Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5ae9e84-8331-356b-b2a9-0099d0e68482.roa
File:                     d5ae9e84-8331-356b-b2a9-0099d0e68482.roa (raw, json)
Hash identifier:          5b8/jLzMAgW4DITtyedvaTHc4Wm23bZyYvQdIUVKahY=
Subject key identifier:   4B:F3:AC:2E:D6:B9:36:A7:AE:71:6B:A0:C3:0F:96:FA:C2:3A:59:7E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AE196AB4835B4F6EA2FD50F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5ae9e84-8331-356b-b2a9-0099d0e68482.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     22394
IP address blocks:        168.201.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:ab:48:35:b4:f6:ea:2f:d5:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=10a9ad37-9e73-47b4-a453-911a48b928a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cf:3e:e4:25:84:91:84:d4:e7:6a:2d:ec:5f:
                    2a:f1:63:72:54:e0:eb:a1:d6:ca:f8:0b:4b:ad:c9:
                    db:a5:a1:15:e4:b1:b8:0d:b8:f3:29:d9:45:96:3e:
                    a1:93:ed:39:f8:86:3e:3a:5b:f9:08:9f:66:67:ca:
                    b9:47:3b:96:73:ed:57:15:5e:be:99:0f:a5:f6:4d:
                    8b:18:a3:a9:7c:38:26:cd:4b:5f:56:6a:21:0d:45:
                    b9:f9:85:ac:b1:08:4d:72:cd:ba:29:0a:47:8f:f8:
                    3e:6f:4f:14:9b:e6:29:d5:08:35:7d:5d:06:6c:11:
                    8e:ad:8f:ef:73:7a:36:ad:0f:17:d0:4a:ae:b0:8a:
                    84:e6:f2:d7:99:93:c6:b0:17:64:17:be:ea:d0:6e:
                    f7:32:c5:62:ab:e9:a0:3d:60:83:5a:04:b0:c6:b0:
                    0a:8c:50:fa:31:c9:74:f6:ee:c4:71:91:f1:6d:3c:
                    43:b6:34:5f:fe:90:22:04:29:03:e3:b4:80:fd:5a:
                    e0:f1:2d:dd:a8:ac:52:8b:ae:22:b4:2e:7d:cd:78:
                    89:03:3f:1b:56:05:37:0e:d4:4e:87:55:ae:9d:83:
                    7d:c9:cb:11:72:71:54:10:7a:49:1b:76:f4:bc:9b:
                    26:2f:2b:89:2a:eb:50:3b:7b:d4:38:ac:10:20:4c:
                    09:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F3:AC:2E:D6:B9:36:A7:AE:71:6B:A0:C3:0F:96:FA:C2:3A:59:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5ae9e84-8331-356b-b2a9-0099d0e68482.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.201.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:20:8c:15:32:52:84:3e:c4:62:73:22:f1:51:9c:9a:64:5c:
         00:5b:66:14:ac:76:5c:f5:ff:f5:9b:26:16:4f:a3:14:8e:84:
         d6:e0:6a:7b:5c:8b:ed:1e:f8:14:5a:f1:21:d3:e6:f0:13:2d:
         e6:d2:6e:47:39:d3:21:bc:93:b0:c5:75:b7:90:30:77:25:af:
         6c:3e:94:0f:bc:55:48:e1:2e:d3:4c:ca:57:2d:fb:f8:6b:13:
         66:f6:44:6e:14:dc:e7:d3:2f:0a:a6:b5:da:60:36:be:12:c4:
         c3:a5:1b:be:38:01:c7:01:ab:ce:ff:ac:01:15:9d:b1:71:78:
         4a:d1:8d:78:10:f3:68:85:9d:58:8c:7e:32:69:12:4d:c9:9e:
         2a:14:b8:9a:1d:36:40:70:63:f8:46:50:5e:43:7c:4d:7f:f6:
         eb:83:b6:b1:06:43:bb:1c:2e:82:cd:4a:3e:46:0f:04:7b:e0:
         10:8c:da:e8:aa:3d:17:61:e3:46:e6:9d:33:01:9a:5a:f6:a5:
         93:91:ed:08:4f:47:f2:8a:20:25:51:20:0f:bb:90:d0:eb:89:
         f5:0d:a8:06:6e:22:f1:72:81:4d:50:c6:c3:0b:de:b4:46:d3:
         73:01:6e:f9:7e:22:57:a8:02:2d:6d:6c:52:72:49:d9:d7:b7:
         de:ee:0d:54
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErhlqtINbT26i/VDwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
MTBhOWFkMzctOWU3My00N2I0LWE0NTMtOTExYTQ4YjkyOGEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM8+5CWEkYTU52ot7F8q8WNyVODrodbK+AtL
rcnbpaEV5LG4DbjzKdlFlj6hk+05+IY+Olv5CJ9mZ8q5RzuWc+1XFV6+mQ+l9k2L
GKOpfDgmzUtfVmohDUW5+YWssQhNcs26KQpHj/g+b08Um+Yp1Qg1fV0GbBGOrY/v
c3o2rQ8X0EqusIqE5vLXmZPGsBdkF77q0G73MsViq+mgPWCDWgSwxrAKjFD6Mcl0
9u7EcZHxbTxDtjRf/pAiBCkD47SA/Vrg8S3dqKxSi64itC59zXiJAz8bVgU3DtRO
h1WunYN9ycsRcnFUEHpJG3b0vJsmLyuJKutQO3vUOKwQIEwJZQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEvzrC7WuTanrnFroMMPlvrCOll+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDVhZTllODQtODMzMS0z
NTZiLWIyYTktMDA5OWQwZTY4NDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqMkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAcCCMFTJShD7EYnMi8VGcmmRcAFtmFKx2XPX/9ZsmFk+jFI6E1uBqe1yL
7R74FFrxIdPm8BMt5tJuRznTIbyTsMV1t5AwdyWvbD6UD7xVSOEu00zKVy37+GsT
ZvZEbhTc59MvCqa12mA2vhLEw6UbvjgBxwGrzv+sARWdsXF4StGNeBDzaIWdWIx+
MmkSTcmeKhS4mh02QHBj+EZQXkN8TX/264O2sQZDuxwugs1KPkYPBHvgEIza6Ko9
F2HjRuadMwGaWvalk5HtCE9H8oogJVEgD7uQ0OuJ9Q2oBm4i8XKBTVDGwwvetEbT
cwFu+X4iV6gCLW1sUnJJ2de33u4NVA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:33:20 2025 by rpki-client