Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b434e5c-c870-3556-a99e-54509d138f06.roa
File:                     3b434e5c-c870-3556-a99e-54509d138f06.roa (raw, json)
Hash identifier:          qo2EKgZupES9B6K4QFaufPoOA3W2KoteEwez6tF5310=
Subject key identifier:   EA:76:82:72:7E:86:2F:97:2E:69:AC:79:CF:18:5A:61:E3:F2:92:13
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B609CAA31FD00A0D94A93C380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b434e5c-c870-3556-a99e-54509d138f06.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        174.192.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:aa:31:fd:00:a0:d9:4a:93:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=99455a25-7cc5-4c93-95d4-c427035de946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0d:46:a1:84:74:e9:6d:8d:29:d8:45:05:d5:
                    e4:7d:13:e2:6d:9b:25:96:1c:db:f7:ff:59:a9:9f:
                    21:e7:93:a6:48:9d:da:88:95:00:bb:8a:c9:a9:b1:
                    ad:5a:87:e0:d8:2c:90:62:6c:6f:4c:ca:8a:ea:fa:
                    74:12:fe:78:3b:66:95:fb:61:7c:05:6b:44:02:86:
                    13:54:28:02:99:6e:cf:78:3f:68:7b:1c:e1:69:a2:
                    94:c6:a4:ee:c2:3e:70:35:62:17:66:2d:d4:46:93:
                    cf:b4:0e:28:2d:b5:30:0d:7a:0e:4b:01:65:d3:e1:
                    c4:8a:41:01:e7:90:7b:72:7e:74:03:5d:e6:ad:bf:
                    f2:26:e0:58:65:49:38:93:52:24:3e:29:a8:81:84:
                    f4:e2:80:68:04:df:33:f5:4d:96:53:bf:09:12:1d:
                    01:e7:fc:ad:62:76:e6:cd:84:13:65:3b:0a:0f:d3:
                    63:9e:bc:48:38:b7:db:84:da:4e:91:5c:41:80:c7:
                    7a:8c:2f:7b:0b:51:2c:d7:84:6f:b0:3d:d3:75:0b:
                    91:1e:42:d3:e0:3e:0d:2f:d4:73:16:2a:e6:ba:23:
                    c2:09:9c:bb:f4:45:45:d2:5d:99:04:1f:05:ef:e2:
                    37:d4:8c:3c:57:47:cb:a9:ff:c4:44:96:f6:53:4a:
                    16:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:76:82:72:7E:86:2F:97:2E:69:AC:79:CF:18:5A:61:E3:F2:92:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b434e5c-c870-3556-a99e-54509d138f06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.192.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:67:b1:a9:f4:20:67:c5:67:1e:26:e8:40:a4:7f:44:fc:05:
         8b:9b:a7:20:43:dc:c4:fa:b0:20:69:db:20:20:13:3b:2c:39:
         79:6b:9f:56:06:2d:b4:76:1a:28:d7:c9:1e:28:38:03:b9:92:
         bc:5a:62:fe:30:15:70:94:df:5c:42:2a:2a:c6:aa:fb:d9:f9:
         28:cf:85:76:74:48:3c:e5:44:c1:9f:a0:46:1c:77:be:77:a3:
         31:cf:22:34:86:07:10:28:79:d4:a2:d8:60:c1:f3:9a:09:9e:
         60:81:31:a2:41:64:06:e3:ed:4a:c5:15:6d:e5:d4:db:3d:11:
         15:37:1d:d6:2b:8b:69:73:81:36:3b:c8:41:8e:62:f7:ec:8d:
         8b:83:19:4c:c6:3c:e7:cf:83:9e:52:fb:65:1f:65:b5:98:d2:
         07:d3:26:b6:a0:90:51:38:a7:89:f7:4b:69:cf:cd:02:b4:26:
         8b:13:7c:59:3d:1c:bc:4c:e7:77:d2:24:30:65:ce:28:3d:f4:
         73:65:2f:d5:ae:d9:71:43:8b:ae:49:4e:d3:51:68:83:74:74:
         d8:06:d0:16:bb:51:5e:20:3a:95:b5:28:9a:0b:cc:f3:0e:68:
         93:79:67:d9:ca:7e:d1:22:a3:32:90:05:7e:88:e1:5d:69:12:
         0f:68:7f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:08:24 2025 by rpki-client