc:77:78:28:48:48:0f:c2:cd:fd:44:6b:24:03:b4:
         e7:40:0d:4b:84:65:ca:be:f4:49:e0:18:af:ef:97:88:37:b0:
         0e:b1:67:12:48:07:4f:72:b6:8a:59:1e:d6:b5:cf:de:4a:c3:
         71:f6:09:72:91:c4:df:4b:3e:33:17:25:6c:10:96:21:6a:6b:
         ac:29:46:ee:42:4d:9e:24:3c:6e:9c:92:3d:76:3e:02:83:d7:
         32:36:43:ce:7c:e2:75:54:56:1b:1f:3c:a4:2a:57:b2:a9:ed:
         ca:aa:0c:a1:a7:95:7b:40:5d:77:5d:d7:b6:fc:29:0f:7d:74:
         c6:61:13:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsjPtCfwclw5HtmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk
MWJmYjFlN2ItZTkzYy00YjU4LWE2MGUtZWZhMTNiZTBlODc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi08yFKyQauJmtiCMTVXlA6o8X4pxlICPH1MQ
ZuMhpCInkJkdcxoxDHt93oEyjFuj/BICTSz1KNHcPu3cC4dQesUr2VpyjhVV++cj
5lyKqRBMLsXGqVUkZFPPczxdHPgOF6QqFJcTO6qq3ZWhP7PAOaRJULx55zPe4Mfn
LRvkdR3Git5iIpCjbkchi2QYPzEpmgCwl+fSk0kMHphKaACzvscDlY6WHwBEU6X9
h67ZxQDLWrek0dCxLaxsU6sG0Bjh8f/Q4EmiLRgoOvHL4MRiZ6xcUgNOKn8C6dnK
KumCOV9f5SjLOjJbnKDz48fry9YESaSgPtcrAj3sBanJ/41jPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO+8Om26kUFYMuzwXRpYxjlnbZ7pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzVmODJmZmMtM2MzNy0z
MDllLTgxMzQtNTM0ZjgzNGZmOTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvAAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGz43+Z5rlp7QS6WnB83Xc2O3S19UxdUw/xTZLPaQadz358IcbsZbIiA
/ZOtxWPcPOSYs+HCo6avM9NIxHGXOx++22O9fGpFkOXjh9R8yz5TWxUb86c3b7q/
ypxNnYBGusEzCAPdOkiXkDI9AuzD7uY/tdQWf6LfGL7/qB48z0scIsx3eChISA/C
zf1EayQDtOdADUuEZcq+9EngGK/vl4g3sA6xZxJIB09ytopZHta1z95Kw3H2CXKR
xN9LPjMXJWwQliFqa6wpRu5CTZ4kPG6ckj12PgKD1zI2Q8584nVUVhsfPKQqV7Kp
7cqqDKGnlXtAXXdd17b8KQ99dMZhEwg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:50:47 2025 by rpki-client