Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a049e9b-668f-3d17-9d1e-1545618715e8.roa
File:                     5a049e9b-668f-3d17-9d1e-1545618715e8.roa (raw, json)
Hash identifier:          H73iyiD5jS7IeKbqh1zQU7zpiJpYO/TiQl5RgWGRepE=
Subject key identifier:   14:3C:F2:84:85:49:17:FE:22:2C:0C:77:E5:74:6F:59:2C:E6:54:76
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ECA6C8588E189059908D4D9C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a049e9b-668f-3d17-9d1e-1545618715e8.roa
Signing time:             Mon 10 Aug 2026 13:00:12 +0000
ROA not before:           Mon 10 Aug 2026 13:00:12 +0000
ROA not after:            Sun 08 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        174.249.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:6c:85:88:e1:89:05:99:08:d4:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 10 13:00:12 2026 GMT
            Not After : Nov  8 14:00:12 2026 GMT
        Subject: CN=a248fec1-2c35-4b7e-ad66-93f6f0a96d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a1:14:2a:e6:66:c5:e1:6b:67:1c:73:a0:d9:
                    df:f4:41:ff:a9:ff:39:65:43:5f:1d:de:1f:25:e3:
                    28:d4:4c:11:de:c9:25:98:21:f0:c2:58:e9:95:84:
                    8c:aa:32:a1:21:48:0d:6d:4a:92:e4:31:73:d4:34:
                    e1:72:33:af:f7:ed:10:5d:60:df:80:93:2d:16:4b:
                    f9:87:44:dc:95:37:57:90:36:94:e3:be:5b:ca:a4:
                    26:76:f8:d9:54:e7:4a:fd:24:8e:05:21:21:50:bc:
                    18:62:22:2c:e5:db:ff:29:8d:47:6c:68:81:94:a8:
                    92:66:fb:3a:9a:21:ce:a9:1c:64:75:66:6a:4e:3d:
                    f8:f7:20:13:e6:ab:f3:ef:fa:13:1d:d7:ad:80:82:
                    03:d8:d1:14:fb:e5:9e:51:b6:4c:94:7a:dd:06:8c:
                    78:1b:a8:9e:e9:fb:ea:d8:bd:75:41:8f:88:73:2e:
                    c9:f5:5c:22:b9:fa:1a:75:a3:c9:a6:34:48:57:8b:
                    f8:14:31:dc:e7:44:44:bf:6e:2e:ac:c9:31:61:dc:
                    9f:5d:02:a0:0e:78:0f:00:25:50:54:e6:47:1e:f9:
                    82:e9:c4:a5:69:c2:7f:98:2e:dd:bd:ff:ec:0f:a1:
                    70:5e:f3:f6:e3:be:c7:03:0e:6d:6d:1d:24:cf:b4:
                    cb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3C:F2:84:85:49:17:FE:22:2C:0C:77:E5:74:6F:59:2C:E6:54:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a049e9b-668f-3d17-9d1e-1545618715e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.249.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:39:6f:f4:40:10:25:55:94:de:fd:f0:cb:50:f1:9b:6c:11:
         03:3b:41:fe:a2:a7:ee:a7:50:f7:aa:2b:ea:d2:68:b5:a1:a9:
         8e:e9:3a:fc:79:47:9a:4c:7b:b9:0a:4b:ac:11:e0:f4:27:50:
         39:cf:72:0a:9c:5a:3e:06:81:63:e3:6d:21:54:9d:d2:68:12:
         63:8e:b2:41:23:a0:2c:53:97:3f:0e:89:48:31:55:f9:22:f2:
         36:d7:79:f5:eb:95:c9:ea:2c:8e:ef:e2:e1:1f:7b:f3:73:f5:
         97:7b:24:a7:80:c5:15:a3:6f:49:53:02:4e:40:46:24:f1:dc:
         28:3f:96:0d:5f:c6:ed:e2:61:1f:9d:7e:d6:bb:cd:db:ed:8d:
         44:c1:2a:fd:8f:74:a8:62:0c:78:04:15:5f:52:45:25:83:bc:
         e2:d7:4e:18:19:9b:8d:0a:3e:f3:0f:b6:f7:a7:6d:87:26:a6:
         59:d2:ef:b4:d8:cf:0f:db:d3:5d:6b:58:0c:fb:6b:10:ec:72:
         1b:bf:e6:da:11:31:c5:b1:31:39:ef:3b:35:aa:68:ec:b9:8b:
         ee:9a:e4:ab:a1:d0:1d:8f:84:d0:4e:ac:00:ce:e7:1c:2f:39:
         c3:58:bd:cc:1c:13:b2:a1:0e:f7:99:7e:10:08:e9:a1:86:e5:
         91:8c:7b:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KbIWI4YkFmQjU2cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk
YTI0OGZlYzEtMmMzNS00YjdlLWFkNjYtOTNmNmYwYTk2ZDhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6EUKuZmxeFrZxxzoNnf9EH/qf85ZUNfHd4f
JeMo1EwR3sklmCHwwljplYSMqjKhIUgNbUqS5DFz1DThcjOv9+0QXWDfgJMtFkv5
h0TclTdXkDaU475byqQmdvjZVOdK/SSOBSEhULwYYiIs5dv/KY1HbGiBlKiSZvs6
miHOqRxkdWZqTj349yAT5qvz7/oTHdetgIID2NEU++WeUbZMlHrdBox4G6ie6fvq
2L11QY+Icy7J9VwiufoadaPJpjRIV4v4FDHc50REv24urMkxYdyfXQKgDngPACVQ
VOZHHvmC6cSlacJ/mC7dvf/sD6FwXvP2477HAw5tbR0kz7TLmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBQ88oSFSRf+IiwMd+V0b1ks5lR2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWEwNDllOWItNjY4Zi0z
ZDE3LTlkMWUtMTU0NTYxODcxNWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrvnMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACQ5b/RAECVVlN798MtQ8ZtsEQM7Qf6ip+6nUPeqK+rSaLWhqY7pOvx5
R5pMe7kKS6wR4PQnUDnPcgqcWj4GgWPjbSFUndJoEmOOskEjoCxTlz8OiUgxVfki
8jbXefXrlcnqLI7v4uEfe/Nz9Zd7JKeAxRWjb0lTAk5ARiTx3Cg/lg1fxu3iYR+d
fta7zdvtjUTBKv2PdKhiDHgEFV9SRSWDvOLXThgZm40KPvMPtvenbYcmplnS77TY
zw/b011rWAz7axDschu/5toRMcWxMTnvOzWqaOy5i+6a5Kuh0B2PhNBOrADO5xwv
OcNYvcwcE7KhDveZfhAI6aGG5ZGMe+I=
-----END CERTIFICATE-----
Generated at Thu Aug 27 20:54:03 2026 by rpki-client