Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e9127117-4973-3fd4-bf09-509ad1481762.roa
File:                     e9127117-4973-3fd4-bf09-509ad1481762.roa (raw, json)
Hash identifier:          xojiTTD40mZh/J9TMpXY92U7jqWlI4UmNMOJe9IJyRg=
Subject key identifier:   FC:6E:54:1C:27:7A:E4:82:96:68:9B:03:89:8B:AB:20:03:89:7B:10
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B609CB154DC36DE50EC672720
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e9127117-4973-3fd4-bf09-509ad1481762.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        174.224.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:b1:54:dc:36:de:50:ec:67:27:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=afd212ad-7669-4e32-8454-2013d00127ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:05:e1:2e:72:d0:98:d3:b2:d0:bf:90:8c:57:
                    44:b2:26:2c:76:c7:62:2b:7e:4e:21:60:d0:8c:95:
                    b0:56:ba:6c:87:56:e3:22:29:4f:57:14:02:ba:4e:
                    6c:2c:0e:0e:3c:5b:db:49:bd:76:eb:f4:4b:50:ca:
                    8e:1e:ee:b7:f8:77:f3:3f:48:c8:ee:78:cc:24:9f:
                    15:8b:13:22:5d:bc:f6:cc:f5:63:b0:78:8d:a0:0f:
                    65:d8:44:3d:22:18:55:ee:68:fd:4c:9e:db:77:a8:
                    83:93:b4:3f:78:72:61:bf:9c:3d:b5:20:49:06:48:
                    c5:79:bb:7d:a8:c2:bd:ac:9c:19:fa:2d:b7:bd:49:
                    47:0c:3d:95:5f:27:5c:6c:32:c9:99:68:e2:ab:02:
                    1f:60:a7:36:ec:c9:dd:89:98:35:7c:7c:c6:9b:f8:
                    20:cd:32:1b:36:cf:35:61:72:6b:e8:f6:c4:21:38:
                    46:58:62:4c:52:ef:56:d8:61:3a:d5:7b:20:96:a6:
                    03:41:5c:81:4d:33:59:a0:a7:cc:a5:50:5e:dc:38:
                    3b:1e:60:64:30:cb:d5:41:70:7b:11:03:35:16:90:
                    ec:ad:a8:f6:91:64:0e:a8:51:6f:10:6b:a2:74:d1:
                    72:f7:3e:55:bf:8e:6c:b4:ad:10:50:09:45:d2:70:
                    29:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6E:54:1C:27:7A:E4:82:96:68:9B:03:89:8B:AB:20:03:89:7B:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e9127117-4973-3fd4-bf09-509ad1481762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.224.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:cc:bc:f5:6c:45:f2:80:ac:2e:3f:52:00:8b:4c:40:03:61:
         8d:2a:90:6e:6d:20:87:f7:94:fe:f3:cb:38:d4:60:62:43:d7:
         ec:66:9a:5b:8f:47:4c:b0:cf:58:43:33:c5:5b:36:d3:eb:b6:
         0b:34:73:23:28:2a:9b:57:bd:f9:87:31:c3:34:6a:ac:dc:cf:
         c9:2d:00:e1:35:67:e5:9c:b8:a5:e8:60:2e:4c:e4:55:3b:02:
         48:2c:e5:18:e7:56:b4:83:66:17:f8:11:de:99:91:ce:4f:d7:
         cb:8a:be:b0:d0:61:21:ba:f5:33:e1:bd:ed:08:89:b4:a6:ed:
         8e:9a:e8:11:58:e8:7e:0e:69:3d:60:ea:28:63:7c:ce:42:e9:
         44:cb:6b:ed:d9:d1:45:d1:54:1f:37:67:38:d6:65:1b:9f:3d:
         6b:d1:5d:51:4a:c7:c9:a1:8f:98:30:ff:47:6d:4e:32:fc:5a:
         d4:0b:ba:8e:8f:ce:40:1a:65:d3:0a:6c:a5:f1:df:1e:a0:e6:
         b3:be:d5:42:55:87:fd:c9:16:ac:41:19:20:e4:2e:7a:b6:1c:
         ef:14:82:50:1e:bf:3b:fb:31:49:a6:2a:d0:7e:ec:14:67:88:
         82:a2:df:2e:9f:65:67:3a:c0:2c:bb:9a:0d:99:1a:7b:a7:ee:
         62:6a:ad:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:10:42 2025 by rpki-client