Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/725be529-618d-3533-8b35-baa3838ecbc4.roa
File:                     725be529-618d-3533-8b35-baa3838ecbc4.roa (raw, json)
Hash identifier:          Em27vHT5/Pt9iFzsEO7rdqWAE5tGPLkAWQKwRr7q4MI=
Subject key identifier:   47:95:A6:85:06:8D:9B:41:B6:41:42:9A:45:38:B9:74:DF:97:8C:B9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B609CAEBC42B90EABCF403640
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/725be529-618d-3533-8b35-baa3838ecbc4.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        174.212.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:ae:bc:42:b9:0e:ab:cf:40:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=44452d27-9f70-47b3-af8c-5297db0fea8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9a:ac:da:02:c3:91:85:02:4e:ce:2e:cd:23:
                    32:19:02:9a:3c:2c:9b:5c:50:fe:44:96:2a:a8:c5:
                    21:af:74:b3:a4:f7:36:17:84:38:3e:ec:e6:05:ac:
                    cc:c6:b0:48:32:a5:4b:39:e2:97:62:70:54:89:4d:
                    f3:d2:80:d9:7f:a9:51:18:18:ab:2e:38:d7:3b:2f:
                    32:17:41:25:c9:40:66:cf:71:9e:a3:13:38:09:54:
                    1d:8b:af:c1:a9:07:58:8f:84:15:17:5b:5e:18:eb:
                    01:60:1e:66:b9:46:74:cd:46:63:95:26:fb:fa:d0:
                    08:61:92:11:f2:cc:54:17:49:48:2e:af:41:05:13:
                    48:76:0a:1c:c2:84:87:36:43:f8:41:de:c9:11:53:
                    fa:c0:a3:d2:e5:a0:08:5e:de:ae:ab:ec:d4:b4:98:
                    65:ca:a6:da:b2:5c:46:1c:2c:5b:fe:d7:36:4d:41:
                    57:e6:6a:af:bf:24:0a:da:1e:4f:b4:48:e0:2c:1a:
                    c3:05:04:cb:78:e2:4b:88:0f:db:b7:e7:dc:8c:9f:
                    1c:c5:e1:8a:ca:f8:fd:94:cc:7c:07:f2:5d:04:34:
                    c3:fd:ba:42:a7:f1:91:2b:4a:39:bf:6a:f0:6c:a2:
                    3c:15:34:a1:00:79:b1:1f:e6:28:42:34:4a:a3:93:
                    f1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:95:A6:85:06:8D:9B:41:B6:41:42:9A:45:38:B9:74:DF:97:8C:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/725be529-618d-3533-8b35-baa3838ecbc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.212.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:7a:74:10:f6:4c:fe:49:78:56:38:1a:5b:21:a0:1d:5a:ee:
         f0:38:5d:e0:d4:f5:00:7d:2b:67:8e:c1:55:59:3d:46:70:f3:
         01:80:a1:c7:07:a6:f0:88:fb:93:93:92:2f:f6:27:7d:28:89:
         f0:ed:e8:8c:67:6e:4e:31:fa:09:9e:7c:f1:b6:71:6a:ca:5e:
         09:6a:4d:a8:7f:ed:44:ad:ae:60:b2:83:b3:c5:6b:d7:6e:dc:
         a1:7d:5a:ca:74:6e:b2:96:26:85:52:9e:ec:b1:ea:15:05:9b:
         f4:b4:23:8c:40:a2:a2:b0:e1:f4:be:15:d4:ff:da:f2:87:0d:
         85:55:ea:bf:9e:b9:95:2a:bc:eb:9a:ba:71:dd:72:8f:84:a9:
         79:ac:2e:41:18:9d:bd:93:e6:2d:99:1f:b0:39:a5:95:c0:75:
         26:ee:fe:57:46:83:c4:9f:67:38:12:c9:b8:c5:33:eb:d4:3f:
         0d:f5:03:8a:63:c5:a5:57:23:34:bd:7b:e1:d4:84:98:d9:74:
         93:b4:3b:57:f1:e8:b5:46:0d:e0:66:05:1e:e8:56:de:3f:f2:
         0e:1c:de:3d:6d:b1:a8:5d:12:be:f9:3a:9b:2c:2f:47:35:b1:
         92:10:b4:57:5f:bf:12:fa:69:27:2f:2e:71:f9:cf:c5:77:3a:
         fc:b2:4a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:55:40 2025 by rpki-client