Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36d48c4d-c764-38d5-9469-abbd3dcb2a46.roa
File:                     36d48c4d-c764-38d5-9469-abbd3dcb2a46.roa (raw, json)
Hash identifier:          r06yqm+2B8D+uacFSTKXYflOuorobcZ9nLMN4jg2eUw=
Subject key identifier:   59:AA:3A:E4:C9:56:F8:0A:62:15:C2:48:BB:9E:6F:23:AE:A3:A9:16
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B609CAFF029D14312209AF880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36d48c4d-c764-38d5-9469-abbd3dcb2a46.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        174.213.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:af:f0:29:d1:43:12:20:9a:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=98cd0aaa-352a-4a83-8a5c-dd3445fc91c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:60:82:5a:d7:98:ac:c6:43:87:f0:19:86:f3:
                    bb:4b:e0:21:6d:8e:b9:ef:ed:c0:76:23:b8:07:80:
                    23:17:22:fd:16:c6:ab:67:d2:e2:fd:28:24:e4:b4:
                    6c:1f:fe:8f:c6:81:bc:4c:66:36:6d:1b:4b:74:86:
                    d6:34:fd:d3:eb:39:8a:c7:8c:b2:39:85:7c:db:9c:
                    57:be:38:67:9f:2a:6b:c2:a7:77:61:72:f5:fb:93:
                    ea:a4:b2:d6:0e:4f:b1:9a:da:cb:53:3d:9e:99:fd:
                    86:22:a9:ef:98:dc:76:1c:f0:94:87:0e:e1:6e:6f:
                    81:2a:e1:ae:e6:48:d0:51:fe:77:19:a3:b9:78:43:
                    96:2b:bb:6c:16:fa:39:5c:44:0e:ca:b8:26:48:59:
                    96:05:80:32:75:0f:20:c7:48:5f:a1:71:54:42:6b:
                    0e:ad:91:0d:42:e1:8b:98:61:79:85:5b:5d:9e:b4:
                    66:fc:97:2b:d2:95:b4:b6:1d:3d:c9:55:59:97:e4:
                    1b:08:86:5b:b7:ac:7f:b9:61:d2:e5:9b:38:10:90:
                    92:c0:c8:57:a6:c2:3b:da:b7:78:c6:33:8e:f0:74:
                    68:a2:94:d8:93:30:8b:20:f6:2c:52:da:be:bc:ef:
                    f6:59:bf:da:17:ce:38:cf:c7:73:b1:38:9d:f1:71:
                    0e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AA:3A:E4:C9:56:F8:0A:62:15:C2:48:BB:9E:6F:23:AE:A3:A9:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36d48c4d-c764-38d5-9469-abbd3dcb2a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.213.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:ef:2c:33:d0:c0:b0:d4:6c:b7:3b:02:01:1a:8e:5a:bb:e4:
         0b:58:f6:86:1e:fb:9e:74:c0:68:2a:41:90:d5:b4:53:fd:c7:
         86:24:39:0d:d8:94:eb:82:44:ac:d4:16:5a:c4:59:63:a0:31:
         c3:d1:3f:da:85:f9:a3:17:2b:f8:5c:c0:e9:26:2a:fc:9e:4b:
         13:b0:90:be:4b:bc:4f:f2:5b:bc:e6:74:4d:0e:ec:80:b8:56:
         56:bb:d7:f1:dc:36:ac:a7:f9:86:0e:da:50:13:85:35:ca:e4:
         15:3a:3d:49:c0:37:c7:9d:68:53:9b:81:5b:8e:97:58:c6:c9:
         b4:b7:c7:0a:04:ac:85:eb:22:14:62:72:f2:ab:7e:6b:19:5d:
         8f:78:10:d8:a8:91:d9:ee:2b:a8:84:a9:f3:86:58:3e:44:64:
         52:63:66:82:91:ad:5f:57:7e:fc:0e:02:1b:38:25:da:7b:8d:
         dc:69:48:d9:38:43:6d:c2:bc:9b:a8:aa:65:30:54:e0:1d:10:
         fb:74:bc:82:5b:37:0c:38:fe:44:7f:b5:35:5e:7a:f5:22:b8:
         d7:eb:32:e4:0b:03:f9:46:b3:5f:88:00:f8:b1:6c:4e:15:64:
         40:22:d6:9c:d7:da:6c:84:ff:86:05:5c:7f:e9:bd:d5:ad:67:
         57:f7:79:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnK/wKdFDEiCa+IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk
OThjZDBhYWEtMzUyYS00YTgzLThhNWMtZGQzNDQ1ZmM5MWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmCCWteYrMZDh/AZhvO7S+AhbY657+3AdiO4
B4AjFyL9FsarZ9Li/Sgk5LRsH/6PxoG8TGY2bRtLdIbWNP3T6zmKx4yyOYV825xX
vjhnnyprwqd3YXL1+5PqpLLWDk+xmtrLUz2emf2GIqnvmNx2HPCUhw7hbm+BKuGu
5kjQUf53GaO5eEOWK7tsFvo5XEQOyrgmSFmWBYAydQ8gx0hfoXFUQmsOrZENQuGL
mGF5hVtdnrRm/Jcr0pW0th09yVVZl+QbCIZbt6x/uWHS5Zs4EJCSwMhXpsI72rd4
xjOO8HRoopTYkzCLIPYsUtq+vO/2Wb/aF844z8dzsTid8XEOqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFmqOuTJVvgKYhXCSLuebyOuo6kWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzZkNDhjNGQtYzc2NC0z
OGQ1LTk0NjktYWJiZDNkY2IyYTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrtUoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGvvLDPQwLDUbLc7AgEajlq75AtY9oYe+550wGgqQZDVtFP9x4YkOQ3Y
lOuCRKzUFlrEWWOgMcPRP9qF+aMXK/hcwOkmKvyeSxOwkL5LvE/yW7zmdE0O7IC4
Vla71/HcNqyn+YYO2lAThTXK5BU6PUnAN8edaFObgVuOl1jGybS3xwoErIXrIhRi
cvKrfmsZXY94ENiokdnuK6iEqfOGWD5EZFJjZoKRrV9XfvwOAhs4Jdp7jdxpSNk4
Q23CvJuoqmUwVOAdEPt0vIJbNww4/kR/tTVeevUiuNfrMuQLA/lGs1+IAPixbE4V
ZEAi1pzX2myE/4YFXH/pvdWtZ1f3eYE=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:03:21 2025 by rpki-client