Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/05862552-71ba-33da-9cb6-f4ba57a1363d.roa
File:                     05862552-71ba-33da-9cb6-f4ba57a1363d.roa (raw, json)
Hash identifier:          D+tTx8iT31TGgkO7zQRrtANO2QuzyUhX5jEG6z2/zuI=
Subject key identifier:   28:DD:C5:1B:44:21:34:0C:FD:B7:84:54:D7:5A:E3:7B:C7:24:E8:02
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B60BF8C0085A6CAE8F1CA8540
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/05862552-71ba-33da-9cb6-f4ba57a1363d.roa
Signing time:             Wed 01 Oct 2025 14:11:15 +0000
ROA not before:           Wed 01 Oct 2025 14:11:15 +0000
ROA not after:            Tue 30 Dec 2025 15:11:15 +0000
asID:                     6167
IP address blocks:        97.204.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:bf:8c:00:85:a6:ca:e8:f1:ca:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 14:11:15 2025 GMT
            Not After : Dec 30 15:11:15 2025 GMT
        Subject: CN=5eb72f5f-85ce-4004-bf1e-7b3dd45602eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8a:70:f8:0d:64:c9:f8:f0:48:7a:e7:c7:37:
                    d3:29:ac:c5:d5:e5:7e:c3:8f:70:7e:b0:dd:c6:fc:
                    8e:b3:7a:d2:98:d8:e6:42:f9:ea:dd:cd:d3:31:b3:
                    f6:6f:e7:34:b4:ea:89:64:84:52:9a:4a:23:38:0a:
                    c7:3e:2b:21:7b:4c:17:ac:16:eb:dc:06:80:40:06:
                    b5:74:6e:8b:af:6d:6c:08:18:25:bc:6f:a2:f0:a5:
                    ad:00:4f:61:fe:a5:93:70:e3:be:40:ab:40:d8:65:
                    bf:95:a1:c6:ef:e5:be:16:f3:06:2c:46:88:11:be:
                    df:88:1a:c0:ed:5a:58:73:12:ec:7c:03:b9:36:9e:
                    d6:ec:4a:a8:0e:0c:91:40:ac:b4:08:7f:29:92:89:
                    29:d0:b1:d3:38:6f:13:d0:a3:ad:f1:95:02:41:08:
                    78:f6:4a:bb:9d:d0:c7:31:1f:d2:1f:0f:6b:92:36:
                    d2:d7:d2:eb:ea:f6:f9:0e:86:09:4f:f6:0a:b5:1e:
                    d0:a1:30:3a:06:b3:5e:b9:8e:dd:6c:d5:56:03:c2:
                    ea:ea:d0:d9:c9:7f:5b:e6:01:12:89:e0:ed:66:f7:
                    b4:4f:7f:99:08:32:0f:aa:b6:91:be:8a:20:90:ce:
                    5c:e0:f2:95:31:3b:21:48:37:9b:f3:b4:c9:a9:4e:
                    8c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DD:C5:1B:44:21:34:0C:FD:B7:84:54:D7:5A:E3:7B:C7:24:E8:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/05862552-71ba-33da-9cb6-f4ba57a1363d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.204.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:38:67:a9:eb:55:48:f9:94:ba:0c:08:40:c1:f5:6c:39:00:
         2e:d0:18:a4:51:50:c7:fe:77:07:0d:f3:4d:43:8f:00:bd:f9:
         20:75:d7:af:b7:0e:0b:22:84:3b:8a:04:89:53:f9:1e:75:2f:
         d9:8e:ab:a3:0f:ec:70:f3:b3:69:db:ec:b5:52:2e:35:93:fc:
         a6:4d:e5:1d:10:a5:de:8c:17:18:1d:e2:52:e0:97:9a:f3:bc:
         06:8f:1e:ac:88:28:80:d9:2c:f8:76:d1:8d:6e:59:a9:4e:4d:
         75:53:3d:76:54:ca:50:9c:7d:ec:49:8b:40:18:80:b3:71:00:
         bb:9f:c3:33:33:c8:39:94:09:7f:6f:6c:36:6f:37:43:22:d0:
         42:15:a1:16:36:9e:a3:c1:bf:d7:36:cf:53:30:d3:cd:fc:bf:
         85:3b:4c:97:55:28:40:d6:b6:68:e3:cf:ed:2e:bd:e2:9a:62:
         03:09:63:ad:1c:e3:39:c7:44:df:4e:c5:cb:4f:45:fc:eb:46:
         05:99:ba:8f:ec:68:51:ab:37:c3:f8:54:ab:05:13:83:69:85:
         7b:40:27:ac:6b:a3:41:0e:43:a4:77:33:ab:11:33:5e:63:4e:
         42:3a:47:ad:4b:15:a8:08:da:02:c9:b5:73:ed:ad:f8:bc:3b:
         2d:b6:59:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgv4wAhabK6PHKhUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAwMTE0MTExNVoXDTI1MTIzMDE1MTExNVowLzEtMCsGA1UEAxMk
NWViNzJmNWYtODVjZS00MDA0LWJmMWUtN2IzZGQ0NTYwMmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIpw+A1kyfjwSHrnxzfTKazF1eV+w49wfrDd
xvyOs3rSmNjmQvnq3c3TMbP2b+c0tOqJZIRSmkojOArHPishe0wXrBbr3AaAQAa1
dG6Lr21sCBglvG+i8KWtAE9h/qWTcOO+QKtA2GW/laHG7+W+FvMGLEaIEb7fiBrA
7VpYcxLsfAO5Np7W7EqoDgyRQKy0CH8pkokp0LHTOG8T0KOt8ZUCQQh49kq7ndDH
MR/SHw9rkjbS19Lr6vb5DoYJT/YKtR7QoTA6BrNeuY7dbNVWA8Lq6tDZyX9b5gES
ieDtZve0T3+ZCDIPqraRvoogkM5c4PKVMTshSDeb87TJqU6M6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCjdxRtEITQM/beEVNda43vHJOgCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDU4NjI1NTItNzFiYS0z
M2RhLTljYjYtZjRiYTU3YTEzNjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYcwoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADI4Z6nrVUj5lLoMCEDB9Ww5AC7QGKRRUMf+dwcN801DjwC9+SB116+3
DgsihDuKBIlT+R51L9mOq6MP7HDzs2nb7LVSLjWT/KZN5R0Qpd6MFxgd4lLgl5rz
vAaPHqyIKIDZLPh20Y1uWalOTXVTPXZUylCcfexJi0AYgLNxALufwzMzyDmUCX9v
bDZvN0Mi0EIVoRY2nqPBv9c2z1Mw0838v4U7TJdVKEDWtmjjz+0uveKaYgMJY60c
4znHRN9OxctPRfzrRgWZuo/saFGrN8P4VKsFE4NphXtAJ6xro0EOQ6R3M6sRM15j
TkI6R61LFagI2gLJtXPtrfi8Oy22WZU=
-----END CERTIFICATE-----
Generated at Fri Oct 10 17:47:26 2025 by rpki-client