Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9242bcd2-f6ce-312e-a10b-cb2e21320429.roa
File:                     9242bcd2-f6ce-312e-a10b-cb2e21320429.roa (raw, json)
Hash identifier:          FR3Fux4a5ITdsOJYRDN8/5GV54Zr4USboR/EB3zEYUc=
Subject key identifier:   43:A7:8C:7B:00:38:E2:B9:B7:88:F5:0A:ED:2E:BB:4F:73:04:B7:E3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B249701ECF4399A89771B0000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9242bcd2-f6ce-312e-a10b-cb2e21320429.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.248.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:97:01:ec:f4:39:9a:89:77:1b:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=628fbb1f-4250-488c-8c06-24123d9c458d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b9:40:5e:fb:32:0f:79:ab:d8:0a:ee:49:05:
                    fb:3d:70:9b:50:fc:cb:f1:33:43:6f:b3:a1:02:a8:
                    d5:0f:fa:cf:08:87:a8:ba:dd:0d:96:10:f0:bb:ad:
                    23:c6:c0:c1:6b:49:ee:c0:21:cc:58:3f:ab:0b:95:
                    9c:02:a1:19:ac:30:b1:f5:c4:a4:2e:69:ee:26:59:
                    2f:9c:ef:7e:c0:72:7f:44:ba:73:99:db:47:68:5c:
                    47:61:4e:65:a4:23:bf:e6:d0:e8:79:63:4b:40:1a:
                    39:48:4d:15:07:9f:e5:e3:b1:c4:f9:cb:7d:49:5b:
                    66:52:a2:c0:e3:bd:46:7f:fa:eb:23:a1:98:61:93:
                    3a:0b:d2:da:c9:0d:25:ce:7c:b4:b4:ca:66:39:68:
                    a5:ac:47:73:9d:df:a8:21:7f:47:0d:e9:c8:18:a8:
                    fd:74:5c:8e:7d:2d:2f:a9:8a:e3:d9:17:ef:72:02:
                    fc:f6:3d:9f:fc:ef:ca:07:69:89:cc:b1:bf:65:5d:
                    99:c7:bc:3c:d3:d1:b2:75:fa:a1:d0:09:c3:e9:ad:
                    1a:69:91:c1:16:d8:95:31:67:10:5a:97:79:96:2e:
                    bc:0a:16:90:ad:48:81:e3:b5:66:68:d1:5b:f7:32:
                    1f:5a:5d:3e:7a:e2:d5:9c:a3:19:97:06:7b:b9:74:
                    15:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A7:8C:7B:00:38:E2:B9:B7:88:F5:0A:ED:2E:BB:4F:73:04:B7:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9242bcd2-f6ce-312e-a10b-cb2e21320429.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.248.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:56:9a:38:ee:e5:7f:41:9d:97:6c:3a:37:de:0c:0d:db:be:
         9b:ea:b8:c2:ca:90:47:e9:b2:7e:8c:97:a7:cb:b5:34:94:1a:
         e9:d3:95:38:36:38:45:d1:bf:69:61:c2:1b:b2:68:89:d9:e8:
         36:9d:db:97:59:ae:ac:e6:38:74:d9:ff:74:d6:ba:83:e1:86:
         03:0f:4d:c7:fa:04:c9:63:fc:50:0e:d8:23:05:44:5a:1c:77:
         8e:72:77:aa:0a:30:3f:38:28:14:13:cc:ae:0f:05:53:5a:52:
         c9:49:74:dd:87:bd:6b:f0:22:47:7b:22:4d:27:16:72:8f:ec:
         a1:01:db:71:fd:5c:d4:c2:97:a9:2b:7c:0a:ea:73:89:19:3e:
         d7:a5:25:57:ed:f7:5f:d5:02:c9:99:11:52:60:93:87:7c:1b:
         c5:35:2c:19:e3:5c:2a:65:cc:f5:9d:c1:15:52:b2:ce:cd:8f:
         42:62:cd:56:e4:19:0f:55:cb:6c:4d:33:18:ad:bd:77:1f:7e:
         36:39:f7:06:d6:fe:01:e7:ff:50:8e:25:0d:49:c8:fd:de:2f:
         f9:3f:8c:44:6e:65:be:36:57:6d:f3:a9:9f:10:85:66:5f:72:
         86:d5:83:95:11:26:d6:31:f0:7a:ba:29:19:93:2a:18:53:cb:
         4e:6c:17:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklwHs9DmaiXcbAAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk
NjI4ZmJiMWYtNDI1MC00ODhjLThjMDYtMjQxMjNkOWM0NThkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7lAXvsyD3mr2AruSQX7PXCbUPzL8TNDb7Oh
AqjVD/rPCIeout0NlhDwu60jxsDBa0nuwCHMWD+rC5WcAqEZrDCx9cSkLmnuJlkv
nO9+wHJ/RLpzmdtHaFxHYU5lpCO/5tDoeWNLQBo5SE0VB5/l47HE+ct9SVtmUqLA
471Gf/rrI6GYYZM6C9LayQ0lzny0tMpmOWilrEdznd+oIX9HDenIGKj9dFyOfS0v
qYrj2RfvcgL89j2f/O/KB2mJzLG/ZV2Zx7w809Gydfqh0AnD6a0aaZHBFtiVMWcQ
Wpd5li68ChaQrUiB47VmaNFb9zIfWl0+euLVnKMZlwZ7uXQV0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEOnjHsAOOK5t4j1Cu0uu09zBLfjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTI0MmJjZDItZjZjZS0z
MTJlLWExMGItY2IyZTIxMzIwNDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFS/ggMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADtWmjju5X9BnZdsOjfeDA3bvpvquMLKkEfpsn6Ml6fLtTSUGunTlTg2
OEXRv2lhwhuyaInZ6Dad25dZrqzmOHTZ/3TWuoPhhgMPTcf6BMlj/FAO2CMFRFoc
d45yd6oKMD84KBQTzK4PBVNaUslJdN2HvWvwIkd7Ik0nFnKP7KEB23H9XNTCl6kr
fArqc4kZPtelJVft91/VAsmZEVJgk4d8G8U1LBnjXCplzPWdwRVSss7Nj0JizVbk
GQ9Vy2xNMxitvXcffjY59wbW/gHn/1COJQ1JyP3eL/k/jERuZb42V23zqZ8QhWZf
cobVg5URJtYx8Hq6KRmTKhhTy05sF8s=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:01:34 2025 by rpki-client