Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4e02445-06ca-3e4b-8ff5-1222a8849f1f.roa
File:                     c4e02445-06ca-3e4b-8ff5-1222a8849f1f.roa (raw, json)
Hash identifier:          utksgIR1sALoAvazostpbhkxiqTaeTe6uewYabnT/Xg=
Subject key identifier:   6E:9A:10:9F:C2:65:15:31:08:73:F3:FA:D6:11:4E:69:F2:FE:54:13
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B609CB1CD36943EBFBE4ABA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4e02445-06ca-3e4b-8ff5-1222a8849f1f.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        174.224.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:b1:cd:36:94:3e:bf:be:4a:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=4a1547fc-e159-42c7-ad11-3add3807421c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d0:a8:64:9b:69:8b:12:26:91:6a:7a:68:4a:
                    7f:30:14:d1:3b:d6:39:39:6f:a3:b1:81:30:bc:d9:
                    9a:bd:ca:c7:1a:ba:d5:1d:4b:dc:f2:cb:e1:28:7f:
                    6a:c4:bd:4a:77:a4:fd:b2:d1:46:4e:e0:03:04:ed:
                    db:95:da:68:52:a2:6e:e4:ba:88:56:86:5e:e7:34:
                    36:2c:5b:c2:c2:c4:50:97:bc:0f:ec:14:74:9d:32:
                    28:ec:2d:f2:ef:4a:c7:8a:27:b8:7f:b3:55:cf:18:
                    f2:1f:45:a7:60:cf:dd:fd:75:66:fb:72:ab:a0:68:
                    16:a9:08:6e:9f:c2:53:7a:3e:7c:23:a1:61:14:88:
                    5b:7f:7d:f8:90:42:db:d8:0c:6d:d3:d0:ec:98:dc:
                    f6:72:28:23:06:9a:69:44:33:bf:6d:b8:9e:f8:1e:
                    01:ea:23:9a:90:e3:f0:fc:b0:22:d5:6f:e0:a2:60:
                    17:75:fb:35:dd:37:7b:c6:54:51:61:bf:3f:60:a0:
                    18:ba:6a:c9:dc:56:d3:bd:b5:69:63:95:a5:5c:73:
                    71:40:1e:43:b9:fe:a1:9e:90:94:f0:1f:6f:81:87:
                    dc:0e:1f:93:24:df:a1:60:f7:2f:4f:d5:db:10:22:
                    df:9d:06:cb:d8:1c:9a:c9:7e:4a:20:ff:0c:ba:90:
                    ca:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9A:10:9F:C2:65:15:31:08:73:F3:FA:D6:11:4E:69:F2:FE:54:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4e02445-06ca-3e4b-8ff5-1222a8849f1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.224.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d1:67:4f:55:e4:2e:12:fd:b7:d2:e4:d8:d8:f0:5b:6b:f9:
         da:cc:00:26:d4:53:6b:05:ce:03:f7:0f:1a:ec:bb:50:9d:09:
         94:dc:01:5e:5a:6a:57:80:87:43:30:0c:bf:6d:f5:c3:2a:56:
         76:4f:79:5a:01:ca:a9:d9:f1:2c:cd:1f:a6:cc:90:0a:87:5b:
         37:a2:bb:9c:ad:1b:4c:69:82:51:41:57:33:40:84:b0:13:a4:
         96:d6:44:05:e5:a1:a7:33:a4:7a:df:fd:89:48:b0:91:35:69:
         e0:f2:64:c7:65:9d:96:03:f9:c0:73:5b:34:bf:2a:98:d4:b5:
         31:f4:b6:bb:6d:09:71:f0:e7:0c:89:ac:30:8a:90:48:27:d9:
         18:6d:98:fe:6b:8b:5c:0b:ea:d1:b3:e0:0f:9d:1d:32:b0:83:
         40:5c:ae:21:0b:13:31:cb:2f:3b:74:66:bb:29:83:ee:a3:fc:
         96:1b:e3:bd:e4:2c:62:ce:4b:2b:e5:31:ef:6c:8f:0e:62:aa:
         79:10:28:3c:bb:e3:62:fd:1f:ce:a8:57:f2:c7:f8:48:e0:75:
         53:6f:68:51:d9:cd:47:cf:7c:68:33:aa:ee:52:e3:c5:7c:d9:
         39:e9:06:e2:cc:9b:8f:56:2e:93:ec:c8:6c:ef:93:25:40:35:
         16:ce:93:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:06:45 2025 by rpki-client