Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/490a29b6-2a93-3a29-b3ba-b50184bd36f6.roa
File:                     490a29b6-2a93-3a29-b3ba-b50184bd36f6.roa (raw, json)
Hash identifier:          5bdJvIrCPf/tmjWOB6z0JpSYm6E9CT2CJsQNH4t4G4U=
Subject key identifier:   C6:FF:B5:E0:0A:58:15:F2:79:D4:C3:8A:57:70:B5:AB:5C:7E:F5:D8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD23BDBADCA1CB3E4B1A30200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/490a29b6-2a93-3a29-b3ba-b50184bd36f6.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     701
IP address blocks:        74.110.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:db:ad:ca:1c:b3:e4:b1:a3:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=975dca1d-75f1-46a7-af94-0cbd9025f5a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6c:4b:a8:bb:e7:e4:f3:ee:6e:bf:2d:10:3d:
                    7e:54:15:7d:c1:6e:26:f4:ab:60:8e:c2:76:00:47:
                    26:d5:c1:7c:a3:91:7d:56:51:c1:9a:c5:dd:b5:9d:
                    32:c3:cd:66:21:28:89:c4:32:50:3a:aa:c4:6c:1c:
                    e7:96:96:94:2c:26:f2:eb:db:ca:5f:75:bc:0c:a4:
                    41:36:99:fb:73:75:e7:8c:4e:3c:d8:1e:9a:f3:2b:
                    35:5e:85:f5:58:c8:fc:f1:01:87:53:ed:de:ad:17:
                    60:42:b2:7c:9d:b8:d6:43:02:24:3f:9f:44:22:c3:
                    b2:a6:29:42:ae:00:5c:0f:6e:ab:60:83:7b:e7:99:
                    51:2a:ff:c7:81:15:61:59:4b:93:5b:84:99:5b:0a:
                    93:c5:88:75:fb:9c:8a:e0:bc:8d:a8:09:02:d9:2b:
                    b5:09:83:d7:2c:ea:02:5c:f2:10:7e:47:23:42:04:
                    bc:62:31:eb:72:f5:84:a8:df:41:fa:f6:3c:ca:4b:
                    d8:52:35:6d:01:fd:2d:93:43:90:f6:e2:33:ed:77:
                    3c:37:b8:0b:e1:b2:21:f1:12:a7:9d:e6:24:cb:51:
                    4a:90:22:17:f1:ff:a3:6e:23:76:bc:a0:9b:fa:2c:
                    91:07:5f:50:0e:7b:37:bb:be:54:9e:17:84:cf:fc:
                    03:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FF:B5:E0:0A:58:15:F2:79:D4:C3:8A:57:70:B5:AB:5C:7E:F5:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/490a29b6-2a93-3a29-b3ba-b50184bd36f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.110.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:d4:e9:9b:97:53:d9:23:4c:45:c8:da:14:d7:83:c7:6e:da:
         29:b7:fc:a4:ef:a9:6f:00:ce:3c:95:cf:a5:a3:b4:9f:87:7f:
         0b:d4:b5:ee:e7:eb:b5:44:d0:a5:10:b8:8c:ad:26:fe:cf:2b:
         98:cb:fb:e2:cb:2b:6a:d9:51:5d:64:be:84:32:13:fc:ee:9c:
         58:6b:9f:0a:83:2f:ef:05:d0:12:b0:2a:dc:01:9b:58:9a:96:
         b2:4b:c6:b6:05:77:4f:4e:ee:08:38:bc:31:a8:1e:01:be:37:
         a1:ad:93:5a:6f:86:50:50:9d:cb:b8:ac:71:0e:cd:3b:49:68:
         87:f3:a4:76:f1:7c:3c:03:b6:78:e4:7b:70:de:8d:44:53:78:
         5e:1d:6d:70:ef:e7:1e:7d:e7:46:b7:4a:d9:89:dc:e0:50:a3:
         fa:35:71:15:95:cf:35:32:a3:5d:f8:08:fa:21:97:cd:ac:ca:
         b5:06:7f:b4:88:dc:44:3d:c6:9b:d6:40:d3:6c:eb:7b:c0:3a:
         fd:c8:c6:1e:36:cd:e5:1b:a2:f2:67:b0:6b:72:16:44:f7:ed:
         45:e8:4c:48:36:02:f0:92:91:07:34:3c:51:a9:4f:b0:9d:52:
         e1:12:21:f0:9e:25:ae:69:1c:72:11:bf:16:e8:8e:27:4d:62:
         84:22:9c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:30:03 2025 by rpki-client