Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/849c28b9-21c5-3a08-9bac-465bf04d188d.roa
File:                     849c28b9-21c5-3a08-9bac-465bf04d188d.roa (raw, json)
Hash identifier:          hKP2ULcPWpVQJYss1EBFA9zpejmFrG8Mbw1Da+qZUdk=
Subject key identifier:   1B:03:A3:47:39:68:0E:1C:9D:21:DA:5E:98:3C:08:65:2F:15:52:9E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849648469CDBD67CAF611708B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/849c28b9-21c5-3a08-9bac-465bf04d188d.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        75.244.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:69:cd:bd:67:ca:f6:11:70:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=2e10aaff-a67b-4899-8075-9aa5cf69f30f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:26:ad:77:9f:3d:a7:f4:06:d6:7c:44:db:83:
                    d2:50:c4:3c:16:a0:e4:e9:e9:ab:44:e5:5b:49:5c:
                    14:34:ab:52:39:0b:17:d2:67:be:22:6f:29:8c:65:
                    b0:7c:58:b0:b5:0f:50:8c:bc:11:48:c9:49:49:1b:
                    6a:1e:90:96:59:95:65:ea:1d:af:5f:0e:b4:49:06:
                    fe:1e:89:0f:74:85:2b:cd:a8:96:5c:74:3a:95:ed:
                    a9:d1:2d:27:fb:45:41:60:d5:2f:c7:0b:84:7a:7c:
                    a6:77:4a:60:87:77:66:94:34:6d:56:a2:52:dd:99:
                    89:48:3b:13:06:73:f0:62:7f:64:fa:9e:76:f9:97:
                    af:78:55:4c:a6:cc:26:fb:63:39:8f:87:2d:b0:0a:
                    9f:4a:60:6a:3c:26:68:3c:20:ae:39:15:7c:3e:03:
                    4d:bc:ec:42:fe:2d:c2:c9:90:e1:f2:08:bf:2c:80:
                    47:67:0d:fa:2e:43:28:ea:04:bc:77:4b:4e:1c:6e:
                    6e:8b:ca:ea:81:01:19:9e:7b:b2:0f:bf:70:58:15:
                    f4:c9:e2:ab:63:b5:43:6d:38:8f:8d:a2:46:e1:7e:
                    ae:5d:d0:a1:a7:1a:0b:22:4c:9d:bb:b6:0c:af:34:
                    93:ed:46:82:63:91:a5:78:52:ad:b4:67:ec:ff:3e:
                    06:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:03:A3:47:39:68:0E:1C:9D:21:DA:5E:98:3C:08:65:2F:15:52:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/849c28b9-21c5-3a08-9bac-465bf04d188d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.244.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:2e:23:63:82:ac:c6:0b:ef:f4:cb:34:19:0e:87:e7:c9:c1:
         1b:27:89:7e:cf:d8:02:76:59:77:e3:75:ef:48:13:2b:d2:c4:
         d2:9c:2a:b8:d1:af:d5:8e:10:5f:10:a0:97:90:a6:51:bc:8c:
         b4:ae:32:d2:cc:71:6f:bc:56:db:f6:d0:53:09:24:12:16:c0:
         10:60:48:44:d3:8d:ed:6d:4e:fe:83:35:37:04:06:a0:2c:0a:
         44:9d:82:98:05:46:de:e1:aa:03:90:68:59:d8:77:be:ff:c3:
         b1:bd:47:8e:24:c7:1f:de:75:bf:ab:6c:ab:cf:90:a6:2d:10:
         74:f0:05:eb:36:82:c9:53:15:ca:66:fa:60:5c:ab:d0:c3:6f:
         54:1b:e8:85:62:75:ad:e9:87:8d:48:60:4c:3d:1d:ee:4e:95:
         06:cf:a7:0a:f4:2d:a5:fc:b3:fa:42:ff:2e:8d:01:c0:41:13:
         a9:07:43:4e:65:d7:15:1d:e4:42:83:ca:52:15:62:99:1e:f8:
         dd:dd:7f:d5:16:9a:1e:db:d5:04:9f:e2:1e:66:21:d4:97:6a:
         e0:bb:21:7b:13:5b:f8:05:42:72:b2:02:5e:69:ab:f8:39:91:
         27:7c:e4:f9:0e:d3:10:df:64:42:81:d4:95:3e:04:a8:67:f9:
         e2:96:36:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhGnNvWfK9hFwi4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk
MmUxMGFhZmYtYTY3Yi00ODk5LTgwNzUtOWFhNWNmNjlmMzBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSatd589p/QG1nxE24PSUMQ8FqDk6emrROVb
SVwUNKtSOQsX0me+Im8pjGWwfFiwtQ9QjLwRSMlJSRtqHpCWWZVl6h2vXw60SQb+
HokPdIUrzaiWXHQ6le2p0S0n+0VBYNUvxwuEenymd0pgh3dmlDRtVqJS3ZmJSDsT
BnPwYn9k+p52+ZeveFVMpswm+2M5j4ctsAqfSmBqPCZoPCCuORV8PgNNvOxC/i3C
yZDh8gi/LIBHZw36LkMo6gS8d0tOHG5ui8rqgQEZnnuyD79wWBX0yeKrY7VDbTiP
jaJG4X6uXdChpxoLIkydu7YMrzST7UaCY5GleFKttGfs/z4G7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBsDo0c5aA4cnSHaXpg8CGUvFVKeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODQ5YzI4YjktMjFjNS0z
YTA4LTliYWMtNDY1YmYwNGQxODhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGS/TAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACQuI2OCrMYL7/TLNBkOh+fJwRsniX7P2AJ2WXfjde9IEyvSxNKcKrjR
r9WOEF8QoJeQplG8jLSuMtLMcW+8Vtv20FMJJBIWwBBgSETTje1tTv6DNTcEBqAs
CkSdgpgFRt7hqgOQaFnYd77/w7G9R44kxx/edb+rbKvPkKYtEHTwBes2gslTFcpm
+mBcq9DDb1Qb6IVida3ph41IYEw9He5OlQbPpwr0LaX8s/pC/y6NAcBBE6kHQ05l
1xUd5EKDylIVYpke+N3df9UWmh7b1QSf4h5mIdSXauC7IXsTW/gFQnKyAl5pq/g5
kSd85PkO0xDfZEKB1JU+BKhn+eKWNnk=
-----END CERTIFICATE-----
Generated at Thu Apr 10 02:04:27 2025 by rpki-client