Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b5b269b5-eba1-3ea0-ae13-408eee779563.roa
File:                     b5b269b5-eba1-3ea0-ae13-408eee779563.roa (raw, json)
Hash identifier:          a2ZcZnyhh+uebOOjF5YG0Uh/aGRlkptDt8SYRxiU8r8=
Subject key identifier:   32:4B:05:22:F7:4A:F6:3D:D7:35:96:FE:19:57:E1:D3:CA:35:83:09
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B609C99FCBE3DF79827B6E1A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b5b269b5-eba1-3ea0-ae13-408eee779563.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        174.204.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:99:fc:be:3d:f7:98:27:b6:e1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=02d49de0-2595-4db1-bbf6-409161889e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e4:45:4f:53:6b:7e:df:46:48:e7:d2:52:b7:
                    a7:8f:79:fc:3e:db:41:1d:30:5d:20:6f:dc:91:ad:
                    f8:a4:4f:a6:8e:18:c6:7b:7e:88:e8:ed:0b:32:92:
                    23:90:d7:ca:3c:0e:c5:5a:2b:96:9f:a2:b1:c4:d9:
                    c4:1b:14:c1:fc:38:7a:04:57:af:1c:0c:82:fc:39:
                    41:82:90:ee:80:74:1b:f5:0b:d8:a6:21:9e:f7:0c:
                    89:63:9d:12:af:00:de:a5:65:04:e0:49:e3:5d:ea:
                    64:39:ff:37:f8:95:ce:21:f5:31:5a:05:27:03:7d:
                    5a:2b:70:ac:2f:af:2a:7f:fa:e7:58:2a:81:4b:ca:
                    59:43:88:ec:cf:77:b0:08:5f:0c:07:e0:8f:4a:be:
                    c3:06:74:46:01:c8:85:fa:33:be:3d:60:9b:b3:53:
                    e7:ca:d3:b2:d6:b1:8b:87:6c:a3:48:c3:a2:32:d5:
                    9d:8a:c9:13:44:14:66:66:91:47:8c:90:f9:a6:61:
                    5b:4c:c7:12:c9:50:8d:a7:af:e3:df:5c:f0:b8:fe:
                    41:99:2b:55:b3:e1:37:ea:47:15:56:f7:39:6f:3c:
                    01:6e:a8:f1:88:f5:10:e1:f8:da:80:40:55:7b:b1:
                    b9:16:d8:79:10:a5:94:61:d9:a4:81:c9:7d:1e:7e:
                    01:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4B:05:22:F7:4A:F6:3D:D7:35:96:FE:19:57:E1:D3:CA:35:83:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b5b269b5-eba1-3ea0-ae13-408eee779563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.204.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:90:c4:a6:74:09:23:10:7c:cb:1a:1e:a3:16:f4:68:95:a6:
         65:f4:2e:e1:64:c4:73:e1:cd:5e:aa:98:93:25:c2:9f:0d:e0:
         08:27:d2:fa:bc:30:b4:12:45:46:b7:96:c8:f2:ca:63:2a:b8:
         ab:21:a2:19:dc:ca:0b:e4:74:21:7c:c7:06:ec:b6:4d:7c:9d:
         95:b2:ac:e7:ce:ab:cd:a4:a6:a5:17:b3:1c:85:11:41:d0:85:
         cc:b5:30:94:c3:21:ac:00:6d:6b:4b:43:73:60:18:ec:d7:0a:
         b5:47:27:c3:9b:d3:7e:48:44:0d:00:e9:ab:5f:60:04:b0:4f:
         ef:9f:90:30:bc:d3:ce:be:3d:eb:d8:a0:b2:b1:50:36:ed:56:
         33:58:2b:63:af:63:16:52:3c:75:ac:88:d8:68:ac:fe:af:5b:
         a1:51:92:f2:85:52:2e:1a:c4:4c:6d:67:5c:8a:40:c3:01:5d:
         62:93:3f:76:7c:67:58:d0:27:d5:64:d7:d0:94:b8:59:7a:e4:
         28:8d:c8:de:3d:8b:4f:f6:cf:91:13:b7:d5:c7:4a:59:1a:9f:
         72:dc:1e:d7:05:28:a6:f5:b0:12:22:62:bc:bf:89:2b:0b:12:
         26:c9:59:b2:42:7c:e7:3e:1f:5a:26:b5:86:09:5a:7d:e4:c6:
         b5:71:b0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:13:43 2025 by rpki-client