Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04d54ba6-ab61-33d5-943c-049c76a41afa.roa
File:                     04d54ba6-ab61-33d5-943c-049c76a41afa.roa (raw, json)
Hash identifier:          hh0wbZpCcWbMq1+xg+3H76NmD4BGHjSvV2KpQxzeA5I=
Subject key identifier:   F7:25:0A:5C:73:27:D6:1E:7C:DE:39:AF:EE:FB:82:39:4E:31:02:C6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B609C99730C911D9C04090CC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04d54ba6-ab61-33d5-943c-049c76a41afa.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        174.203.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:99:73:0c:91:1d:9c:04:09:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=abadeccd-9d7e-42e9-b7d4-435722fc54f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:71:2d:e3:f6:d0:f6:12:3b:8c:47:c1:3d:de:
                    e8:7b:62:a5:6c:60:4f:02:81:0d:e8:cf:e0:76:bd:
                    2a:ef:0c:7e:36:b2:d8:0f:6f:94:b2:88:98:ab:9d:
                    97:f7:12:7c:a2:c7:05:da:1a:31:32:de:1f:aa:b4:
                    0b:50:a4:d8:38:a4:80:44:07:61:8f:09:6c:b3:36:
                    98:0e:ab:d8:ad:84:a9:19:a8:39:38:9e:4f:8b:36:
                    2b:5a:ea:fa:80:6f:67:c5:33:92:79:c3:1a:3b:21:
                    3f:64:40:61:be:71:99:68:c6:15:2a:7b:5a:9e:ea:
                    84:6c:c6:2c:1e:c0:d0:e8:de:3d:0f:cd:96:fa:ad:
                    e2:dc:17:8e:a5:46:1d:ff:6d:75:31:0c:61:42:ca:
                    ee:e2:85:dc:37:f0:a2:a4:bb:ad:45:05:2a:97:1d:
                    a9:83:26:31:0c:a3:94:c8:fc:be:ae:72:77:7a:92:
                    1a:99:1e:24:83:a1:cd:21:ff:24:6a:9b:db:3c:64:
                    c2:50:a9:bf:6e:8a:96:ad:0e:7a:6f:10:cf:1c:23:
                    a2:3e:46:75:15:fe:93:a2:d7:38:76:ac:2f:bc:45:
                    82:b6:d6:35:5b:42:59:ac:0a:44:e6:da:70:34:25:
                    1e:d9:2e:d7:f1:66:71:05:8b:b4:23:c9:73:3d:60:
                    09:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:25:0A:5C:73:27:D6:1E:7C:DE:39:AF:EE:FB:82:39:4E:31:02:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04d54ba6-ab61-33d5-943c-049c76a41afa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.203.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:94:24:7a:ff:27:33:82:d8:b9:89:b4:39:45:14:8d:ec:37:
         be:50:56:2f:80:26:97:60:26:19:96:e0:d5:5a:6e:25:79:3e:
         13:7e:db:aa:9b:4f:87:33:2c:79:bd:ca:c4:9d:36:64:ca:35:
         4b:21:e6:f8:40:7a:67:81:aa:e4:ff:07:92:3a:65:35:90:75:
         78:77:43:c3:fe:17:e7:49:de:68:28:89:a0:45:94:ae:ad:aa:
         09:77:7e:e2:6a:d1:a6:6d:2f:d8:cf:26:14:6b:e3:5c:73:a3:
         72:f9:ee:11:ee:54:ca:3c:31:73:a4:eb:6d:97:c3:37:e3:e4:
         16:1d:06:bf:f2:be:a6:45:7d:fd:af:c7:c6:23:84:44:15:32:
         82:30:18:a4:a4:ad:77:53:f2:3c:ff:13:44:53:2b:54:65:da:
         ec:11:95:1d:ca:16:7f:97:82:22:5c:a0:e3:db:32:f8:76:e2:
         19:a2:20:33:a1:c2:f0:05:d9:f6:32:04:4c:75:b2:f0:3a:02:
         18:73:08:29:e6:f1:56:87:f9:91:bf:7d:75:05:dd:9c:38:a3:
         71:93:16:e9:0a:07:20:ce:0b:ae:51:e5:52:b8:c7:2d:7e:aa:
         d6:e4:99:79:f4:0c:c9:00:22:81:f7:17:af:01:96:a1:15:c6:
         03:d1:07:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJlzDJEdnAQJDMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk
YWJhZGVjY2QtOWQ3ZS00MmU5LWI3ZDQtNDM1NzIyZmM1NGY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3Et4/bQ9hI7jEfBPd7oe2KlbGBPAoEN6M/g
dr0q7wx+NrLYD2+UsoiYq52X9xJ8oscF2hoxMt4fqrQLUKTYOKSARAdhjwlsszaY
DqvYrYSpGag5OJ5PizYrWur6gG9nxTOSecMaOyE/ZEBhvnGZaMYVKntanuqEbMYs
HsDQ6N49D82W+q3i3BeOpUYd/211MQxhQsru4oXcN/CipLutRQUqlx2pgyYxDKOU
yPy+rnJ3epIamR4kg6HNIf8kapvbPGTCUKm/boqWrQ56bxDPHCOiPkZ1Ff6Totc4
dqwvvEWCttY1W0JZrApE5tpwNCUe2S7X8WZxBYu0I8lzPWAJZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPclClxzJ9YefN45r+77gjlOMQLGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDRkNTRiYTYtYWI2MS0z
M2Q1LTk0M2MtMDQ5Yzc2YTQxYWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrsuAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJmUJHr/JzOC2LmJtDlFFI3sN75QVi+AJpdgJhmW4NVabiV5PhN+26qb
T4czLHm9ysSdNmTKNUsh5vhAemeBquT/B5I6ZTWQdXh3Q8P+F+dJ3mgoiaBFlK6t
qgl3fuJq0aZtL9jPJhRr41xzo3L57hHuVMo8MXOk622Xwzfj5BYdBr/yvqZFff2v
x8YjhEQVMoIwGKSkrXdT8jz/E0RTK1Rl2uwRlR3KFn+XgiJcoOPbMvh24hmiIDOh
wvAF2fYyBEx1svA6AhhzCCnm8VaH+ZG/fXUF3Zw4o3GTFukKByDOC65R5VK4xy1+
qtbkmXn0DMkAIoH3F68BlqEVxgPRByY=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:04:29 2025 by rpki-client