Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f75bf140-96bb-39c6-9751-302d7120307b.roa
File:                     f75bf140-96bb-39c6-9751-302d7120307b.roa (raw, json)
Hash identifier:          0VYTLbt4JutKPWAIG5ACK5gh8WT4qYzxsg++FH0nZmQ=
Subject key identifier:   77:28:22:89:58:53:53:B5:53:B8:AA:DF:F5:B2:43:70:E0:32:62:71
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B609CAF9265BDB0F88D24C980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f75bf140-96bb-39c6-9751-302d7120307b.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        174.213.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:af:92:65:bd:b0:f8:8d:24:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=01fbd63e-7066-4b55-b040-3069cab03f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9d:42:6a:72:c2:15:f1:7c:84:27:3a:d6:0a:
                    01:ef:b2:37:85:28:1b:8b:d1:bc:12:18:e3:f1:37:
                    0e:51:46:a5:59:48:74:4c:da:c7:ad:ca:bd:ba:48:
                    86:4d:7b:75:48:d5:e8:1c:ee:84:bc:20:9e:db:05:
                    1b:67:d1:d0:f9:a0:0b:91:1a:8e:b2:d8:18:28:5b:
                    0c:3a:15:78:2d:a0:b3:8c:09:f2:81:cd:78:5f:0a:
                    bd:e2:40:85:e6:3e:bb:f0:16:e5:cb:92:45:03:63:
                    44:bd:31:fb:59:05:59:32:cd:8c:16:99:7b:49:4d:
                    24:fc:f7:80:14:f0:ff:9f:98:3d:4f:50:0d:ab:9a:
                    c6:84:fa:d2:8c:85:98:a4:f0:ae:b5:06:d0:b7:e3:
                    05:1a:89:78:80:31:a3:a7:b3:66:4b:cb:de:53:44:
                    c4:64:fd:51:b1:25:1f:25:44:ff:d0:d1:2e:3f:b5:
                    ec:84:cd:18:63:a4:99:59:53:1f:6c:7f:60:54:79:
                    21:88:e0:70:2f:11:9e:b1:8f:e1:42:7e:31:9c:f8:
                    c4:e5:89:dd:8b:fd:23:ee:64:6e:34:84:79:20:01:
                    96:22:90:e1:c6:3f:97:82:3e:44:d3:cc:8d:44:56:
                    ec:08:b1:50:37:25:83:ef:b8:a7:54:33:54:28:a7:
                    69:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:28:22:89:58:53:53:B5:53:B8:AA:DF:F5:B2:43:70:E0:32:62:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f75bf140-96bb-39c6-9751-302d7120307b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.213.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:81:a2:31:e7:b8:eb:82:fb:bb:02:fb:70:3c:10:e9:7a:99:
         a0:a4:31:43:44:57:19:54:2f:87:0d:7e:01:5f:43:27:ac:48:
         16:29:41:ce:89:52:0a:f4:16:ca:d8:f5:06:57:79:46:f4:e1:
         fa:61:be:9b:a3:a6:8f:fc:11:f8:8c:af:3d:74:8b:29:95:97:
         a9:de:c1:8c:52:4e:f4:38:8e:53:97:73:2c:73:b7:d8:d2:83:
         06:84:c6:ac:cf:4b:32:22:1c:e2:3a:db:98:73:b0:56:84:9c:
         6f:4e:c7:48:ad:2b:a5:f2:1d:97:48:c0:d6:3f:e4:57:53:75:
         07:e3:40:ae:42:5e:1d:fe:0a:ed:77:3b:d4:49:30:e2:9f:cc:
         38:e2:9b:1d:3d:61:b7:cc:1e:1e:eb:79:58:51:20:13:2f:92:
         cb:86:5c:3f:5a:d0:29:82:40:a2:bb:b9:33:06:f7:0f:94:e9:
         b0:e6:06:c7:b0:db:44:ef:52:c2:84:83:e3:d9:c1:56:c7:fc:
         95:f5:03:ae:fb:cb:2f:c1:42:ac:5a:b4:1c:88:7c:40:f1:d6:
         23:95:45:92:84:cd:a6:78:8d:ce:de:04:d1:5e:ed:c9:49:1e:
         24:9f:2c:35:74:4c:95:a5:e9:c9:77:83:29:03:34:d2:e4:3e:
         85:37:39:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:10:47 2025 by rpki-client