Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f5e8e3ce-2e85-3854-9e18-47d48ac011bf.roa
File:                     f5e8e3ce-2e85-3854-9e18-47d48ac011bf.roa (raw, json)
Hash identifier:          mv660/4NkfgRCK8TOo0xnhxr8BfzcYQs1hZE3PKGC0s=
Subject key identifier:   A6:80:C4:BB:6D:15:0D:DF:58:A1:08:E8:CB:03:17:A2:91:B3:DD:05
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD23C09C6C528A1B5A7EB1E40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f5e8e3ce-2e85-3854-9e18-47d48ac011bf.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     701
IP address blocks:        96.248.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:09:c6:c5:28:a1:b5:a7:eb:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=0c597bc9-2168-404b-98b2-3b4fe08f93db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:06:0a:1f:2c:6d:79:6e:14:11:f0:c3:8c:d9:
                    04:f6:4a:b7:a0:c7:40:83:98:6b:ed:03:03:2e:49:
                    75:65:d3:d1:7e:d6:c9:91:86:aa:0b:ed:ed:24:0f:
                    bc:84:9a:ba:56:fa:00:6c:b0:57:cf:53:ad:45:5e:
                    b9:d2:e2:ab:10:e7:38:d6:88:bf:c7:6e:65:d8:2f:
                    05:64:c7:b0:15:bd:80:4d:f7:e5:da:1c:c4:2e:9a:
                    1a:57:dc:33:be:df:58:22:17:b1:66:71:65:68:33:
                    06:80:c5:dc:4f:2c:0d:c5:1a:5b:81:ba:3f:3f:f1:
                    37:2c:e6:33:41:f2:19:eb:13:c6:3e:7d:91:46:8c:
                    90:67:3e:d2:91:0b:10:ad:7a:03:20:fb:68:f0:0e:
                    40:42:1f:4a:42:75:de:96:5b:ed:05:07:72:4f:d7:
                    fa:47:86:7e:da:77:20:df:9c:c0:7c:e1:ff:9e:d6:
                    8c:55:85:93:da:14:ce:8e:c1:2c:f1:06:3f:e1:9a:
                    e4:52:f0:13:ce:8d:ea:4a:6d:f3:f3:bf:a8:89:71:
                    f4:e8:f8:1c:72:c6:43:77:6b:40:27:f7:6a:35:37:
                    36:1d:68:f1:d8:b6:c4:93:b8:b6:4a:e9:0d:8a:77:
                    a1:6c:04:ed:71:a8:8e:45:67:ff:19:ac:ee:fd:6c:
                    aa:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:80:C4:BB:6D:15:0D:DF:58:A1:08:E8:CB:03:17:A2:91:B3:DD:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f5e8e3ce-2e85-3854-9e18-47d48ac011bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.248.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:76:85:89:49:d2:29:d3:90:07:b1:ed:c4:7a:a4:1a:7d:55:
         67:a4:61:da:5b:0c:d5:fd:5f:5c:44:83:1f:34:ab:38:c1:04:
         07:f0:8e:bb:f8:26:7e:e5:d5:d1:12:f3:a0:7f:21:d9:9d:72:
         1c:ae:84:85:05:27:1d:5f:dd:12:51:0c:21:83:68:18:ce:00:
         9f:2a:2f:7c:b3:09:89:09:98:73:e5:93:83:bd:6b:da:49:d3:
         24:c0:6c:d1:6d:a4:3d:fa:57:83:ed:4a:fe:ec:e0:16:55:6b:
         4c:81:4a:c7:fb:9d:6f:1a:a1:9b:92:28:3d:ff:b4:9c:fd:d6:
         d2:95:e1:25:5a:d5:ba:94:80:52:17:a9:fb:6f:14:40:1c:9d:
         4f:51:b9:e8:bc:78:7e:ae:ab:04:f2:5f:33:b2:1f:98:fa:7a:
         89:3e:c8:cf:52:60:23:5a:ce:70:ac:d7:b4:3b:9c:ec:10:2e:
         3d:5c:7e:98:af:77:82:7e:f8:2b:13:35:55:89:0d:62:64:76:
         51:76:9e:cd:bb:fc:07:a2:f2:fd:5a:fb:f0:69:e3:82:42:b1:
         e8:67:8b:ee:8a:f6:fe:62:9f:54:6c:fd:cc:92:de:85:cf:0c:
         a2:54:67:08:b3:eb:56:4c:b9:63:d6:f9:10:66:a7:ac:80:f1:
         5b:a7:1a:5d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPAnGxSihtafrHkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk
MGM1OTdiYzktMjE2OC00MDRiLTk4YjItM2I0ZmUwOGY5M2RiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQYKHyxteW4UEfDDjNkE9kq3oMdAg5hr7QMD
Lkl1ZdPRftbJkYaqC+3tJA+8hJq6VvoAbLBXz1OtRV650uKrEOc41oi/x25l2C8F
ZMewFb2ATffl2hzELpoaV9wzvt9YIhexZnFlaDMGgMXcTywNxRpbgbo/P/E3LOYz
QfIZ6xPGPn2RRoyQZz7SkQsQrXoDIPto8A5AQh9KQnXellvtBQdyT9f6R4Z+2ncg
35zAfOH/ntaMVYWT2hTOjsEs8QY/4ZrkUvATzo3qSm3z87+oiXH06PgccsZDd2tA
J/dqNTc2HWjx2LbEk7i2SukNinehbATtcaiORWf/Gazu/Wyq3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKaAxLttFQ3fWKEI6MsDF6KRs90FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjVlOGUzY2UtMmU4NS0z
ODU0LTllMTgtNDdkNDhhYzAxMWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYPgAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH92hYlJ0inTkAex7cR6pBp9VWekYdpbDNX9X1xEgx80qzjBBAfwjrv4
Jn7l1dES86B/IdmdchyuhIUFJx1f3RJRDCGDaBjOAJ8qL3yzCYkJmHPlk4O9a9pJ
0yTAbNFtpD36V4PtSv7s4BZVa0yBSsf7nW8aoZuSKD3/tJz91tKV4SVa1bqUgFIX
qftvFEAcnU9Ruei8eH6uqwTyXzOyH5j6eok+yM9SYCNaznCs17Q7nOwQLj1cfpiv
d4J++CsTNVWJDWJkdlF2ns27/Aei8v1a+/Bp44JCsehni+6K9v5in1Rs/cyS3oXP
DKJUZwiz61ZMuWPW+RBmp6yA8VunGl0=
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:27:41 2025 by rpki-client