Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d29359ff-a91e-3376-bfe7-7ba47cfe0496.roa
File:                     d29359ff-a91e-3376-bfe7-7ba47cfe0496.roa (raw, json)
Hash identifier:          GM9hXnxLJ6SFv/Pe9RNmv2BOiR+8HjszpA1FSdfDngQ=
Subject key identifier:   A9:F0:54:4D:00:F9:5C:89:A2:14:68:EF:59:0B:39:B6:D4:A5:B6:52
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B609C9E3F7A4AB71F7F795D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d29359ff-a91e-3376-bfe7-7ba47cfe0496.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        174.214.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:9e:3f:7a:4a:b7:1f:7f:79:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=43929017-0774-4352-bbdc-d868abf7f5a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:21:9a:c6:ef:8c:93:8b:e8:82:7d:9e:c6:eb:
                    8f:28:b8:00:35:7b:c2:e9:cd:7d:25:e1:58:6c:d8:
                    ae:e5:d0:8a:d6:51:d5:21:22:67:53:08:0b:89:84:
                    5f:7c:c6:e1:35:b5:86:02:90:b7:3c:ca:95:2c:91:
                    07:6c:05:13:2a:e2:48:ec:e4:82:51:ac:65:72:4a:
                    d4:5e:20:6b:25:1d:63:94:92:9f:83:5b:02:79:07:
                    d4:5c:47:95:28:55:45:18:80:3e:6d:91:e7:2a:55:
                    a6:26:b3:3b:f2:6a:24:31:45:31:37:cf:72:08:9a:
                    3a:54:ea:f6:00:8a:40:b1:e9:2d:a7:42:58:2b:86:
                    28:7e:a2:c4:d4:16:38:68:09:23:70:db:d3:ee:e9:
                    43:a8:b4:45:1b:9e:30:dd:6e:f3:b1:79:cc:ba:32:
                    f8:23:d5:e1:3d:4a:55:ce:20:89:b3:47:fb:ee:af:
                    20:85:ed:d4:f1:95:7b:3a:59:06:24:dd:26:a6:e1:
                    c7:06:12:d2:53:05:69:40:b8:5a:6f:f0:0e:2c:ca:
                    e8:0b:eb:a2:da:80:81:2c:a3:49:16:22:76:94:6b:
                    ff:bd:68:89:f4:16:2f:4c:9b:6c:b0:de:a6:2d:82:
                    89:5e:3d:29:8e:61:6e:3a:dd:c3:33:41:d7:6f:91:
                    89:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F0:54:4D:00:F9:5C:89:A2:14:68:EF:59:0B:39:B6:D4:A5:B6:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d29359ff-a91e-3376-bfe7-7ba47cfe0496.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.214.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:f2:5b:bf:35:cf:a3:d0:17:d1:4f:13:88:a9:f9:17:58:3d:
         e3:a1:36:6f:d0:69:b8:dd:f8:d3:62:f0:6c:a5:5a:ee:73:c9:
         d1:cd:45:33:32:00:a1:20:33:78:fe:09:1c:a9:56:12:82:a2:
         1e:e7:c8:04:3f:7f:2e:29:9e:9f:4e:b1:ef:53:7f:51:90:67:
         61:44:c1:1d:79:b0:54:38:c3:a5:e4:d7:7d:89:61:ab:53:26:
         f5:94:8d:51:6e:62:f7:ad:43:63:00:1d:74:aa:b5:19:36:30:
         fc:4f:71:b2:90:b2:24:a4:7d:1e:68:79:c1:d5:0b:b9:f6:c0:
         07:4a:eb:d9:2f:ab:7c:2a:32:e8:7c:db:7a:aa:18:d3:05:38:
         d1:d8:ec:9a:03:06:61:aa:86:46:fe:a7:54:64:25:1e:40:c7:
         3b:53:de:ee:37:74:8c:83:75:c7:3f:7b:b3:68:98:9d:32:7a:
         b5:3c:7b:f3:c1:c4:77:ce:1a:96:09:f1:7c:c8:df:5f:7e:94:
         f1:6f:92:46:df:2a:68:ac:5d:77:b0:54:ce:ba:b0:89:b4:48:
         2c:75:41:86:d9:2d:c5:7e:ed:74:96:7d:2f:ee:b0:6f:60:af:
         51:1b:ee:c3:8f:8a:95:19:16:16:ee:e6:e7:e0:14:8b:01:78:
         c3:26:5a:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJ4/ekq3H395XYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk
NDM5MjkwMTctMDc3NC00MzUyLWJiZGMtZDg2OGFiZjdmNWEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiGaxu+Mk4vogn2exuuPKLgANXvC6c19JeFY
bNiu5dCK1lHVISJnUwgLiYRffMbhNbWGApC3PMqVLJEHbAUTKuJI7OSCUaxlckrU
XiBrJR1jlJKfg1sCeQfUXEeVKFVFGIA+bZHnKlWmJrM78mokMUUxN89yCJo6VOr2
AIpAsektp0JYK4YofqLE1BY4aAkjcNvT7ulDqLRFG54w3W7zsXnMujL4I9XhPUpV
ziCJs0f77q8ghe3U8ZV7OlkGJN0mpuHHBhLSUwVpQLhab/AOLMroC+ui2oCBLKNJ
FiJ2lGv/vWiJ9BYvTJtssN6mLYKJXj0pjmFuOt3DM0HXb5GJ8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKnwVE0A+VyJohRo71kLObbUpbZSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDI5MzU5ZmYtYTkxZS0z
Mzc2LWJmZTctN2JhNDdjZmUwNDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtYAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEvyW781z6PQF9FPE4ip+RdYPeOhNm/Qabjd+NNi8GylWu5zydHNRTMy
AKEgM3j+CRypVhKCoh7nyAQ/fy4pnp9Ose9Tf1GQZ2FEwR15sFQ4w6Xk132JYatT
JvWUjVFuYvetQ2MAHXSqtRk2MPxPcbKQsiSkfR5oecHVC7n2wAdK69kvq3wqMuh8
23qqGNMFONHY7JoDBmGqhkb+p1RkJR5AxztT3u43dIyDdcc/e7NomJ0yerU8e/PB
xHfOGpYJ8XzI319+lPFvkkbfKmisXXewVM66sIm0SCx1QYbZLcV+7XSWfS/usG9g
r1Eb7sOPipUZFhbu5ufgFIsBeMMmWsY=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:06:02 2025 by rpki-client