Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c705c724-a094-3f44-ab62-508811e08029.roa
File:                     c705c724-a094-3f44-ab62-508811e08029.roa (raw, json)
Hash identifier:          9yzq/359gZXhTYo9+kOYKXViGmVXS8KVRhtCIttk3j4=
Subject key identifier:   EE:E9:58:14:81:A2:4E:C0:F8:7A:60:A9:3F:5C:10:15:26:B0:BA:A8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B87B223FC1D98A756DEFB4F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c705c724-a094-3f44-ab62-508811e08029.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        174.230.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:23:fc:1d:98:a7:56:de:fb:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=92220275-275c-4d32-a35b-6366575075da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:15:50:9c:21:67:76:fe:bc:6a:9a:dd:2f:70:
                    5b:8b:42:0b:a0:89:95:00:df:83:9d:1c:e3:c5:37:
                    71:d9:fe:71:49:e1:f9:e9:f8:4a:84:a0:48:61:5c:
                    87:9d:15:fd:d1:3b:21:46:1f:80:59:23:1a:33:b3:
                    02:b6:94:3d:e2:98:bb:8a:cc:ab:c5:9f:d5:ed:a4:
                    6f:51:ba:f3:58:af:42:7d:6a:d6:68:dd:56:bc:51:
                    23:af:7d:e4:9f:d5:92:e4:8e:fe:56:05:4e:44:9e:
                    74:a8:8d:7f:b9:84:1b:29:6d:75:ad:90:42:d6:fb:
                    f8:73:b5:25:c7:7e:cd:5b:94:02:4a:7c:80:e1:c4:
                    d0:30:a8:56:d3:75:01:78:29:d3:4a:94:51:f0:2c:
                    e2:e8:53:70:ca:ca:6a:3b:26:d9:a4:a0:60:9a:51:
                    98:d0:5f:92:ca:7e:e6:bd:ae:12:ac:96:0b:02:3e:
                    22:06:8d:d9:b8:2d:f0:92:1d:80:e1:21:fc:f9:fb:
                    59:cc:f8:7d:0b:0e:aa:43:4e:43:36:4e:48:e0:93:
                    fc:0c:14:63:22:ed:4e:2d:cd:7e:4a:53:be:19:16:
                    13:61:65:82:b1:1d:67:2c:26:3b:ac:dc:af:12:0c:
                    11:91:29:b5:59:ca:3b:f4:bc:ae:ab:c2:d0:7b:12:
                    09:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E9:58:14:81:A2:4E:C0:F8:7A:60:A9:3F:5C:10:15:26:B0:BA:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c705c724-a094-3f44-ab62-508811e08029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.230.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:2e:57:35:f8:e6:d2:e7:a2:94:86:06:82:a5:98:7f:db:76:
         d6:8a:b7:e7:61:13:02:3f:05:fa:1b:cf:51:ca:bc:cf:c5:2a:
         8f:1c:14:87:0a:03:ac:b5:0f:26:88:89:dd:60:06:aa:06:e6:
         e3:eb:ff:ed:67:b5:a9:e0:02:88:49:fe:91:ba:d5:9c:ce:4a:
         a3:9d:be:f6:88:e4:ff:5e:12:9a:ad:05:20:ad:89:f9:e8:6b:
         f9:ee:c1:0b:a1:91:44:1a:d8:32:04:14:ea:9b:5e:0a:ca:b7:
         e6:2b:6d:48:12:ef:02:9f:91:de:76:9f:13:b8:56:e4:eb:60:
         08:fb:f6:dd:78:a3:9a:bc:99:c3:d6:f3:1d:0e:87:da:57:36:
         88:9e:03:09:b9:61:90:31:2d:a7:47:55:16:d1:2e:3b:47:de:
         b5:f7:b8:43:71:06:ad:32:7e:a6:54:a6:39:c3:fb:ab:e8:48:
         8a:5d:57:8c:a3:a4:f1:a1:cf:06:48:0e:7a:b9:53:a3:30:88:
         f6:61:c6:bd:3b:18:0c:b3:42:2e:0e:51:5c:8b:a9:38:dd:f4:
         ca:dd:c0:7a:07:53:48:df:e6:6f:59:c3:8a:28:01:e4:7c:00:
         75:f8:84:16:ac:b6:19:7e:29:9c:6d:66:52:25:8d:b7:c5:02:
         ac:10:85:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsiP8HZinVt77TwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk
OTIyMjAyNzUtMjc1Yy00ZDMyLWEzNWItNjM2NjU3NTA3NWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBVQnCFndv68aprdL3Bbi0ILoImVAN+DnRzj
xTdx2f5xSeH56fhKhKBIYVyHnRX90TshRh+AWSMaM7MCtpQ94pi7isyrxZ/V7aRv
UbrzWK9CfWrWaN1WvFEjr33kn9WS5I7+VgVORJ50qI1/uYQbKW11rZBC1vv4c7Ul
x37NW5QCSnyA4cTQMKhW03UBeCnTSpRR8Czi6FNwyspqOybZpKBgmlGY0F+Syn7m
va4SrJYLAj4iBo3ZuC3wkh2A4SH8+ftZzPh9Cw6qQ05DNk5I4JP8DBRjIu1OLc1+
SlO+GRYTYWWCsR1nLCY7rNyvEgwRkSm1Wco79Lyuq8LQexIJDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO7pWBSBok7A+HpgqT9cEBUmsLqoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzcwNWM3MjQtYTA5NC0z
ZjQ0LWFiNjItNTA4ODExZTA4MDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruawMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGYuVzX45tLnopSGBoKlmH/bdtaKt+dhEwI/Bfobz1HKvM/FKo8cFIcK
A6y1DyaIid1gBqoG5uPr/+1ntangAohJ/pG61ZzOSqOdvvaI5P9eEpqtBSCtifno
a/nuwQuhkUQa2DIEFOqbXgrKt+YrbUgS7wKfkd52nxO4VuTrYAj79t14o5q8mcPW
8x0Oh9pXNoieAwm5YZAxLadHVRbRLjtH3rX3uENxBq0yfqZUpjnD+6voSIpdV4yj
pPGhzwZIDnq5U6MwiPZhxr07GAyzQi4OUVyLqTjd9MrdwHoHU0jf5m9Zw4ooAeR8
AHX4hBasthl+KZxtZlIljbfFAqwQhaM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:43:42 2025 by rpki-client