Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d853bc6-fb20-3518-b7a5-c8746eba8684.roa
File:                     7d853bc6-fb20-3518-b7a5-c8746eba8684.roa (raw, json)
Hash identifier:          MT2H3txghAZwz+g4yzBdvidpbiuAKjJjLCuf7nmjQZQ=
Subject key identifier:   BC:28:D2:A2:88:BD:72:30:A7:2E:86:F6:A6:17:63:0D:45:6D:3F:FD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AA6F6366221640F44B7983B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d853bc6-fb20-3518-b7a5-c8746eba8684.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        174.226.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:36:62:21:64:0f:44:b7:98:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=f6d8ebfc-96b9-474e-a806-09372b863a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ea:82:cf:87:65:85:a7:0a:86:f3:3f:c9:d0:
                    59:fb:fd:05:51:56:e4:d0:02:cf:5f:3e:67:22:04:
                    2d:9d:d7:d8:d3:a4:6b:42:46:ba:8e:8c:d6:12:d0:
                    63:d8:62:ec:9c:e5:d3:67:9c:f1:9a:ac:86:41:8f:
                    a0:54:e8:23:d9:d7:17:c3:67:72:72:7e:30:14:83:
                    d1:bc:38:ed:45:04:ee:42:3d:99:09:4b:07:82:b6:
                    3b:a4:5b:1a:dd:95:af:e5:f4:fc:02:43:f1:ec:5a:
                    c7:08:55:17:45:7f:be:2c:e2:00:ef:af:32:2c:d7:
                    d8:ca:d6:f8:1a:a1:6a:14:26:3e:18:d2:1d:6d:8e:
                    50:d6:6a:4e:ce:fa:35:bd:4b:8f:0a:0f:89:59:5b:
                    65:f3:db:53:05:4c:50:4d:9b:b1:1c:93:81:e2:d5:
                    53:32:5c:20:52:36:1c:df:c3:b0:58:98:ef:3e:ba:
                    aa:d9:b9:ef:39:86:b9:ba:e2:6f:be:68:31:49:82:
                    49:57:59:00:41:62:db:48:25:31:13:1f:c1:2e:5c:
                    22:fb:10:20:2d:73:98:49:88:27:19:90:31:54:aa:
                    68:99:6d:6d:3e:e2:07:a0:9f:c2:54:8a:2a:db:31:
                    8f:72:da:9c:f7:43:92:3f:5f:fd:f0:ba:8b:0c:d6:
                    b5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:28:D2:A2:88:BD:72:30:A7:2E:86:F6:A6:17:63:0D:45:6D:3F:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d853bc6-fb20-3518-b7a5-c8746eba8684.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.226.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:95:aa:0b:b0:8e:6f:a1:a7:a1:4f:a6:89:e9:d2:66:31:76:
         98:0b:72:42:e3:ba:ad:34:71:ba:25:46:77:51:6d:6d:09:b6:
         f6:ee:35:5f:a8:29:22:64:05:79:cc:4c:94:08:16:64:cb:de:
         a3:19:c9:b6:3c:37:4b:af:44:da:8a:e0:60:6e:a6:95:c9:d7:
         86:2e:b2:92:50:44:11:47:55:fd:63:57:05:22:95:42:d0:df:
         62:ab:f5:cc:9f:dd:63:f4:bc:91:1b:d1:65:e5:82:4d:09:70:
         fc:58:da:d1:6e:02:3f:69:78:72:5a:04:bc:6b:56:ce:4a:b4:
         8c:e7:dd:9c:53:2d:19:73:54:d6:98:54:97:a2:39:0d:c2:52:
         4f:fa:b0:dd:93:95:f0:ec:44:79:14:68:bc:6c:ca:6d:69:87:
         51:f0:07:ef:a4:f2:b8:35:38:6c:be:77:84:bf:6c:57:3e:4b:
         89:06:f4:be:37:36:0c:aa:1b:f5:24:0e:da:fa:25:1c:11:04:
         d6:57:b3:1c:8a:2d:2d:b3:b2:60:ce:db:6c:27:2b:d1:af:3e:
         c2:a0:85:7e:e0:be:1e:e3:8c:6e:00:28:95:95:63:fe:3b:23:
         58:17:cc:8e:96:0c:cf:2a:64:4b:76:82:06:f8:72:58:90:be:
         c3:2d:3d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:14:34 2025 by rpki-client