Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e543a0b-cd49-373a-8853-83c45c8f4dcb.roa
File:                     5e543a0b-cd49-373a-8853-83c45c8f4dcb.roa (raw, json)
Hash identifier:          gw1daQFsRDiKfYdmt0tQyN/PCKdlBtohqN0O6YSJdpE=
Subject key identifier:   18:EE:1B:87:C7:3A:78:23:DC:00:09:87:E2:CF:FA:B6:5F:EF:32:22
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B87B2328375E263594ACE9C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e543a0b-cd49-373a-8853-83c45c8f4dcb.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        174.238.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:32:83:75:e2:63:59:4a:ce:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=453dfdcd-1a29-438d-b77a-a32b0862f1b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b0:b7:d4:ef:09:07:21:28:dd:15:ce:35:68:
                    7b:e5:e1:56:27:43:43:a4:83:e6:14:d8:9b:17:69:
                    1a:79:66:4c:66:4a:c9:62:56:32:55:ae:b5:e7:c2:
                    9a:73:0b:07:54:66:cd:a7:f9:b9:78:3e:9d:1e:57:
                    fd:33:10:05:5c:3e:01:86:49:d4:ad:d4:fb:dc:33:
                    ed:9c:61:e9:2a:d3:87:1b:e3:73:f4:11:1c:9c:ef:
                    36:1d:dd:d6:7c:89:ed:7d:2f:99:c8:76:26:0b:d7:
                    8a:b3:24:94:f4:c5:75:b6:62:b6:b3:66:92:01:90:
                    9b:27:18:b3:89:ea:e2:91:68:50:31:5c:2c:88:c9:
                    03:b1:41:2a:4a:5e:84:70:f6:19:f3:b3:43:20:8c:
                    fa:e7:6c:b9:d9:f3:0d:4c:9c:70:35:9f:53:a9:88:
                    c2:05:dc:8b:bd:81:9f:12:2c:63:e8:7b:25:61:0d:
                    11:ef:2a:6a:ea:fd:04:a5:db:a7:56:60:72:47:ee:
                    0b:ed:8f:01:2c:a1:df:6e:cc:1d:1c:71:69:16:d2:
                    82:97:e5:25:6d:ff:d7:65:af:63:63:ce:97:c6:80:
                    a5:95:5b:7e:47:5c:a3:90:b3:2e:bc:23:b6:fc:74:
                    b8:1e:bb:be:71:15:58:c3:7e:b8:b8:fe:b5:fd:22:
                    f6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EE:1B:87:C7:3A:78:23:DC:00:09:87:E2:CF:FA:B6:5F:EF:32:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e543a0b-cd49-373a-8853-83c45c8f4dcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.238.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:a1:74:ac:cc:4e:64:8c:73:74:0a:e0:7c:81:e0:86:33:a8:
         54:31:6d:56:90:17:f1:d3:0e:15:74:8e:b7:23:b7:1b:d0:70:
         98:ca:21:0c:c2:34:13:a7:33:93:d6:77:41:c2:e7:79:45:9d:
         d2:93:eb:85:73:27:65:e7:b3:b9:59:8e:47:cb:9a:38:3d:1f:
         d9:77:a4:c0:18:0e:77:d3:b8:d1:d4:91:6e:16:f9:24:61:fd:
         15:c6:15:d3:3b:81:b4:8b:3d:9a:d5:09:12:1e:f1:ec:cb:fb:
         93:10:2d:f0:f8:cc:d4:09:5b:99:17:5e:ce:17:12:2d:02:3f:
         03:78:fe:ab:f1:4c:e1:f6:44:d6:a2:b8:24:fe:d0:6f:36:31:
         a8:46:55:27:82:f5:33:c4:11:32:65:11:6d:f2:3c:26:75:16:
         69:ce:e8:b3:e9:00:0e:26:28:1a:d4:c5:9e:9d:9c:03:8a:62:
         58:c5:3f:b3:4e:53:34:78:97:4d:67:60:78:11:d7:c3:9d:d0:
         3b:9e:7e:1b:30:01:3a:5f:da:56:ed:f4:5c:15:e8:15:33:48:
         e5:fd:a7:10:77:6c:27:2d:d8:02:9d:c2:f1:aa:46:dc:fd:be:
         f2:5b:60:a1:31:4d:c6:39:fd:8b:fb:9a:f3:8a:a2:01:f1:7f:
         15:f1:af:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:06:50 2025 by rpki-client