Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe9618cd-d572-3aff-a06b-b00f4642bbcc.roa
File:                     fe9618cd-d572-3aff-a06b-b00f4642bbcc.roa (raw, json)
Hash identifier:          i+gjb8MOEbmhL0uDan4570ptBtWCORzoHmTyOmDF/I4=
Subject key identifier:   F8:90:39:B3:39:26:1A:52:72:89:B3:3B:90:89:B9:04:35:8A:FF:1B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B41E70521A142439EF1E77870
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe9618cd-d572-3aff-a06b-b00f4642bbcc.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        97.204.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:05:21:a1:42:43:9e:f1:e7:78:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=2357f98b-3a19-4d19-84e1-3d7c9c2957a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3e:44:71:1e:03:50:fe:b8:12:42:c2:45:63:
                    fc:37:0c:68:8b:0f:5b:96:94:37:a7:c4:45:f0:f3:
                    6f:c1:3f:0c:41:9c:74:24:9b:d0:82:8f:96:00:4b:
                    45:09:ab:c5:bf:4c:f8:95:cc:4f:45:72:d8:b9:10:
                    7b:42:9d:c3:d9:8d:f7:28:93:18:8b:9e:f9:3b:60:
                    c5:da:c5:42:7a:b8:9b:43:8d:05:79:c9:8a:5c:8c:
                    ee:7f:83:f7:c9:49:4c:a9:79:b7:66:1f:c7:f0:95:
                    16:11:64:81:c2:e7:e9:18:e3:50:7d:5a:92:1d:b5:
                    ec:95:7e:68:cf:e5:27:e5:89:00:b7:29:eb:1b:16:
                    e3:63:a8:ea:4e:9c:07:31:fb:a1:4e:e9:a6:7c:13:
                    92:78:15:a5:6e:d5:7c:fd:23:7c:c6:ab:44:87:09:
                    e9:c0:bc:ac:94:9b:4f:3a:17:a1:9f:ff:b2:51:ff:
                    51:a7:c9:57:9f:a6:d0:5c:be:a4:03:d9:e8:a7:72:
                    17:0b:b7:56:d9:dc:15:be:16:d4:47:82:c3:16:61:
                    91:d3:39:ca:fa:a9:4e:97:cf:9e:1e:e5:60:53:82:
                    67:31:a4:3e:84:bd:dc:27:22:74:5f:98:7a:92:56:
                    88:01:70:3d:08:a5:50:6b:32:78:56:69:71:b0:da:
                    19:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:90:39:B3:39:26:1A:52:72:89:B3:3B:90:89:B9:04:35:8A:FF:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe9618cd-d572-3aff-a06b-b00f4642bbcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.204.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:4a:83:97:dd:46:fd:47:8f:2e:61:47:ba:a0:40:3c:8f:50:
         e6:3e:f9:85:d9:18:ec:08:ef:66:49:ae:e9:50:ac:ef:85:62:
         2b:e4:16:b1:92:53:5d:86:6f:1a:81:e9:8f:1e:c2:14:d5:56:
         2e:64:5e:22:7d:d5:51:5d:bd:a4:4d:15:6f:40:9f:4e:c3:54:
         cc:b8:c9:9d:a3:5e:e5:04:5f:ab:be:62:c1:7a:05:e9:9f:49:
         7b:31:2d:5c:ba:6b:ac:d8:41:b4:1e:7a:b2:05:9e:32:e8:04:
         61:df:34:af:5b:96:e0:e1:c5:a2:1d:b2:ee:eb:13:bd:03:78:
         dd:21:0f:f7:32:5b:21:72:8a:8c:55:a0:63:fd:46:9b:20:de:
         d4:2a:f0:aa:4d:7c:82:78:9f:50:44:87:42:18:ca:a6:c9:8c:
         44:93:66:79:43:c2:b0:d4:ad:89:7f:50:cf:ed:2f:42:91:a4:
         1c:66:21:16:1c:36:99:ef:b2:28:31:0b:d4:84:60:3f:5d:0f:
         41:ab:bc:2c:4b:d3:67:0d:17:d4:cc:da:47:1e:4a:c5:c9:8d:
         ea:4a:81:15:8f:ea:6e:21:5a:80:30:8b:da:5a:7d:bb:52:50:
         2d:28:b6:9b:3d:61:a1:0d:e4:29:18:57:53:94:ad:9e:76:5c:
         d3:03:9b:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5wUhoUJDnvHneHAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk
MjM1N2Y5OGItM2ExOS00ZDE5LTg0ZTEtM2Q3YzljMjk1N2EzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT5EcR4DUP64EkLCRWP8Nwxoiw9blpQ3p8RF
8PNvwT8MQZx0JJvQgo+WAEtFCavFv0z4lcxPRXLYuRB7Qp3D2Y33KJMYi575O2DF
2sVCeribQ40FecmKXIzuf4P3yUlMqXm3Zh/H8JUWEWSBwufpGONQfVqSHbXslX5o
z+Un5YkAtynrGxbjY6jqTpwHMfuhTummfBOSeBWlbtV8/SN8xqtEhwnpwLyslJtP
Ohehn/+yUf9Rp8lXn6bQXL6kA9nop3IXC7dW2dwVvhbUR4LDFmGR0znK+qlOl8+e
HuVgU4JnMaQ+hL3cJyJ0X5h6klaIAXA9CKVQazJ4VmlxsNoZpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPiQObM5JhpScomzO5CJuQQ1iv8bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmU5NjE4Y2QtZDU3Mi0z
YWZmLWEwNmItYjAwZjQ2NDJiYmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYcwwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAElKg5fdRv1Hjy5hR7qgQDyPUOY++YXZGOwI72ZJrulQrO+FYivkFrGS
U12GbxqB6Y8ewhTVVi5kXiJ91VFdvaRNFW9An07DVMy4yZ2jXuUEX6u+YsF6Bemf
SXsxLVy6a6zYQbQeerIFnjLoBGHfNK9bluDhxaIdsu7rE70DeN0hD/cyWyFyioxV
oGP9Rpsg3tQq8KpNfIJ4n1BEh0IYyqbJjESTZnlDwrDUrYl/UM/tL0KRpBxmIRYc
NpnvsigxC9SEYD9dD0GrvCxL02cNF9TM2kceSsXJjepKgRWP6m4hWoAwi9pafbtS
UC0otps9YaEN5CkYV1OUrZ52XNMDm70=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:06:19 2025 by rpki-client