Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71cda9bd-c513-345a-a627-55bb796e92b4.roa
File:                     71cda9bd-c513-345a-a627-55bb796e92b4.roa (raw, json)
Hash identifier:          j4NZW85XsnnXIL8khjMojNRpafwnsePFUKpYqSuD73A=
Subject key identifier:   C6:FF:32:DE:77:69:C7:C7:30:A7:6B:AC:1C:DD:34:15:FD:DC:86:76
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B609CAE5F8B93131B12BE0CA0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71cda9bd-c513-345a-a627-55bb796e92b4.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        174.212.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:ae:5f:8b:93:13:1b:12:be:0c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=759642a7-db16-47c8-810d-b47ccd9c157d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:28:95:5f:2b:57:af:96:9e:7c:92:d2:8a:20:
                    c7:fc:d9:bd:91:e0:bf:dc:8f:24:93:32:d2:8d:95:
                    94:ec:dd:e7:c6:25:85:f1:f9:95:fb:1f:fa:0d:31:
                    39:4d:45:10:24:95:48:94:bd:db:35:90:7a:0f:32:
                    af:3e:c0:b2:40:42:40:4d:cd:dc:6b:57:64:3b:00:
                    0b:26:fc:89:0b:e2:19:a9:11:93:48:14:1e:92:3c:
                    a2:04:27:4d:43:93:fc:14:63:7a:08:70:a6:06:7a:
                    10:09:6a:da:71:b4:a8:b0:d7:8f:f9:d8:e2:9f:00:
                    ea:09:e0:a5:89:b0:e1:3b:24:f6:b1:8a:02:a8:76:
                    62:ab:a2:de:6a:83:43:d3:72:d6:4e:0c:33:b7:97:
                    d5:9c:43:d8:3a:85:1e:6d:c0:aa:9d:77:87:2d:6d:
                    f9:02:32:54:cd:d9:63:79:d8:cb:72:b2:a3:15:11:
                    58:ab:e2:25:f7:25:97:5d:03:5d:a6:85:54:36:a5:
                    5f:f5:d8:3f:2d:fc:83:6a:83:64:d0:25:ed:cc:55:
                    99:d5:17:e8:c2:6f:9f:8f:4a:1b:19:10:05:87:ed:
                    2f:4a:1f:ff:87:a1:39:4a:6e:8c:35:57:79:2c:49:
                    72:77:57:0a:8d:f7:2d:2f:ec:4a:c9:5d:5d:29:3b:
                    23:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FF:32:DE:77:69:C7:C7:30:A7:6B:AC:1C:DD:34:15:FD:DC:86:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71cda9bd-c513-345a-a627-55bb796e92b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.212.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:1f:e2:9d:7a:b2:9f:25:a8:b8:64:95:6f:6a:87:cf:0e:58:
         90:aa:b7:03:d7:99:d3:43:3d:36:b1:97:94:d8:d4:0e:ba:fb:
         30:20:c7:d1:df:a2:6d:0b:d7:cc:8c:a5:39:89:81:71:75:02:
         5d:ca:00:10:d3:40:29:b5:eb:d7:6e:17:5f:d6:d1:0c:24:54:
         1c:87:bd:75:52:37:78:6d:c5:95:aa:b8:1a:85:b5:3e:23:b3:
         83:30:1a:57:4c:01:c9:19:c2:8c:7f:fb:35:e3:14:cb:0a:73:
         e4:d6:71:4e:08:a8:62:a6:14:e9:0c:e8:51:04:60:0d:26:ea:
         f3:42:75:5a:36:ee:c2:bd:ef:b7:c5:77:63:11:6f:bf:2f:39:
         58:a4:fc:b1:33:8d:2b:33:af:e6:eb:81:86:91:7b:40:9f:df:
         77:0f:0d:38:46:6f:c7:ca:60:b1:80:1f:57:7f:04:6d:68:f5:
         f6:db:f2:01:45:d8:a7:b2:d7:81:18:4b:ce:51:cf:db:63:b8:
         69:d0:50:89:25:97:4d:3b:17:93:85:ae:e6:bd:c2:3c:4b:8a:
         d0:86:cc:05:15:d7:31:4c:b0:c4:38:a1:11:21:68:2e:9b:4a:
         87:ca:48:98:08:07:bf:c9:19:dd:45:8e:2f:b1:b3:86:e6:5f:
         06:01:75:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:04:22 2025 by rpki-client