Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/12d70704-998a-3c1b-8762-ea87d529eb81.roa
File:                     12d70704-998a-3c1b-8762-ea87d529eb81.roa (raw, json)
Hash identifier:          +xSdlvgCyAt6BthE+bSJYq0gTkYG52DBJpCsDX5wrSg=
Subject key identifier:   29:CC:C8:F4:CB:67:EF:7F:95:7B:5B:55:A1:DB:F8:40:39:26:3C:05
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36D7076F5A2A231F640940
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/12d70704-998a-3c1b-8762-ea87d529eb81.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     54396
IP address blocks:        205.197.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:d7:07:6f:5a:2a:23:1f:64:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=ebccedbd-0b32-4d79-8cb6-3463e90c09c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3d:6e:03:b4:13:4e:9a:26:0e:dd:6d:32:a5:
                    26:69:3d:6f:dc:51:cf:f5:36:66:30:8e:f9:4c:4a:
                    44:b5:4f:91:e8:0b:49:ce:ec:ae:0b:37:0a:ac:83:
                    16:41:2d:2a:40:bf:06:57:cf:86:12:aa:81:8c:8c:
                    76:1f:bc:2d:d3:08:85:1b:d1:7b:ce:d3:98:07:14:
                    11:c9:85:fe:ac:e4:c2:b2:0b:2b:c4:cb:d8:7f:00:
                    50:55:28:e5:da:ff:6f:a6:6d:39:fa:ea:15:63:4a:
                    c3:10:69:bf:87:0b:77:9d:ce:29:af:84:b9:b6:26:
                    3a:43:c0:03:50:09:d4:ba:86:b0:8a:46:1c:17:e1:
                    ca:4e:af:e3:a4:97:93:cf:6d:ac:5c:fa:c6:59:eb:
                    a6:70:e0:a7:5d:1b:8a:da:a4:47:e6:84:f8:b0:39:
                    dd:bc:1d:8e:8b:af:4a:b4:ca:0a:5a:be:2a:43:06:
                    7e:96:61:88:8d:36:42:3b:b5:e9:a9:6e:06:03:7a:
                    0a:0f:82:c7:f6:2f:a0:59:d5:81:16:6a:3c:86:6f:
                    84:26:b3:68:a2:28:5f:b0:8d:30:db:c6:fa:fc:08:
                    56:5b:b1:94:51:5b:36:2c:05:06:15:e5:12:ab:f3:
                    50:81:38:42:73:0c:ff:01:73:94:5a:27:ad:fc:3a:
                    33:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CC:C8:F4:CB:67:EF:7F:95:7B:5B:55:A1:DB:F8:40:39:26:3C:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/12d70704-998a-3c1b-8762-ea87d529eb81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.197.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:b3:00:1a:33:10:4e:ac:2a:2e:06:2f:81:d9:46:42:82:59:
         c3:56:fc:47:79:b6:32:d4:08:ad:07:15:e7:7f:33:e4:08:04:
         68:3d:88:86:cf:6d:49:05:bb:bf:a4:b0:35:5e:82:6f:6b:1f:
         62:f6:f7:7b:be:0f:d1:65:f6:9f:07:cd:49:b3:19:f5:64:69:
         08:2b:0e:9c:80:1d:03:24:81:fd:24:06:b3:d4:6b:c9:6e:fa:
         30:be:48:3a:3f:95:53:02:db:d5:24:3e:32:f9:9d:57:5c:c4:
         c0:8f:2a:cc:1c:da:37:19:18:34:45:06:50:75:d1:b1:52:a6:
         f7:7c:f9:18:63:fe:05:94:05:41:7b:c4:5e:7a:1c:be:3d:f2:
         a0:27:b7:39:40:76:2e:6d:f9:af:aa:ea:42:3f:4c:de:5e:ce:
         3b:db:d2:25:ab:47:22:3c:6b:da:2b:f6:5d:b5:f9:e2:78:b9:
         ce:1b:d0:03:4f:b0:64:a9:ad:3b:8e:71:11:58:ec:2a:4d:e7:
         9e:11:84:70:88:f8:fd:93:22:25:81:09:8e:16:09:0b:53:55:
         85:8a:9a:66:4d:fc:0a:d6:df:fc:b6:c0:b0:56:0f:18:85:0e:
         0c:de:25:2a:28:f2:58:91:fc:88:66:b9:3e:a9:eb:21:d7:bd:
         11:33:10:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNtcHb1oqIx9kCUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
ZWJjY2VkYmQtMGIzMi00ZDc5LThjYjYtMzQ2M2U5MGMwOWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT1uA7QTTpomDt1tMqUmaT1v3FHP9TZmMI75
TEpEtU+R6AtJzuyuCzcKrIMWQS0qQL8GV8+GEqqBjIx2H7wt0wiFG9F7ztOYBxQR
yYX+rOTCsgsrxMvYfwBQVSjl2v9vpm05+uoVY0rDEGm/hwt3nc4pr4S5tiY6Q8AD
UAnUuoawikYcF+HKTq/jpJeTz22sXPrGWeumcOCnXRuK2qRH5oT4sDndvB2Oi69K
tMoKWr4qQwZ+lmGIjTZCO7XpqW4GA3oKD4LH9i+gWdWBFmo8hm+EJrNooihfsI0w
28b6/AhWW7GUUVs2LAUGFeUSq/NQgThCcwz/AXOUWiet/DozUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCnMyPTLZ+9/lXtbVaHb+EA5JjwFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTJkNzA3MDQtOTk4YS0z
YzFiLTg3NjItZWE4N2Q1MjllYjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzcXAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADSzABozEE6sKi4GL4HZRkKCWcNW/Ed5tjLUCK0HFed/M+QIBGg9iIbP
bUkFu7+ksDVegm9rH2L293u+D9Fl9p8HzUmzGfVkaQgrDpyAHQMkgf0kBrPUa8lu
+jC+SDo/lVMC29UkPjL5nVdcxMCPKswc2jcZGDRFBlB10bFSpvd8+Rhj/gWUBUF7
xF56HL498qAntzlAdi5t+a+q6kI/TN5ezjvb0iWrRyI8a9or9l21+eJ4uc4b0ANP
sGSprTuOcRFY7CpN554RhHCI+P2TIiWBCY4WCQtTVYWKmmZN/ArW3/y2wLBWDxiF
DgzeJSoo8liR/IhmuT6p6yHXvREzEJM=
-----END CERTIFICATE-----
Generated at Sat Oct 11 00:19:07 2025 by rpki-client