Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4e60823-f0de-3369-bb3d-ab9edd16fdc3.roa
File:                     a4e60823-f0de-3369-bb3d-ab9edd16fdc3.roa (raw, json)
Hash identifier:          +x2UgHiDKfZTmLtrEgki08/N77wObMeeDPOv2r7k8FE=
Subject key identifier:   E2:45:23:E7:39:E1:EF:46:0C:A3:56:4F:6F:9D:A0:0C:AB:EA:A6:79
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B609CB236668535C577EA6700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4e60823-f0de-3369-bb3d-ab9edd16fdc3.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        174.224.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:b2:36:66:85:35:c5:77:ea:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=af8f8395-6d26-4fd2-b8ec-2174ee286ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ec:3f:50:f4:f2:62:5a:5e:61:f3:2c:36:92:
                    dd:6e:c5:8e:64:5c:35:64:b2:fb:1b:28:ba:a4:6c:
                    93:8a:1a:68:39:f9:f6:e6:89:6e:c1:24:6a:b4:d2:
                    90:7d:3b:ce:d3:b2:2a:bc:a9:1b:31:a6:f6:9b:59:
                    d4:20:62:33:59:1a:e6:71:6a:27:ae:8f:27:d3:c5:
                    0a:2c:9f:bd:53:ad:de:50:06:3c:7c:28:8f:78:2b:
                    6e:ed:ad:4b:53:fa:86:22:09:c2:1f:56:9a:fc:ba:
                    6c:0a:b2:63:0d:d0:bb:df:6d:8b:19:be:50:85:b1:
                    8d:dc:57:7c:b6:2d:ae:6e:7e:00:84:80:31:d2:ad:
                    5e:9b:2c:06:dc:b4:1e:3d:aa:4f:13:e1:38:9c:00:
                    82:33:f0:2d:8b:f9:ab:c9:f9:dc:5b:08:b1:e1:36:
                    00:a2:c7:ec:58:25:f1:13:d7:48:de:84:f2:88:8f:
                    48:05:a6:91:07:fc:1f:e1:0c:70:16:0c:0d:42:cf:
                    11:df:4f:44:b0:0b:2c:17:b5:b1:81:b0:89:8f:81:
                    b3:df:69:e4:56:a2:f9:df:53:44:2c:98:b1:c1:14:
                    28:f9:c8:a1:73:7b:42:21:a2:2a:57:96:fe:98:49:
                    0a:fb:67:cc:90:33:20:51:78:cf:ee:f0:a9:12:59:
                    c5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:45:23:E7:39:E1:EF:46:0C:A3:56:4F:6F:9D:A0:0C:AB:EA:A6:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4e60823-f0de-3369-bb3d-ab9edd16fdc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.224.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:ff:62:9e:b0:e0:e9:a3:52:87:18:30:57:8b:eb:d6:81:6d:
         70:53:94:a3:bc:eb:84:3d:b9:0e:36:eb:c2:59:3c:db:9b:97:
         dc:03:3b:7d:8c:6f:d9:84:9b:e4:8a:3c:4b:bd:08:28:cf:4f:
         1c:0e:94:c7:3a:47:28:a3:2b:88:b6:c4:e1:95:33:c7:2d:3e:
         1e:e7:b5:7c:49:08:dd:08:ee:73:9e:62:1e:e9:33:7b:de:5d:
         c8:14:ee:11:95:e6:70:21:e3:93:9a:7a:34:41:77:2a:8f:e3:
         9c:f8:02:1d:89:46:9a:b8:52:b8:8d:1a:51:82:24:c6:f0:c0:
         cd:4a:d3:32:53:be:f7:f1:fb:0d:10:c0:2d:4d:fd:f5:7f:04:
         31:f8:30:5a:d1:88:b5:7b:f6:c6:30:fc:78:de:3e:d8:1c:e8:
         98:8d:33:1a:1d:b1:94:07:a6:80:eb:53:02:ee:e8:b1:a5:dc:
         ab:d5:a0:a4:54:42:ad:36:33:99:d2:61:d1:ab:0a:ef:7b:fe:
         a7:9e:8d:67:5b:a8:dc:7b:25:79:50:13:71:e1:65:c0:da:0a:
         10:ad:74:3e:ad:a7:20:8e:cf:dd:af:2f:8d:68:b7:46:a6:e0:
         17:de:35:99:75:b7:78:6e:3a:60:09:10:6a:4f:33:17:c5:4e:
         91:0c:12:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:54:51 2025 by rpki-client