Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9bc4a6a4-417b-362f-b9c6-562de7ba8d02.roa
File:                     9bc4a6a4-417b-362f-b9c6-562de7ba8d02.roa (raw, json)
Hash identifier:          mOVqf937/W4Jkvveb0sbAphrwsShjATEXAeZgJGaEUs=
Subject key identifier:   A7:65:24:41:4B:1E:9D:BD:C1:96:C6:67:55:3E:58:C4:BD:D7:FA:79
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B609CB059E7E3F3D2F7A0A400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9bc4a6a4-417b-362f-b9c6-562de7ba8d02.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        174.213.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:b0:59:e7:e3:f3:d2:f7:a0:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=25e843aa-20a3-4ff5-bd13-fc87ac1ef50f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e8:c6:8f:50:22:1e:db:1b:73:b7:c9:0e:9b:
                    2d:98:1d:7d:d6:e0:d8:8d:47:89:42:b1:3b:4c:8a:
                    e5:c5:49:6f:12:07:b9:fd:d8:f1:12:4e:a8:ce:81:
                    36:c9:b5:7c:82:cd:84:41:ae:51:95:9a:29:cf:f4:
                    b6:f9:8e:74:74:78:3d:cf:f7:04:62:f1:d8:f0:e4:
                    87:28:ab:de:d2:78:81:bf:55:2e:b5:6a:e0:b5:fd:
                    e2:0e:9e:33:c8:f9:04:1a:5c:03:9b:64:17:bc:8f:
                    b8:1f:e6:31:26:f9:5b:55:b0:aa:59:1b:e0:8f:14:
                    f8:80:87:08:e3:0f:8a:fa:e4:c9:8d:50:8a:e7:e3:
                    18:35:00:b3:64:ac:06:3f:bb:5e:30:9a:02:e9:29:
                    46:32:2f:a0:43:df:c7:a8:b4:07:67:a4:47:db:e0:
                    1f:0c:b7:79:99:cb:6d:98:c3:da:74:3c:06:7c:84:
                    a0:b9:ec:61:f3:c1:ef:93:d7:5b:6c:e0:bb:1c:94:
                    51:fc:6c:ca:fc:21:18:21:7d:4c:4c:60:cd:fc:54:
                    3a:a3:00:fa:2c:0b:2c:0c:f8:c6:48:42:50:71:0d:
                    7d:ce:12:a5:a6:95:53:a7:aa:f1:d8:ca:1b:7e:c6:
                    dd:bc:1a:6b:de:23:02:dd:63:ca:91:ba:49:d7:23:
                    a4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:65:24:41:4B:1E:9D:BD:C1:96:C6:67:55:3E:58:C4:BD:D7:FA:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9bc4a6a4-417b-362f-b9c6-562de7ba8d02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.213.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:be:64:ab:64:19:95:50:a8:73:a5:3b:8c:81:6f:31:14:74:
         fe:3c:68:a6:11:1a:a1:4d:f8:4b:e1:d3:44:5c:ac:b3:97:aa:
         8b:ed:fb:1f:f5:cf:8d:be:fd:1f:ff:8c:18:d9:b4:d8:6c:ca:
         bf:69:d5:5f:ef:37:8d:1e:fa:ef:19:8d:c5:7e:44:11:98:34:
         70:00:6f:72:5d:76:66:94:d1:22:c2:4c:b8:74:97:74:c6:60:
         84:12:67:6b:de:b5:1b:98:fc:39:9a:09:3d:87:33:e1:36:cd:
         f0:a5:b8:e0:93:71:83:bc:14:19:65:1a:c0:a8:47:86:83:80:
         07:70:3c:26:b3:28:2f:ae:ce:5c:97:aa:e9:86:8e:45:93:e9:
         24:49:8d:47:52:07:da:8a:26:34:c5:fa:88:fc:cf:0c:20:c6:
         1e:ba:bc:7d:ac:f2:d1:cd:60:fb:97:5b:9e:7f:1e:10:f1:3a:
         f9:a0:7f:43:ee:34:1d:b4:df:79:44:47:8c:54:7d:5f:b7:bb:
         13:19:ea:c0:04:0a:0b:45:a8:62:02:46:61:d7:43:4e:af:5c:
         e9:4b:15:72:98:5b:ff:e5:94:4e:cc:02:f9:8a:d4:08:dd:75:
         e0:b7:7e:14:d7:98:7f:bd:60:e9:13:f6:40:9e:9a:be:31:d4:
         62:ad:2b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:03:34 2025 by rpki-client