Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb20ce80-2683-3f42-83b8-883beb4f12d8.roa
File:                     fb20ce80-2683-3f42-83b8-883beb4f12d8.roa (raw, json)
Hash identifier:          YeBs2FceZl+sZWuK5kDsXeifQepcc+/T1ziqg677+H4=
Subject key identifier:   15:92:38:27:D9:D4:EA:21:B0:7B:CC:29:5C:83:7A:FD:A3:D4:8E:D8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B609CAB4082B28A2E4503D580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb20ce80-2683-3f42-83b8-883beb4f12d8.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        174.194.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:ab:40:82:b2:8a:2e:45:03:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=415b1d47-23e2-4a50-a36f-a2e1b3f0e78c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:10:6e:11:5b:c8:33:4a:d4:48:d2:d2:33:66:
                    d2:d1:58:35:89:e9:77:cb:18:97:72:8e:29:de:78:
                    64:39:4a:3b:62:46:27:9d:57:17:72:75:10:5c:7a:
                    31:2c:91:ad:7e:33:54:bc:c0:19:e9:6d:b4:23:28:
                    08:67:e0:54:01:e9:ba:dc:1c:9d:f5:e8:11:a7:57:
                    b3:85:2c:50:12:6e:f7:96:64:1e:66:4c:7c:c4:2b:
                    12:ed:66:fe:c8:cd:82:c1:09:8c:9c:14:c6:40:bb:
                    f5:07:f2:6a:1c:74:cb:cb:87:79:74:f2:e1:45:15:
                    47:2f:26:1a:3f:b7:44:38:eb:c7:0a:da:8c:54:25:
                    b0:b4:b8:be:dc:27:9a:28:f6:b6:d3:f6:54:2d:e0:
                    78:1f:15:20:91:18:3d:2b:f1:cd:c7:6b:49:20:f5:
                    dc:2d:65:57:db:3d:8f:7d:59:04:9c:ca:45:ae:2e:
                    0d:81:a2:e6:cc:ce:ca:b7:29:c1:1b:a9:9a:7d:48:
                    0a:2d:9d:3a:e6:d3:1c:36:04:7d:97:65:b1:db:d3:
                    5e:ab:16:ad:0c:c2:ca:d8:7a:6e:1a:64:d9:d3:e8:
                    1f:c4:13:24:03:8d:a7:c8:f6:e9:08:8e:df:44:28:
                    a4:e6:1c:72:40:c9:c6:84:62:89:5d:41:61:83:8f:
                    bb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:92:38:27:D9:D4:EA:21:B0:7B:CC:29:5C:83:7A:FD:A3:D4:8E:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb20ce80-2683-3f42-83b8-883beb4f12d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.194.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:1c:a3:fe:9d:54:39:a2:bb:c2:6c:4a:37:e1:b3:c5:7b:68:
         5d:1b:ca:cf:27:d5:ba:81:5d:1e:42:e8:93:e5:56:82:41:49:
         38:e4:cf:6e:18:a8:a0:a5:aa:ea:2e:75:bd:81:c9:1c:32:92:
         a2:7e:2c:d8:54:58:49:b5:80:fc:e9:02:b3:8a:8a:1e:f5:ab:
         ea:ea:7c:a5:80:5b:52:0a:80:07:63:fa:9b:8b:01:21:34:f3:
         07:d5:d4:ef:73:6e:2c:71:da:70:2d:db:21:40:6c:d6:a9:1d:
         a6:0f:96:aa:ff:05:2b:72:8c:91:0b:bd:0f:08:93:e2:a1:c9:
         eb:71:c9:ee:9d:a8:7e:93:bd:d8:85:1d:16:91:75:89:20:80:
         1a:b0:c9:22:e9:eb:da:2f:50:d5:65:07:c1:4d:eb:9a:85:5d:
         29:a4:9d:5d:23:cf:d1:c0:29:5c:32:e6:63:a6:0f:a9:de:75:
         17:f3:8e:a2:ca:30:75:d4:5d:b9:31:da:c1:9a:2b:a5:53:0a:
         25:09:20:aa:9a:a6:3c:e0:39:7e:9d:8e:cb:bb:75:39:52:84:
         8e:91:af:bc:ca:9d:04:f5:f2:4e:32:68:a9:1b:68:f1:94:86:
         b4:2c:53:bf:59:00:77:07:19:ed:c9:e7:1f:f2:21:43:82:49:
         f8:fd:03:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:13:32 2025 by rpki-client