Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ed5ef74-dd22-3cb1-bb0a-f6bbbd23e2d9.roa
File:                     3ed5ef74-dd22-3cb1-bb0a-f6bbbd23e2d9.roa (raw, json)
Hash identifier:          Guh6fVbnOEWmjfRP4AoGC6HXzWNsMd3tUeJD2O2YsdU=
Subject key identifier:   D2:AC:67:CE:48:B1:12:29:43:B6:D2:5C:80:98:7A:02:2C:DA:4D:0D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B609CAE8721918C083905F980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ed5ef74-dd22-3cb1-bb0a-f6bbbd23e2d9.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        174.212.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:ae:87:21:91:8c:08:39:05:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=96d7397a-9e7c-477b-9d96-9b12421b3ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9f:ad:b4:83:df:f5:b2:c3:b1:8f:87:f6:12:
                    66:f0:12:e3:3a:ad:71:36:91:6e:13:7e:5e:a1:c6:
                    a2:38:3b:8d:ea:a3:7d:9e:16:85:5f:64:87:bc:17:
                    8a:b7:b4:07:c2:c0:d3:be:31:b8:ef:5a:ab:57:09:
                    a2:76:fb:c0:98:09:ee:69:d6:0c:94:06:f3:5c:c6:
                    5d:8e:05:bc:6a:47:b3:c2:2e:83:7a:c1:f0:e2:9b:
                    c0:00:70:11:06:0a:d1:6e:42:c4:f2:12:b7:5f:81:
                    c8:da:6d:59:23:2d:87:3f:51:bb:53:d2:37:7e:be:
                    63:a1:f8:a9:3f:a3:a0:06:78:48:67:f3:95:13:2f:
                    40:ef:c9:43:a9:4e:42:24:05:be:35:1a:a3:11:29:
                    87:a1:c2:88:dd:fe:6e:4d:80:e5:87:c7:0c:9e:e9:
                    5d:de:55:8e:e4:50:4c:cd:88:58:d3:7e:bb:a8:70:
                    62:7c:4e:f1:6c:53:51:29:b0:54:64:ba:5c:71:c5:
                    42:55:34:59:6e:9b:42:70:1e:bb:c7:66:c0:9a:8c:
                    a2:5a:7b:8f:6e:58:3a:0d:39:b1:11:54:5f:b9:63:
                    7b:df:46:35:3b:77:c5:9b:b1:0c:c9:72:8e:50:0d:
                    d5:d5:0a:d6:27:3b:a4:58:92:bd:03:6d:21:7e:03:
                    70:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AC:67:CE:48:B1:12:29:43:B6:D2:5C:80:98:7A:02:2C:DA:4D:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ed5ef74-dd22-3cb1-bb0a-f6bbbd23e2d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.212.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:fe:ac:af:a9:80:b9:d0:86:a1:44:93:73:0a:fe:63:d3:f0:
         48:1d:14:7e:e6:7e:37:13:f0:53:d2:b3:b3:54:6f:a2:c1:f2:
         5c:f1:76:e6:00:f6:90:60:76:e2:84:ec:6e:f7:08:2b:77:3d:
         4c:14:ac:41:bd:2c:67:63:0c:f5:68:a4:69:9d:49:6c:c7:fa:
         bc:b1:84:a3:38:28:bb:7a:f8:33:e8:b3:d2:5b:bd:ae:7e:a4:
         73:59:ff:d3:08:c9:d7:76:73:2e:ab:f0:b9:a9:a2:c1:5f:50:
         d7:a3:50:e5:65:ba:d0:69:aa:a1:59:64:9a:9c:c5:ba:3c:52:
         bf:d6:19:ac:c5:ba:17:83:03:00:70:c8:30:76:1a:83:35:4a:
         b5:78:4f:d9:43:d7:10:36:cf:0c:ff:39:26:06:2c:48:1f:ba:
         a6:d0:d5:cd:05:f5:ef:dc:34:95:84:52:6d:5d:dd:5d:32:20:
         67:19:f8:b3:cb:b2:ed:16:06:a5:2a:f0:e7:a5:52:da:03:90:
         42:ea:b4:22:47:84:fb:e5:c6:45:e2:41:92:36:b8:66:ca:53:
         9a:12:f8:b5:01:1c:77:c7:02:73:8f:3d:a2:9f:55:a1:bc:dc:
         18:94:fd:aa:70:23:7d:29:7d:91:63:9e:61:ed:05:50:a7:6c:
         68:b5:b1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:51:26 2025 by rpki-client