Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a0498fac-4c68-392a-9f0a-f6a4317524b7.roa
File:                     a0498fac-4c68-392a-9f0a-f6a4317524b7.roa (raw, json)
Hash identifier:          TPcEoT/ofP0yVcWWes0F2A9ahCg/x5/GyLO+livkf20=
Subject key identifier:   DC:55:72:64:71:BD:F6:46:F8:E8:4B:85:A5:A0:9A:90:42:01:8C:9F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AFC1C20086F6767D5C464E020
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a0498fac-4c68-392a-9f0a-f6a4317524b7.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        174.220.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:20:08:6f:67:67:d5:c4:64:e0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=ad413fb7-ed42-42c5-bef6-38ecddbce607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9e:0c:84:22:e6:b2:88:9d:bd:86:f2:ba:10:
                    29:d1:16:24:69:6a:fb:71:80:08:e1:f3:fb:6d:92:
                    69:00:a5:b9:87:de:f6:58:76:6c:b9:1d:21:26:1d:
                    95:db:48:5d:27:12:67:a2:fb:aa:3c:34:95:ba:54:
                    9e:d3:72:3f:bf:50:9a:8b:b6:b4:7c:72:ef:a3:47:
                    83:47:7a:65:85:6f:c9:28:80:65:67:37:55:1d:fd:
                    75:58:33:41:81:f3:eb:e9:75:f7:f0:64:73:76:fb:
                    08:c0:9b:6e:0e:8d:f1:c2:77:c6:da:72:2b:c2:84:
                    0d:d9:94:88:91:5b:80:20:20:fc:44:52:d9:a8:49:
                    cc:bd:81:25:dc:35:aa:88:9a:80:4b:e5:8a:9e:e1:
                    b0:f6:90:1a:2e:b5:47:1f:da:64:99:b2:f7:da:ca:
                    7b:f2:e7:90:2b:ea:2d:2e:91:85:c6:4b:7d:90:27:
                    53:50:f7:26:a6:84:d4:7a:c8:3d:92:de:15:53:46:
                    44:34:e4:f6:3d:9a:15:7f:20:64:01:62:60:a3:e3:
                    7d:6e:5b:09:62:0e:61:10:85:9a:e5:3e:d2:70:9d:
                    5c:3e:16:44:68:53:4a:71:f3:ab:e9:6b:f7:01:a9:
                    56:3d:3b:22:8a:39:f1:d9:cf:d2:b8:56:f4:51:48:
                    00:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:55:72:64:71:BD:F6:46:F8:E8:4B:85:A5:A0:9A:90:42:01:8C:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a0498fac-4c68-392a-9f0a-f6a4317524b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.220.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:ee:aa:fc:94:fe:d7:44:7b:18:35:c5:54:16:d9:5a:13:eb:
         b0:39:bb:3d:aa:b9:b7:a5:13:0a:7f:4a:73:40:04:90:49:a8:
         a3:ec:94:80:9c:71:57:94:26:ae:eb:c1:7e:13:11:63:06:47:
         2e:6f:55:16:16:20:01:43:53:b7:c8:73:64:e0:e2:f9:0e:85:
         45:6c:4e:4b:f8:78:19:36:7d:cd:39:03:df:37:97:de:f5:4d:
         a7:5a:1f:93:d9:9d:e6:66:bf:31:d5:dc:f5:75:c1:a4:06:69:
         e4:51:44:42:6b:2f:e8:3e:98:86:62:0b:16:b9:2b:cf:d4:e2:
         3e:10:21:46:e9:07:8f:28:69:d5:86:4d:fa:3e:af:51:53:d5:
         e5:68:e6:6f:6b:06:96:08:42:01:77:08:32:0a:22:2a:3e:a9:
         c5:54:97:23:e3:bd:a3:72:be:b2:92:3e:68:ed:df:86:24:7a:
         84:d8:23:3e:f5:5b:8c:1d:c8:53:bb:af:c3:5d:6b:32:77:4d:
         f1:6f:46:27:ef:c6:c7:0c:1a:4b:4a:28:a5:02:c6:59:ab:26:
         7a:ae:87:0b:a8:f1:24:7a:67:16:d7:cf:96:12:e3:99:ac:ec:
         d7:70:7a:06:81:4f:01:8e:26:7e:14:6a:f9:ae:13:bd:8b:cd:
         cc:67:0a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:52:06 2025 by rpki-client