Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b06d194a-1d53-37ec-9e84-bb6ae3f51d08.roa
File:                     b06d194a-1d53-37ec-9e84-bb6ae3f51d08.roa (raw, json)
Hash identifier:          uCucBaT89E37Hn2QDAoDROiPG/nDy9C68eNFPYmxYJg=
Subject key identifier:   02:FF:60:FE:EA:D2:E0:B2:51:3E:54:45:57:17:00:F4:0D:50:00:52
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2496DEE60E71524F81EC4880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b06d194a-1d53-37ec-9e84-bb6ae3f51d08.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.224.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:de:e6:0e:71:52:4f:81:ec:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=6cbce501-bb29-4060-9e97-2be6cb0eb7e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6a:4d:87:2d:9a:c7:8b:97:16:e0:22:97:04:
                    7c:43:2b:f1:82:75:79:69:73:7b:1e:42:5f:7d:69:
                    ac:4b:63:c1:9d:c8:ce:d6:5f:11:5c:41:f4:84:50:
                    77:14:a9:08:a5:59:f1:22:b5:e6:a0:99:43:af:38:
                    c6:54:cf:b7:02:2d:0b:df:f0:8f:43:cc:2f:1b:29:
                    9e:ec:6b:06:b0:a5:72:56:d8:7f:11:14:8f:42:a6:
                    cb:77:a0:7f:d7:2a:58:b5:9b:34:3a:fb:48:65:21:
                    ea:b8:02:8a:36:a8:5a:57:e5:95:35:ec:93:55:97:
                    0a:7a:a1:d4:1c:ea:e2:77:71:1c:18:bc:8a:3a:f7:
                    03:b9:61:7c:ea:1e:ae:1d:d8:ad:60:12:7f:32:4f:
                    75:1f:03:e5:8c:9f:8c:39:eb:9f:cd:4b:f8:d1:5e:
                    ee:70:6f:f9:ca:2f:c1:99:b6:d7:09:10:9e:d0:ea:
                    66:06:fd:e1:f1:25:77:30:3d:b4:c3:05:3a:32:8f:
                    f0:d4:62:22:c1:3b:e4:5f:66:1b:0d:67:4e:e7:9f:
                    13:00:5f:d2:69:90:3e:a6:0e:47:e7:73:5e:ce:b9:
                    ab:5f:42:fc:10:fc:fe:60:64:28:f2:fd:a5:7e:d2:
                    ce:d9:a4:ef:00:d6:5b:ee:69:17:d1:bc:70:34:51:
                    95:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FF:60:FE:EA:D2:E0:B2:51:3E:54:45:57:17:00:F4:0D:50:00:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b06d194a-1d53-37ec-9e84-bb6ae3f51d08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.224.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:74:86:0f:64:53:e4:83:8d:e3:c9:18:b0:86:49:81:cf:97:
         41:dd:3c:0a:99:3d:41:64:41:51:c0:1e:e6:39:c3:5b:dd:26:
         98:38:29:dd:ad:50:4a:74:fc:a4:e0:78:24:b3:ec:53:87:51:
         f9:33:0f:45:3c:bf:b6:27:ee:e2:c9:7b:80:1a:09:69:1b:8b:
         8f:a1:a5:c0:29:1b:24:d0:11:f7:fc:3e:2d:8c:53:8a:37:01:
         07:de:1f:1d:63:88:e3:39:16:84:06:a4:70:4e:ea:4b:ff:37:
         d0:ff:4b:be:0c:3c:7c:a9:a3:7c:44:fc:15:da:ad:68:8c:87:
         d3:5d:0f:5c:79:32:b4:54:7b:5a:ef:02:7c:7c:3a:d6:e7:5d:
         5e:0b:9e:40:ac:cc:6f:8d:e5:75:d7:0a:f0:38:2e:89:b9:ad:
         4b:7a:c4:49:61:47:22:00:93:d2:7b:6f:90:af:ec:96:07:7a:
         46:06:cc:af:9f:84:06:e6:dc:c2:93:20:c4:62:08:e7:9b:27:
         76:dc:60:57:9e:a8:ec:7b:3f:a6:81:64:77:e9:fa:a4:51:7a:
         d9:15:48:fc:2c:cf:75:a7:06:cb:0d:53:92:2b:95:d2:5f:8b:
         2f:b7:61:79:4a:ce:ea:40:f0:92:3d:04:01:d0:a3:fe:7e:ac:
         b6:00:93:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklt7mDnFST4HsSIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk
NmNiY2U1MDEtYmIyOS00MDYwLTllOTctMmJlNmNiMGViN2U3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2pNhy2ax4uXFuAilwR8QyvxgnV5aXN7HkJf
fWmsS2PBncjO1l8RXEH0hFB3FKkIpVnxIrXmoJlDrzjGVM+3Ai0L3/CPQ8wvGyme
7GsGsKVyVth/ERSPQqbLd6B/1ypYtZs0OvtIZSHquAKKNqhaV+WVNeyTVZcKeqHU
HOrid3EcGLyKOvcDuWF86h6uHditYBJ/Mk91HwPljJ+MOeufzUv40V7ucG/5yi/B
mbbXCRCe0OpmBv3h8SV3MD20wwU6Mo/w1GIiwTvkX2YbDWdO558TAF/SaZA+pg5H
53NezrmrX0L8EPz+YGQo8v2lftLO2aTvANZb7mkX0bxwNFGVHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAL/YP7q0uCyUT5URVcXAPQNUABSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjA2ZDE5NGEtMWQ1My0z
N2VjLTllODQtYmI2YWUzZjUxZDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS+CYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJR0hg9kU+SDjePJGLCGSYHPl0HdPAqZPUFkQVHAHuY5w1vdJpg4Kd2t
UEp0/KTgeCSz7FOHUfkzD0U8v7Yn7uLJe4AaCWkbi4+hpcApGyTQEff8Pi2MU4o3
AQfeHx1jiOM5FoQGpHBO6kv/N9D/S74MPHypo3xE/BXarWiMh9NdD1x5MrRUe1rv
Anx8OtbnXV4LnkCszG+N5XXXCvA4Lom5rUt6xElhRyIAk9J7b5Cv7JYHekYGzK+f
hAbm3MKTIMRiCOebJ3bcYFeeqOx7P6aBZHfp+qRRetkVSPwsz3WnBssNU5IrldJf
iy+3YXlKzupA8JI9BAHQo/5+rLYAk2A=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:10:59 2025 by rpki-client