Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/264a54bc-af18-3bdb-9eb5-eeda0459ee0c.roa
File:                     264a54bc-af18-3bdb-9eb5-eeda0459ee0c.roa (raw, json)
Hash identifier:          oKNiAgKf+MZI8rj/upblGWiCBjQy8pQRN49ZbV5swm0=
Subject key identifier:   AC:A6:D3:1D:63:FB:78:6C:F7:88:75:F5:74:E5:6E:B4:38:D0:56:93
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B663207B199BE8BF6C02F4700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/264a54bc-af18-3bdb-9eb5-eeda0459ee0c.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     6167
IP address blocks:        174.220.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:32:07:b1:99:be:8b:f6:c0:2f:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=34e56517-c9f5-4ab2-ab77-2b4b1cbfe94c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:af:a5:2a:69:f6:14:bc:79:85:ee:13:9b:1e:
                    f8:68:89:55:1e:71:da:fc:16:2c:02:34:0c:fa:3f:
                    32:13:83:48:d3:a7:e0:cc:02:7f:26:48:63:33:36:
                    42:1a:e7:b4:9d:38:40:76:35:16:1a:21:3e:78:78:
                    46:84:c1:5b:44:f3:3e:85:51:b1:a4:79:4e:5f:23:
                    4a:fd:c2:ab:f7:30:e8:b2:01:08:77:5f:96:82:cb:
                    9d:f3:e5:8d:62:43:ff:a0:c1:a2:97:5b:25:83:fe:
                    6e:d5:db:ee:a3:a0:eb:d0:ed:a3:9b:1b:83:ff:b5:
                    23:57:61:27:92:5d:ab:f9:c9:d1:75:ca:7e:f6:8c:
                    78:07:2e:6f:38:3e:d1:18:c6:2d:af:13:0d:0b:ac:
                    4d:5c:8e:09:67:f9:2b:7f:19:d9:8a:5b:e2:01:5d:
                    52:73:7f:07:a6:02:4b:b9:7b:ce:d2:f3:42:a9:6a:
                    32:3c:8d:6b:c9:df:54:25:24:73:bd:b4:40:bb:72:
                    a6:73:9b:c6:6f:f0:07:e4:5c:53:ad:2c:53:3a:14:
                    f5:af:b3:29:ae:b9:ce:8e:5b:48:30:4e:74:42:62:
                    98:61:0c:15:c6:7d:38:26:ef:a4:ca:48:e0:fc:7f:
                    d5:71:f2:c8:6c:c8:02:66:96:67:14:a3:ac:00:97:
                    59:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A6:D3:1D:63:FB:78:6C:F7:88:75:F5:74:E5:6E:B4:38:D0:56:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/264a54bc-af18-3bdb-9eb5-eeda0459ee0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.220.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:d9:3e:f3:de:1f:22:ba:32:24:81:cf:92:51:52:27:e8:c9:
         e2:9a:31:b1:f7:3a:e1:7c:7a:5d:f1:00:3f:27:52:12:e8:aa:
         06:db:2b:0a:87:3f:d7:0a:ff:99:00:5a:44:1c:9d:4a:b8:f2:
         6a:73:70:4a:ef:83:14:6a:3a:cb:89:ef:5f:13:82:6c:9b:6e:
         47:d3:d4:89:87:64:36:e3:05:01:83:1d:e8:9b:0d:8f:4f:16:
         7d:9a:48:79:ee:dd:42:06:62:7c:fc:5a:61:55:63:d7:93:b4:
         e2:58:f6:50:67:79:d8:d6:6d:5e:22:80:17:42:29:79:42:b6:
         1b:9b:02:f2:9e:4f:e1:c7:8f:bb:21:9d:ca:ae:d9:5e:99:28:
         31:50:ab:85:5b:3c:5e:90:be:0a:6f:cd:1b:9c:7a:0d:d1:f7:
         92:76:7f:e9:84:c5:30:b8:20:7d:74:8a:09:f2:2f:9d:6b:ef:
         9e:17:2d:98:dd:99:14:05:7e:0c:ed:bb:a6:cd:36:6a:a5:0b:
         ca:1b:82:78:bf:c1:1d:a5:1b:05:b9:38:81:51:34:ee:41:06:
         eb:f7:c7:f9:27:a8:3d:7a:e6:46:ab:8c:45:cd:45:25:3d:5f:
         1f:ba:f5:05:52:f0:32:97:b2:ee:78:7f:c1:37:22:2e:8c:c5:
         ac:6f:4b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:57:27 2025 by rpki-client