Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e597ed8-1133-30fc-9c90-45370bf74602.roa
File:                     1e597ed8-1133-30fc-9c90-45370bf74602.roa (raw, json)
Hash identifier:          JNryQjF2sAQnd+xoazhGibHLz5uO3nrsWv4CujlNUOk=
Subject key identifier:   80:B5:46:E0:4D:DC:41:51:BE:AD:69:78:CA:04:8C:2F:44:90:0C:BE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C3710316EE14F146DBFA208
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e597ed8-1133-30fc-9c90-45370bf74602.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     701
IP address blocks:        151.201.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:10:31:6e:e1:4f:14:6d:bf:a2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=0888b8b2-8f88-4ffa-99d7-713002476338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:60:c0:2f:c4:05:ea:46:34:73:02:27:b0:15:
                    e5:73:0e:bd:4b:0e:77:ce:a1:7e:0d:64:6f:a0:9b:
                    8e:63:c4:6a:70:77:a6:99:16:dd:f1:c9:8d:77:6f:
                    66:b0:5e:29:d2:62:55:8c:86:b4:e7:5d:61:9d:21:
                    5a:25:3a:aa:fe:03:8e:12:0e:3c:ad:91:f8:17:18:
                    a7:8e:c1:b8:85:0d:4c:e3:07:5d:be:8c:f9:d3:20:
                    88:c4:02:96:aa:81:5a:db:3b:50:82:51:4d:ca:4d:
                    5d:3b:dd:6b:f9:95:8d:5b:a8:47:4e:ee:89:c5:5c:
                    69:cd:89:f1:7f:8b:20:72:97:84:6e:83:54:7f:62:
                    a4:41:a6:91:f1:e8:de:11:02:14:8b:17:f4:d1:4f:
                    94:3b:ae:92:d2:7c:d6:d3:57:90:44:d8:b3:1e:ad:
                    fd:17:cb:6a:55:ce:1d:27:17:eb:ac:67:3e:25:17:
                    44:ff:98:8a:d4:92:96:85:be:0d:43:f6:a6:51:15:
                    ef:dc:24:26:33:9c:73:fd:4e:8b:5a:6e:b7:5d:92:
                    86:cc:fe:5f:91:13:1b:44:3a:28:d9:13:60:07:20:
                    69:db:e3:ff:c3:79:9a:96:9a:1a:44:4b:20:c6:43:
                    82:b4:73:15:99:c3:78:52:73:83:5a:3c:50:e3:f6:
                    56:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B5:46:E0:4D:DC:41:51:BE:AD:69:78:CA:04:8C:2F:44:90:0C:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e597ed8-1133-30fc-9c90-45370bf74602.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.201.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:97:e4:37:4a:62:76:15:22:17:0c:b8:56:79:7c:55:85:b5:
         75:21:82:b6:d1:e2:f2:94:ec:58:82:8d:9e:b3:54:67:ba:cc:
         95:a6:d0:ed:2d:75:a9:e7:24:0b:5f:8d:6c:89:e5:cc:8b:9e:
         b2:21:f5:d5:ca:56:90:a3:48:8e:d0:80:4e:c5:c0:5c:3b:24:
         f3:7e:f7:5a:26:07:f1:58:4b:e8:d3:1a:c5:8c:45:fd:99:e3:
         5c:60:01:19:65:e4:43:79:ec:f1:7d:f5:32:96:86:eb:0d:6d:
         b2:ef:f8:0b:56:07:57:7f:50:a4:90:70:e1:c1:c2:15:3f:41:
         6d:4a:02:78:04:ff:3c:ad:13:06:a6:4b:7e:b8:33:df:a4:c8:
         01:97:fb:67:87:bc:35:8f:09:db:54:e7:53:2f:4b:a9:09:e4:
         98:d3:bc:b5:58:d4:0c:ff:62:7e:ce:72:df:33:dc:ab:88:4f:
         fb:de:e2:c4:21:33:ec:f9:2e:ea:64:19:f0:02:a0:61:06:f2:
         e8:7c:8c:78:e9:09:40:fb:92:37:42:84:ea:3a:36:fa:a0:3d:
         a3:f7:58:9c:25:5e:2d:9b:61:87:cf:8f:62:19:a3:87:0e:0b:
         13:a3:58:16:2d:a0:68:2c:f0:bf:f2:0c:97:08:54:45:a0:35:
         c8:d5:32:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNxAxbuFPFG2/oggwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
MDg4OGI4YjItOGY4OC00ZmZhLTk5ZDctNzEzMDAyNDc2MzM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmDAL8QF6kY0cwInsBXlcw69Sw53zqF+DWRv
oJuOY8RqcHemmRbd8cmNd29msF4p0mJVjIa0511hnSFaJTqq/gOOEg48rZH4Fxin
jsG4hQ1M4wddvoz50yCIxAKWqoFa2ztQglFNyk1dO91r+ZWNW6hHTu6JxVxpzYnx
f4sgcpeEboNUf2KkQaaR8ejeEQIUixf00U+UO66S0nzW01eQRNizHq39F8tqVc4d
JxfrrGc+JRdE/5iK1JKWhb4NQ/amURXv3CQmM5xz/U6LWm63XZKGzP5fkRMbRDoo
2RNgByBp2+P/w3malpoaREsgxkOCtHMVmcN4UnODWjxQ4/ZWlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIC1RuBN3EFRvq1peMoEjC9EkAy+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWU1OTdlZDgtMTEzMy0z
MGZjLTljOTAtNDUzNzBiZjc0NjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEl8mAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKSX5DdKYnYVIhcMuFZ5fFWFtXUhgrbR4vKU7FiCjZ6zVGe6zJWm0O0t
dannJAtfjWyJ5cyLnrIh9dXKVpCjSI7QgE7FwFw7JPN+91omB/FYS+jTGsWMRf2Z
41xgARll5EN57PF99TKWhusNbbLv+AtWB1d/UKSQcOHBwhU/QW1KAngE/zytEwam
S364M9+kyAGX+2eHvDWPCdtU51MvS6kJ5JjTvLVY1Az/Yn7Oct8z3KuIT/ve4sQh
M+z5LupkGfACoGEG8uh8jHjpCUD7kjdChOo6NvqgPaP3WJwlXi2bYYfPj2IZo4cO
CxOjWBYtoGgs8L/yDJcIVEWgNcjVMlQ=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:10:47 2025 by rpki-client