Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5705cb26-793c-3614-a540-1ca8736b4743.roa
File:                     5705cb26-793c-3614-a540-1ca8736b4743.roa (raw, json)
Hash identifier:          ssvo03tETI8o7m/snu/j+O/MBiKcErALi2vLicXVCCw=
Subject key identifier:   8A:DF:3D:A4:44:F7:B1:E4:9E:17:48:37:5C:71:10:D4:CB:7E:D4:E7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B609C9C1B6225B28FBA857C60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5705cb26-793c-3614-a540-1ca8736b4743.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        174.208.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:9c:1b:62:25:b2:8f:ba:85:7c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=55eab2a7-35a2-465f-adad-29f140537415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:82:bc:70:eb:28:fb:43:0a:fd:0b:42:1f:49:
                    79:16:74:ed:8e:73:70:11:35:b8:07:50:03:7f:36:
                    1f:cf:74:97:cf:8e:0e:dc:70:6d:0c:a0:cf:51:2a:
                    ab:8b:96:0d:9f:1d:db:45:6e:8f:6a:ce:4f:50:18:
                    13:29:5b:19:09:8d:63:36:c9:01:62:98:dc:87:79:
                    eb:36:36:33:8f:fd:6b:45:5a:13:4c:8a:7f:02:5a:
                    14:34:e9:c2:fd:09:31:72:16:57:3c:d0:b4:aa:be:
                    c3:8a:6e:47:bc:ee:c7:89:c5:3e:81:30:ae:01:b3:
                    33:2b:db:50:6a:9e:27:e0:7a:22:7c:4c:0c:e3:83:
                    47:b8:c6:c6:e1:ae:41:58:10:56:3b:19:c2:ee:ac:
                    e0:4b:c6:fe:71:f4:ef:49:f2:70:1f:cd:f8:3b:b1:
                    b6:54:07:4d:73:1a:ef:37:0c:0f:5d:a3:fd:c6:59:
                    af:ae:1c:f3:56:6c:b3:51:1c:de:ef:e7:bc:28:0d:
                    70:74:95:e5:3b:07:75:24:29:3e:79:43:d1:d3:96:
                    fe:33:71:55:50:56:2b:9c:1b:be:8d:e0:82:51:5e:
                    3c:3e:b0:3f:bf:24:9d:7b:5a:36:4f:b5:dd:5e:53:
                    5b:b8:7a:00:b5:76:b7:f0:3a:7f:c9:ed:f0:ba:7a:
                    48:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DF:3D:A4:44:F7:B1:E4:9E:17:48:37:5C:71:10:D4:CB:7E:D4:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5705cb26-793c-3614-a540-1ca8736b4743.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.208.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:97:c6:c6:b1:f5:33:93:64:0d:b8:e0:6e:ed:f6:4b:53:5d:
         7f:e8:bf:5b:8d:e0:fa:95:50:06:8c:0b:e1:dc:57:0a:bb:04:
         61:04:e4:24:d6:d1:e0:3a:3f:12:90:22:52:f6:dd:8e:4b:fa:
         77:c8:08:5d:01:4c:88:22:08:55:4e:be:6a:6e:89:8d:7c:31:
         6a:d3:2d:d3:09:5d:23:a1:07:ee:28:fb:eb:03:2f:c7:93:dc:
         35:3a:81:ca:98:e1:12:0b:a2:89:2f:28:81:2a:fe:b8:00:81:
         84:9b:41:39:da:74:10:72:1c:04:05:29:04:93:c1:20:9f:a4:
         b7:04:6c:5a:87:ba:05:5f:b9:b5:af:4b:a6:a2:6a:a7:0e:1c:
         72:46:0f:15:27:83:c7:11:29:65:71:65:4a:c9:21:da:41:a6:
         51:3d:e9:59:a2:ee:e9:03:20:8b:b6:f7:8f:7e:96:38:14:13:
         55:45:8c:9c:70:3b:a3:fb:35:30:d3:ab:0d:7f:c8:e6:90:43:
         3f:8f:f3:66:72:18:31:51:7a:e1:d9:8c:48:3b:13:74:57:f4:
         17:eb:aa:35:75:2a:db:58:2c:97:1c:8e:f1:61:ea:f4:e3:ff:
         4a:a2:9d:f4:b5:e7:4b:bd:65:2e:0b:0a:24:24:14:a3:5c:2c:
         6b:d3:7b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:52:21 2025 by rpki-client