Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35b0e461-89d7-3c20-884d-b0352a4091dc.roa
File:                     35b0e461-89d7-3c20-884d-b0352a4091dc.roa (raw, json)
Hash identifier:          Jh5xNSjNsdTcZNJe3JXg/6wyOOjT3MCjO263saDeI4o=
Subject key identifier:   7C:F3:0D:B0:62:31:A5:8D:7D:EA:99:78:83:91:A9:D8:FA:D8:1C:AB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B76F29B43D8CFB17A19E3F100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35b0e461-89d7-3c20-884d-b0352a4091dc.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        174.253.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:9b:43:d8:cf:b1:7a:19:e3:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=368d8d31-ad14-4498-a146-8058e627d5da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ea:24:11:81:67:28:1e:89:c0:b9:28:e1:1d:
                    2a:b2:f0:e0:ea:62:71:e0:27:a1:00:3c:fe:19:bd:
                    df:ab:6c:8e:3f:d7:27:20:f8:54:c2:68:28:94:35:
                    f0:10:ee:e3:7c:53:5f:5e:2f:c9:35:10:d8:6b:a1:
                    cc:3d:ea:ce:c6:ce:52:55:26:3e:d2:bc:7b:03:83:
                    e5:12:71:d2:94:27:57:84:e2:5e:9c:e3:26:55:c2:
                    ec:74:76:6d:21:2a:95:c4:47:20:df:09:d4:3d:3c:
                    90:1d:c3:61:bf:68:62:94:0e:ce:05:a5:f8:84:60:
                    76:8c:ef:dc:14:92:48:e0:c0:4d:9a:21:fd:cc:ff:
                    64:b4:49:d9:c2:94:c3:d1:c3:03:99:e7:33:d8:e1:
                    35:c8:bd:52:2b:48:fa:3e:c3:3e:ea:43:69:ea:b5:
                    67:61:32:2e:5c:49:c7:52:b3:02:33:3a:d0:a4:60:
                    d7:26:68:bb:bc:44:2b:92:94:09:94:ae:f5:03:ac:
                    33:b1:e7:4d:3c:43:23:e3:14:0c:aa:2d:34:39:30:
                    80:11:5d:95:d0:0f:6b:52:bd:f4:0f:61:ca:6e:aa:
                    19:86:9f:24:7b:95:b9:d3:5e:80:7d:d4:01:11:29:
                    86:79:f7:7a:13:1f:ef:a7:50:4e:8b:51:12:68:5c:
                    81:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F3:0D:B0:62:31:A5:8D:7D:EA:99:78:83:91:A9:D8:FA:D8:1C:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35b0e461-89d7-3c20-884d-b0352a4091dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.253.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:8a:00:77:a6:8c:47:00:6f:85:40:b5:68:32:ac:8d:9d:f8:
         1e:91:18:4b:41:77:aa:32:6b:87:de:3e:da:91:8c:e8:c2:af:
         04:c0:f9:af:98:74:6a:b8:d7:9c:b0:02:65:aa:09:51:11:6e:
         bc:f6:37:81:9e:e1:76:a9:b6:7b:0e:1e:c0:c6:25:56:0c:45:
         5c:a4:cf:03:0e:40:63:1f:5b:32:ee:c7:a3:f4:94:7c:cc:a4:
         b5:5e:54:90:93:e7:f8:bf:1c:eb:73:71:21:bf:f4:58:06:d9:
         de:51:cb:96:2d:a9:3d:5f:46:ab:a1:53:07:9d:99:95:e7:6d:
         11:40:0f:7c:cc:ca:e6:5a:53:19:fd:24:8c:b8:32:92:2a:23:
         c0:f0:40:86:d5:57:d3:87:09:d8:fa:17:16:9f:ba:fe:08:14:
         79:5c:7b:da:26:23:db:36:7e:43:db:df:14:8e:e6:04:18:fc:
         84:30:a2:38:54:1c:b1:7d:0e:7b:0f:df:c1:ea:a9:9b:7f:f7:
         bd:e3:67:bd:f4:59:1b:14:74:4a:b4:bc:fd:16:f0:71:67:5a:
         0b:6e:bd:c5:ba:28:16:97:eb:81:a9:bc:b1:06:9f:7d:be:29:
         49:a7:bb:b7:61:f4:6b:9c:ba:64:6e:57:55:16:f2:9c:df:8b:
         bb:c8:93:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 00:12:29 2025 by rpki-client