Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a4dbbb5-282e-3b13-874d-c1c4aba6acb4.roa
File:                     5a4dbbb5-282e-3b13-874d-c1c4aba6acb4.roa (raw, json)
Hash identifier:          WIQUpFd1whSZcEwvDldSD24IdCkdcmD+Ok01MiUnOBU=
Subject key identifier:   1A:44:76:07:E8:12:0E:1D:90:BB:AE:5D:79:50:A0:55:9E:11:C7:A3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B609CAEDCC4C42B4143954700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a4dbbb5-282e-3b13-874d-c1c4aba6acb4.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        174.212.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:ae:dc:c4:c4:2b:41:43:95:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=27e87dc2-5e9b-4137-b9ed-fbbb5be8fb34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3a:5f:16:d5:0d:7c:6a:13:90:ae:8b:72:b3:
                    2a:cf:b0:ad:a0:e8:53:bb:9a:64:ae:bf:aa:cd:84:
                    cf:b8:23:7d:d0:a7:a8:8e:7e:69:59:13:16:b7:68:
                    05:97:61:64:e5:bf:6d:05:92:ba:60:5b:df:3f:e2:
                    01:e3:f2:41:b9:ac:52:4b:f7:c6:0d:5a:c4:16:6d:
                    05:19:d3:35:a9:39:81:36:37:b0:fd:56:d0:8e:77:
                    87:a1:bc:39:35:b7:9e:47:ba:50:e4:c3:ea:db:92:
                    cd:11:84:5b:9a:f6:7a:26:47:58:a0:8d:5d:cc:a7:
                    da:b0:5e:13:ef:b1:8f:fb:40:a2:71:75:23:48:c0:
                    ba:65:0c:c6:b4:9f:c6:07:2f:c8:29:94:70:d9:1f:
                    1f:10:d2:6f:dd:05:c0:1a:ed:71:96:4f:60:b2:fe:
                    6d:5d:de:94:59:83:eb:d5:d7:81:e7:c3:ce:23:a2:
                    fe:95:63:ae:5f:b9:f9:8e:38:e9:6a:c6:d7:3e:27:
                    ee:eb:5c:70:2a:11:ad:42:73:14:3a:f8:ba:5a:e0:
                    da:2b:61:4f:c3:69:46:fa:8d:ff:d0:b4:f1:a0:7a:
                    91:ab:cb:ad:4e:72:5f:a6:e7:e6:3a:bb:9f:64:de:
                    0b:dd:d2:91:e9:32:af:f3:59:99:ed:78:2d:99:65:
                    13:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:44:76:07:E8:12:0E:1D:90:BB:AE:5D:79:50:A0:55:9E:11:C7:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a4dbbb5-282e-3b13-874d-c1c4aba6acb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.212.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:75:5d:53:54:ef:01:2f:af:d5:b5:92:d5:54:47:9a:6d:08:
         87:d1:f6:a1:0f:18:6f:1a:f6:47:09:92:07:39:59:43:65:2b:
         0f:27:3b:41:4b:6c:22:37:10:96:7e:71:85:fa:4b:b8:fa:4c:
         b0:f9:ae:b6:c9:5d:0c:58:34:cf:cd:63:c3:5e:23:e6:f1:38:
         31:69:5c:dd:43:83:c7:48:b0:a8:db:a5:cb:03:66:5a:30:8f:
         58:7b:bf:14:dd:da:88:9a:8a:b2:df:c8:92:44:2a:a9:c2:40:
         58:16:b8:09:fa:74:26:62:36:aa:c3:0e:b7:30:76:78:ca:03:
         d4:6f:9a:5d:18:b1:6d:ab:35:f8:f3:17:15:f7:b9:8d:62:96:
         84:4b:73:94:24:2b:d2:6f:97:4b:43:5b:99:e6:42:c6:e4:2c:
         60:2a:fb:bc:e7:20:96:aa:f6:5c:d2:eb:3a:86:17:71:9e:0c:
         dd:4f:a5:8a:e3:90:d0:fe:9e:a3:6b:ff:cc:fb:d7:3e:37:f3:
         53:f1:e8:92:5e:8a:47:64:41:a5:ba:fb:3f:20:b6:a1:a5:59:
         6b:90:2b:f7:06:b8:ee:63:58:9e:6a:89:22:b6:81:62:15:a5:
         bc:dd:a4:13:4e:e6:f9:64:bf:5c:90:78:f4:1c:db:35:b6:f1:
         58:77:e2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:00:48 2025 by rpki-client