Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52071ad1-fd19-3aa5-b641-5e1fb54c1e9e.roa
File:                     52071ad1-fd19-3aa5-b641-5e1fb54c1e9e.roa (raw, json)
Hash identifier:          Fus4COjLM0RqUGUQDeh5MGMqdhMldDuyj9Nji2IAjag=
Subject key identifier:   76:96:C4:31:FC:65:7E:EF:87:C6:14:2E:25:7F:88:55:20:C4:B4:C0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AE196AA248FA18B929D91B4C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52071ad1-fd19-3aa5-b641-5e1fb54c1e9e.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     22394
IP address blocks:        174.38.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:aa:24:8f:a1:8b:92:9d:91:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=b0d38f92-6033-4157-b8bf-9647da712a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:55:93:bd:9f:cd:3a:3b:b2:ae:9c:7e:d8:ea:
                    3b:72:fc:38:d3:69:14:8a:f5:f5:86:61:78:78:69:
                    35:e7:53:d7:3a:ba:7e:0e:a1:65:b4:1b:73:95:19:
                    a6:7c:8b:89:4a:64:cd:81:f3:cd:1b:cc:dd:3a:2f:
                    5f:bf:b6:16:ec:56:b5:6c:1f:d2:d0:24:18:ff:63:
                    9b:54:62:0a:73:1a:55:2f:0b:ef:cc:ee:9e:e6:23:
                    c7:c9:5c:35:08:7b:a3:af:c1:d1:58:08:7f:cf:38:
                    8d:4b:85:97:c3:22:65:50:57:33:75:ee:28:24:0a:
                    b2:24:d3:e1:1f:cc:a5:3d:16:f9:4c:1f:8f:95:86:
                    54:45:db:f1:fe:fd:15:e4:92:70:b2:98:0e:9c:2d:
                    60:fd:21:ed:87:40:f8:ea:7a:fd:c1:7f:f5:26:a7:
                    9c:11:ae:13:9b:d5:70:47:78:82:ab:4e:5c:65:4c:
                    f5:41:af:4e:be:6e:23:79:d4:d5:1d:fb:2f:58:28:
                    bf:a9:db:10:a7:2c:63:a6:c2:b4:71:d9:36:e9:9e:
                    4e:98:63:48:28:e3:c3:e4:35:4e:db:ef:f1:0f:3b:
                    84:0e:73:48:92:31:1f:9d:8b:7b:4b:49:a8:bf:11:
                    e4:0c:6c:0f:6f:76:f5:fa:45:25:28:07:a1:25:c0:
                    8d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:96:C4:31:FC:65:7E:EF:87:C6:14:2E:25:7F:88:55:20:C4:B4:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52071ad1-fd19-3aa5-b641-5e1fb54c1e9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.38.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:43:fe:6a:3f:bc:14:29:69:97:65:14:a6:a3:7e:8a:c2:62:
         18:18:2e:dd:ca:ca:fb:59:49:6b:da:52:85:51:d4:ad:47:9f:
         b4:2d:eb:98:85:44:2b:df:cd:42:02:c4:f7:6d:04:38:c2:49:
         b3:52:e1:78:76:c3:61:2a:02:20:a5:0f:f3:25:74:2c:ac:34:
         5b:74:20:d3:60:a0:ac:15:a1:b6:4f:41:33:39:39:8a:c2:4b:
         f3:c8:3d:68:ea:d0:e4:3d:a8:70:16:99:d6:c2:15:80:c3:2f:
         74:f2:ab:4f:49:98:3d:c0:14:74:51:67:a2:04:dc:c3:75:79:
         a8:95:a3:0c:fd:72:cd:ba:d5:5e:ac:dd:11:3b:90:a5:ca:0f:
         63:86:76:66:7e:dc:6d:62:91:03:82:96:85:3b:9b:b1:e0:f4:
         b2:c9:a4:49:98:92:da:4c:fb:ed:92:fc:77:77:5f:41:bc:54:
         14:60:36:86:b1:7d:5d:61:13:c5:91:98:46:bb:f5:b2:d7:f4:
         eb:56:f8:6b:bf:7a:e3:ee:a3:82:0d:f0:48:42:f7:7e:90:42:
         d6:95:83:52:c1:bc:b0:37:13:16:98:e8:01:33:7c:de:09:68:
         c6:72:27:83:a7:b9:c3:d3:71:3b:a8:fd:b6:82:42:ff:5d:fa:
         6e:b3:c8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:50:44 2025 by rpki-client