Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c5bcbd22-630f-33a8-8f5f-5b5c5b3f8465.roa
File:                     c5bcbd22-630f-33a8-8f5f-5b5c5b3f8465.roa (raw, json)
Hash identifier:          gLDRFhq+uAcqqJCgjazCrccHzM8plEzLptjSPrOOhU8=
Subject key identifier:   69:43:15:35:59:9C:1B:88:A3:7B:FC:E6:14:6C:F0:90:1B:44:E9:4F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AFEE6BA4052C9EBD02497FD80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c5bcbd22-630f-33a8-8f5f-5b5c5b3f8465.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.106.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:ba:40:52:c9:eb:d0:24:97:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=26e87233-45b4-4cf8-8966-9d90692f9833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:40:60:f6:38:44:d9:55:5e:84:01:2a:c4:46:
                    f1:2f:cd:2e:bb:2e:07:ad:da:92:fd:7e:f9:f8:f9:
                    ea:8e:64:af:eb:c6:e4:08:56:ba:4c:a9:3a:b9:a8:
                    a5:89:f9:70:18:24:73:72:fd:6d:56:84:ca:32:d1:
                    c9:fd:be:3d:8a:3a:88:39:4f:9b:0c:01:50:a6:8a:
                    83:ca:13:78:17:b8:38:92:0d:83:58:9a:1f:fa:91:
                    29:33:78:45:a0:5f:a5:34:a1:c7:51:bb:ff:f8:84:
                    fe:91:17:1f:c7:99:56:88:07:46:90:45:38:47:64:
                    71:a6:aa:86:4e:32:ba:f1:f4:69:41:1d:8d:0c:7d:
                    05:7e:42:10:4b:43:74:96:18:50:09:17:e4:cf:04:
                    df:2c:60:6e:4a:7d:20:eb:d9:83:60:04:37:5f:b7:
                    61:b2:3a:11:d6:23:51:fa:76:be:ed:f2:72:bd:26:
                    1d:49:8c:c6:73:ad:d3:8e:c0:d6:1d:93:cb:61:9c:
                    7e:a0:a6:6a:03:04:fe:a7:69:7c:f9:4a:14:84:13:
                    22:02:24:f1:e1:08:e8:64:66:eb:b5:b7:c5:dc:63:
                    61:d9:19:75:2d:00:1b:26:11:c5:29:d6:f0:1f:b6:
                    11:24:b4:f2:af:fa:54:22:ad:cb:95:77:d2:96:ce:
                    18:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:43:15:35:59:9C:1B:88:A3:7B:FC:E6:14:6C:F0:90:1B:44:E9:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c5bcbd22-630f-33a8-8f5f-5b5c5b3f8465.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.106.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:3c:35:d1:4c:fa:43:a4:2f:2c:f9:4c:9c:ce:f2:13:f5:80:
         3c:e6:a0:82:02:9f:09:c2:d0:7c:db:91:43:cb:d6:65:e4:f9:
         c2:1c:07:ac:a7:96:64:c2:68:f3:d2:8e:ef:12:15:6f:c2:be:
         ef:4e:b1:27:b4:cd:a2:d2:cd:f3:08:07:de:f8:7b:42:70:54:
         4d:54:86:9b:3e:43:fa:b9:80:d6:69:57:4f:28:22:ce:9c:a2:
         cb:7d:08:a0:20:e7:1a:d1:4b:06:3a:18:10:57:2a:bc:44:63:
         d5:6d:fb:52:7d:e4:5b:6d:80:41:d6:f0:71:0f:36:c1:46:82:
         9d:1e:a3:c5:95:dd:95:45:af:58:a6:15:c5:87:c7:31:06:ac:
         bf:6e:d7:2a:58:1c:95:1a:93:16:3a:48:80:84:d8:26:d6:05:
         14:c0:65:98:3c:e8:bb:fe:2f:20:42:f8:83:44:77:3c:06:26:
         e3:e4:ec:6a:41:39:5b:f3:2b:a0:ff:81:3b:55:a7:30:ca:70:
         08:da:38:55:eb:97:ad:b6:0b:9a:c9:56:ed:66:7b:3b:22:c8:
         57:72:33:b6:de:d2:f3:b1:97:90:cf:f6:44:1e:cf:73:48:cc:
         1d:e2:53:3f:fc:52:94:a8:25:42:52:d3:e4:4c:f7:f8:75:bf:
         b4:42:c6:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5rpAUsnr0CSX/YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk
MjZlODcyMzMtNDViNC00Y2Y4LTg5NjYtOWQ5MDY5MmY5ODMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEBg9jhE2VVehAEqxEbxL80uuy4HrdqS/X75
+PnqjmSv68bkCFa6TKk6uailiflwGCRzcv1tVoTKMtHJ/b49ijqIOU+bDAFQpoqD
yhN4F7g4kg2DWJof+pEpM3hFoF+lNKHHUbv/+IT+kRcfx5lWiAdGkEU4R2RxpqqG
TjK68fRpQR2NDH0FfkIQS0N0lhhQCRfkzwTfLGBuSn0g69mDYAQ3X7dhsjoR1iNR
+na+7fJyvSYdSYzGc63TjsDWHZPLYZx+oKZqAwT+p2l8+UoUhBMiAiTx4QjoZGbr
tbfF3GNh2Rl1LQAbJhHFKdbwH7YRJLTyr/pUIq3LlXfSls4YfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGlDFTVZnBuIo3v85hRs8JAbROlPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzViY2JkMjItNjMwZi0z
M2E4LThmNWYtNWI1YzViM2Y4NDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSGrEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFw8NdFM+kOkLyz5TJzO8hP1gDzmoIICnwnC0HzbkUPL1mXk+cIcB6yn
lmTCaPPSju8SFW/Cvu9OsSe0zaLSzfMIB974e0JwVE1Uhps+Q/q5gNZpV08oIs6c
ost9CKAg5xrRSwY6GBBXKrxEY9Vt+1J95FttgEHW8HEPNsFGgp0eo8WV3ZVFr1im
FcWHxzEGrL9u1ypYHJUakxY6SICE2CbWBRTAZZg86Lv+LyBC+INEdzwGJuPk7GpB
OVvzK6D/gTtVpzDKcAjaOFXrl622C5rJVu1mezsiyFdyM7be0vOxl5DP9kQez3NI
zB3iUz/8UpSoJUJS0+RM9/h1v7RCxq0=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:08:33 2025 by rpki-client