Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc529ca2-6e0a-36c5-8cb1-ee3b7a177095.roa
File:                     dc529ca2-6e0a-36c5-8cb1-ee3b7a177095.roa (raw, json)
Hash identifier:          GgPN8wF3rc2uqlNA9P1+CdNLMPD1Pve3SfGRTEcF0Kw=
Subject key identifier:   C3:0D:DC:C0:BB:C5:04:E4:67:F8:93:F7:64:AB:31:EC:40:28:D5:A3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A43DB20A818CD2607CC0B7AF8
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc529ca2-6e0a-36c5-8cb1-ee3b7a177095.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     6167
IP address blocks:        75.204.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:20:a8:18:cd:26:07:cc:0b:7a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=8d6abc82-20d4-4b5c-b049-d279f5274206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:58:40:29:28:e6:9d:a1:85:80:54:87:b3:de:
                    34:50:26:56:f9:66:2c:1f:99:be:26:47:51:17:82:
                    28:a4:59:4e:b8:64:d1:9a:21:b9:f7:da:bc:2b:2e:
                    9a:31:5d:b4:ef:01:46:21:bb:d6:22:91:d2:55:90:
                    ff:35:d1:0c:8e:6a:2a:2e:46:60:24:92:ec:44:cc:
                    99:30:fd:19:9e:d2:ec:f3:b1:eb:5d:fd:f0:dd:16:
                    82:b3:97:17:01:a8:4d:37:6a:75:c1:47:1f:74:81:
                    33:0e:01:0d:04:17:89:da:0c:89:2e:ae:9e:a0:24:
                    0e:3a:c0:7e:11:ea:27:6c:af:a6:70:e3:7e:e8:c4:
                    a4:59:e2:e5:a4:81:68:9a:4f:fc:c9:23:09:f5:85:
                    aa:f1:d9:3d:12:c8:d0:66:4f:99:56:28:ae:f0:b5:
                    61:9d:10:28:6a:26:34:d9:e2:3f:d3:00:15:e9:37:
                    3f:5d:54:ab:d5:df:84:02:d4:fa:2e:b3:18:a2:ed:
                    81:de:95:d0:75:da:ba:c4:f7:36:3c:cd:e5:7f:c1:
                    95:f8:64:3e:07:e2:96:3a:0d:33:a2:c7:6b:21:02:
                    6d:d4:f7:4d:27:c3:21:74:29:0b:c0:e0:8b:24:76:
                    f9:86:2c:1b:f1:e4:ea:88:34:c5:94:1b:41:ec:60:
                    bf:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0D:DC:C0:BB:C5:04:E4:67:F8:93:F7:64:AB:31:EC:40:28:D5:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc529ca2-6e0a-36c5-8cb1-ee3b7a177095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.204.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:f4:78:cf:3e:8e:ea:cf:2b:ed:f8:8a:c5:c0:54:d6:ad:24:
         1f:52:63:3c:70:a4:e5:af:1a:5b:6e:03:cd:10:55:fb:f3:36:
         7b:24:74:19:c5:a4:6f:4f:43:1f:98:2f:e0:fe:42:c0:31:4b:
         1b:ba:4c:89:99:22:21:c4:d2:8c:1a:9a:66:b6:3a:9b:41:a1:
         4e:95:8a:f4:3b:2a:a3:fb:1c:7f:5f:da:8d:4c:4b:d4:37:23:
         c2:51:3e:5c:2c:a6:0d:e4:75:ab:4e:96:b3:ad:64:e2:fe:07:
         c2:58:48:bc:de:a7:48:63:a7:a7:c4:8d:dd:b9:7a:ba:83:e4:
         db:92:b0:8f:a6:90:1c:b1:d3:51:42:7c:c2:3d:fb:b6:28:0b:
         d6:be:53:42:6f:7b:6a:e5:50:52:2c:70:8e:f1:a0:4b:28:4a:
         62:e8:27:ae:33:4c:60:72:43:7c:58:c2:cb:10:d0:ba:cf:dc:
         66:bf:85:3e:00:69:74:60:10:cf:f7:77:e1:eb:d9:07:3a:f3:
         df:a2:3c:9f:e2:02:d3:9f:d8:dc:ab:b7:99:9b:74:f2:b8:b3:
         d7:af:32:65:68:df:88:07:a6:99:1c:0e:dc:c1:98:29:84:e7:
         73:47:14:42:83:2c:a1:ad:a7:fb:73:f2:da:c9:13:22:e4:78:
         08:c7:ed:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2yCoGM0mB8wLevgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk
OGQ2YWJjODItMjBkNC00YjVjLWIwNDktZDI3OWY1Mjc0MjA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVhAKSjmnaGFgFSHs940UCZW+WYsH5m+JkdR
F4IopFlOuGTRmiG599q8Ky6aMV207wFGIbvWIpHSVZD/NdEMjmoqLkZgJJLsRMyZ
MP0ZntLs87HrXf3w3RaCs5cXAahNN2p1wUcfdIEzDgENBBeJ2gyJLq6eoCQOOsB+
EeonbK+mcON+6MSkWeLlpIFomk/8ySMJ9YWq8dk9EsjQZk+ZViiu8LVhnRAoaiY0
2eI/0wAV6Tc/XVSr1d+EAtT6LrMYou2B3pXQddq6xPc2PM3lf8GV+GQ+B+KWOg0z
osdrIQJt1PdNJ8MhdCkLwOCLJHb5hiwb8eTqiDTFlBtB7GC/vwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMMN3MC7xQTkZ/iT92SrMexAKNWjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGM1MjljYTItNmUwYS0z
NmM1LThjYjEtZWUzYjdhMTc3MDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFS8yAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKX0eM8+jurPK+34isXAVNatJB9SYzxwpOWvGltuA80QVfvzNnskdBnF
pG9PQx+YL+D+QsAxSxu6TImZIiHE0owamma2OptBoU6VivQ7KqP7HH9f2o1MS9Q3
I8JRPlwspg3kdatOlrOtZOL+B8JYSLzep0hjp6fEjd25erqD5NuSsI+mkByx01FC
fMI9+7YoC9a+U0Jve2rlUFIscI7xoEsoSmLoJ64zTGByQ3xYwssQ0LrP3Ga/hT4A
aXRgEM/3d+Hr2Qc689+iPJ/iAtOf2Nyrt5mbdPK4s9evMmVo34gHppkcDtzBmCmE
53NHFEKDLKGtp/tz8trJEyLkeAjH7Sw=
-----END CERTIFICATE-----
Generated at Tue Jul 1 18:30:54 2025 by rpki-client