Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29e073aa-41d2-31ef-9ace-816befecc596.roa
File:                     29e073aa-41d2-31ef-9ace-816befecc596.roa (raw, json)
Hash identifier:          qjciDLwh0P1cDx0mrpC1h2VT2VX90zcOz4IP+fIYfFM=
Subject key identifier:   66:69:CA:65:EA:10:5B:9C:65:3A:46:EC:09:4C:C3:25:BD:BB:11:CE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B87B23187697FD9EFAB4C3F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29e073aa-41d2-31ef-9ace-816befecc596.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        174.236.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:31:87:69:7f:d9:ef:ab:4c:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=ef76de13-bc19-4f5f-86cf-ddb1f9941cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:83:2d:d5:11:fb:38:3b:59:ea:e7:29:95:72:
                    e7:40:e9:88:1e:9c:0c:bc:ee:05:f7:65:01:2e:57:
                    43:f1:28:e8:1e:a1:b7:ab:5a:46:33:47:ce:a0:c6:
                    47:f3:42:81:f2:b0:cf:73:9b:94:61:63:c1:fb:d3:
                    1e:49:24:8a:91:59:19:23:e4:a9:3b:aa:4b:ba:14:
                    ee:fe:e1:df:0f:dd:e5:c8:24:a8:d2:37:02:cd:ce:
                    74:c3:09:d0:00:9e:42:f4:66:a8:32:1a:c4:7f:3a:
                    92:d3:d1:14:de:e2:49:93:2b:58:bc:77:61:48:a3:
                    9c:31:e4:ee:9d:08:e7:f2:96:81:03:88:75:57:3d:
                    a0:6d:d3:cd:5f:a2:1e:b2:42:51:1b:84:77:0f:37:
                    96:1b:45:ca:77:27:2e:14:80:d3:94:08:aa:2c:ad:
                    f7:a1:55:24:5c:1b:f1:53:a4:3c:47:91:f8:8e:0b:
                    2f:54:e2:61:e1:21:eb:5e:b9:9d:31:47:a5:5b:21:
                    39:78:6d:0c:9f:14:ef:f4:d5:ae:8d:d5:4d:40:f6:
                    ae:24:c4:ff:b5:3a:70:0c:f7:4d:0f:63:79:2e:6a:
                    f7:84:08:c1:02:03:c2:0b:55:d6:24:1a:02:2a:ee:
                    0f:8b:01:1a:d4:d3:28:0f:f4:78:c5:47:e8:84:60:
                    ee:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:69:CA:65:EA:10:5B:9C:65:3A:46:EC:09:4C:C3:25:BD:BB:11:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29e073aa-41d2-31ef-9ace-816befecc596.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.236.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:46:ce:0d:e8:5c:39:d1:20:28:7d:1e:39:0e:01:61:77:10:
         49:58:ee:a3:6e:b3:ba:c7:88:8b:65:97:d4:c8:9e:40:e1:97:
         dc:c2:ae:01:04:16:a5:c7:93:c0:b5:73:77:95:ad:5e:63:2b:
         80:5c:39:50:3f:ec:79:35:0f:66:f8:c2:e2:2f:8a:50:5e:bf:
         3e:f1:4b:0f:5c:cb:b2:1e:91:9b:8f:b0:c7:38:ac:86:35:be:
         44:41:3c:74:38:be:6a:f8:e7:e5:96:ce:26:99:14:2a:1c:17:
         23:41:68:4d:03:32:ce:8a:78:68:9b:81:3a:76:fe:c6:74:06:
         66:a1:31:de:be:89:23:a5:1f:82:ee:3f:b5:a2:a5:5b:9a:5c:
         f2:64:35:31:b9:ef:12:43:a0:db:d8:05:fc:79:03:75:72:26:
         92:32:f2:db:39:a5:1c:59:5d:b0:eb:98:fb:91:89:bb:63:68:
         73:2e:10:21:f9:db:c8:cf:14:35:05:82:e3:86:70:60:c3:01:
         e9:19:64:ef:a2:68:d2:36:78:9f:df:58:07:eb:c2:c7:7e:8d:
         50:18:8b:3c:61:82:cc:8c:66:b3:05:85:9e:22:64:22:22:6f:
         00:a8:2b:b3:93:14:95:2a:44:64:33:1c:b7:42:f6:59:11:35:
         8b:54:13:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:10:59 2025 by rpki-client