Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c8ccaa4-1b7f-326e-8f1a-1cecb7df07a1.roa
File:                     4c8ccaa4-1b7f-326e-8f1a-1cecb7df07a1.roa (raw, json)
Hash identifier:          P9QMIRw3abmuH8q+WQ5kzkqXhmutw37cRerJQVWemXQ=
Subject key identifier:   23:ED:EF:3B:3D:6F:E5:5E:F6:6A:D1:07:25:49:23:87:E6:4D:DD:01
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B609C9BE5BC6F2C6BB517A080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c8ccaa4-1b7f-326e-8f1a-1cecb7df07a1.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        174.208.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:9b:e5:bc:6f:2c:6b:b5:17:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=460fed2c-3753-4efd-9152-2d2ae7e20719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:23:8d:21:1c:fd:16:5b:d8:5a:1f:7c:11:00:
                    fa:fa:8d:8d:28:73:9c:1c:45:66:09:37:db:64:73:
                    47:84:bd:57:8f:72:87:17:cb:21:6f:03:5f:6d:bd:
                    aa:2d:3c:c4:77:23:ae:b6:0b:35:23:d3:79:75:7d:
                    e6:a0:2d:24:80:ea:47:38:26:f3:83:ec:d7:d5:6a:
                    f1:06:60:cf:40:42:da:f5:ef:ec:3e:f2:a0:d1:5a:
                    15:00:16:10:f9:c1:4c:05:0d:4c:c2:69:3f:c1:5d:
                    25:57:2e:82:3e:1c:15:f3:18:16:26:b4:24:2e:d6:
                    d0:2e:1e:34:a7:b0:05:33:17:23:86:f9:93:ee:69:
                    78:e1:64:c5:b4:1d:d0:f1:a3:47:a0:9b:78:2a:27:
                    dc:36:a5:ce:f2:74:70:b6:72:9a:4f:78:52:f6:d8:
                    91:b3:37:c0:e6:62:1a:ec:72:9d:8c:71:7a:63:4f:
                    1a:f1:28:ad:48:ff:2e:f0:2a:c1:80:76:41:ff:7e:
                    43:94:90:4d:46:fc:fa:83:f7:20:b2:24:20:a4:42:
                    d9:84:5e:1b:05:b5:96:6f:c2:60:08:22:92:4a:de:
                    cd:92:c7:ed:36:2d:fa:03:47:f9:ef:fd:95:e0:7d:
                    c4:2e:89:69:82:b8:f0:78:0b:39:66:9a:12:07:41:
                    81:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:ED:EF:3B:3D:6F:E5:5E:F6:6A:D1:07:25:49:23:87:E6:4D:DD:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c8ccaa4-1b7f-326e-8f1a-1cecb7df07a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.208.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:00:48:89:db:9e:4b:e8:13:0b:e2:28:78:8a:c1:54:49:4e:
         fd:dd:0e:c8:82:0f:95:7a:47:7d:02:b7:44:6c:a8:f9:48:51:
         45:d8:ec:23:94:e2:1c:9a:17:90:0e:74:db:64:9f:74:ff:79:
         48:d7:25:bb:90:eb:c5:b7:68:66:fc:f9:e3:17:00:08:ee:2b:
         12:d3:11:82:09:75:52:9b:ea:18:3a:83:4e:74:33:52:b8:6b:
         47:19:f7:72:0d:d0:e7:f8:2f:1a:7d:89:00:b9:5d:cc:17:f2:
         0e:da:af:e0:d0:68:95:0f:41:78:f4:4f:93:63:71:5e:e5:e9:
         ec:25:85:92:fa:bd:db:e0:5c:a8:b3:08:71:b0:fc:3c:05:0c:
         9a:52:dc:b8:95:3c:79:e8:16:2f:e5:97:15:9d:17:f3:fd:64:
         d2:7d:a4:79:c3:95:cd:04:46:7c:1c:b5:1e:0c:4f:a1:91:74:
         a6:b2:4c:73:b2:21:f0:78:6f:7a:6a:8f:84:19:76:39:5b:82:
         17:34:85:ee:e1:b7:68:36:db:03:fd:b1:92:46:14:82:29:70:
         15:10:10:14:1a:78:11:11:b6:25:2e:1f:ec:5a:14:5c:a8:5a:
         90:cb:2f:d6:53:78:19:10:de:91:fa:f4:90:cd:1f:5c:c5:10:
         c1:95:b9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:07:31 2025 by rpki-client