Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5689d749-a721-3f5c-aea2-6ec4614c7aa7.roa
File:                     5689d749-a721-3f5c-aea2-6ec4614c7aa7.roa (raw, json)
Hash identifier:          eoSAVsikyHxUS/iDeJLEKH5Gr2yfoZmYzJFTCIcG13A=
Subject key identifier:   C9:8B:04:28:6C:6E:C9:6F:95:28:6B:EB:38:3A:F0:96:2D:91:98:AC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B609C97A7E0161E9AAC18FD58
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5689d749-a721-3f5c-aea2-6ec4614c7aa7.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        174.201.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:97:a7:e0:16:1e:9a:ac:18:fd:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=58533ff5-9445-4dde-be9a-e7fb1f491d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:07:47:a5:53:29:52:0a:7b:50:fe:ce:c3:f4:
                    94:47:46:71:a0:74:54:06:d4:13:fe:c6:80:9d:7a:
                    91:ab:32:aa:8f:37:5c:04:37:db:30:c0:fb:ce:6e:
                    89:48:c6:57:e5:af:cb:cd:fe:95:e1:b5:12:a7:42:
                    b8:57:08:3c:07:46:8f:5d:02:16:be:a0:db:a4:3e:
                    08:6f:de:32:86:14:44:eb:78:44:f4:f4:1d:da:7e:
                    2e:e7:bd:db:45:80:ef:85:69:6c:c9:f0:1b:b1:70:
                    a6:ca:56:ff:d0:45:a7:2b:94:97:75:7d:2a:7c:ae:
                    86:06:21:09:b1:d7:35:d0:2a:17:6b:f4:9f:db:a2:
                    95:ca:31:86:d6:99:1c:18:77:f7:2f:d9:31:36:0a:
                    a1:04:72:82:cb:00:14:fc:cc:50:41:78:5a:26:2d:
                    40:59:b6:2c:67:30:a5:69:0d:11:16:f7:96:96:65:
                    d9:ba:57:94:bd:86:a1:36:8d:38:85:71:9e:6c:b9:
                    8d:ad:6a:45:11:67:5b:57:e3:90:37:55:14:3f:6c:
                    8c:5e:12:ae:81:7b:1f:93:de:83:60:70:d4:04:19:
                    c3:55:f1:92:40:e3:c7:bd:c2:5e:87:f2:e8:c4:59:
                    68:fa:f5:1a:a5:e8:0d:61:e1:4f:5e:91:1d:17:87:
                    34:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:8B:04:28:6C:6E:C9:6F:95:28:6B:EB:38:3A:F0:96:2D:91:98:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5689d749-a721-3f5c-aea2-6ec4614c7aa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.201.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:56:e6:7f:85:5d:5f:3a:cc:9d:32:0a:af:f6:1c:e0:6a:de:
         13:66:ad:58:c6:a7:72:62:07:97:5f:4e:2e:bf:26:ca:4b:7e:
         90:8e:6c:09:eb:dd:62:bd:47:2b:5f:2c:d8:df:80:22:41:c2:
         34:32:b4:4b:a2:69:3b:ea:a0:01:c1:8f:ce:60:65:be:82:e2:
         e0:12:67:8c:9e:b5:76:ce:48:44:f3:1b:db:58:be:d5:1b:bf:
         c8:b5:a3:60:06:59:5a:0d:18:53:29:4f:a9:04:6a:8f:c2:73:
         d4:a0:6f:fb:44:a8:d6:ae:00:ad:7b:21:00:ea:12:e5:2b:c4:
         55:7c:2c:9f:34:86:d5:60:d1:9b:1a:88:ba:39:b6:7d:60:00:
         5e:0e:50:45:82:a1:a2:9c:7e:25:e5:4c:03:4f:c6:c5:29:ce:
         d6:ee:eb:22:e2:da:1a:15:77:6b:d3:d4:ab:cd:a6:53:86:0e:
         88:24:33:41:86:32:e7:4a:33:da:4d:2e:06:e3:4f:da:ff:6f:
         88:29:d3:00:7b:88:d9:ed:18:02:8e:7f:00:aa:95:df:f4:53:
         5b:06:1e:ea:64:81:d9:34:36:b4:34:e4:01:02:b9:e9:e4:7d:
         78:3a:8c:23:48:20:7c:9a:d1:51:39:23:51:1a:69:a7:3c:d8:
         50:6b:32:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:01:04 2025 by rpki-client