Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63a6474b-a6a7-3626-8a56-59196517ca50.roa
File:                     63a6474b-a6a7-3626-8a56-59196517ca50.roa (raw, json)
Hash identifier:          5Ouev4dWN+w6UR3SWpOin3u54dD6tyI8loSQUNT9vWI=
Subject key identifier:   94:3C:0E:D7:92:0B:BE:52:63:71:7B:AC:CA:D6:1F:0C:31:68:9F:0A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B8EAD0937FA6FE6CDB7B8BA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63a6474b-a6a7-3626-8a56-59196517ca50.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     6167
IP address blocks:        174.40.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ad:09:37:fa:6f:e6:cd:b7:b8:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=59f51b00-9073-4730-aaf1-932d30d7de0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:72:22:88:cb:50:d0:0b:1e:5b:25:1f:36:e1:
                    97:ce:7e:4d:93:3b:58:4e:b8:f3:d9:dd:c7:41:e9:
                    77:cb:09:c8:e3:de:69:71:15:42:e6:c8:e2:f9:42:
                    59:dc:01:42:82:0d:07:35:e6:5f:d5:6c:17:31:0f:
                    e3:a8:99:11:31:7c:74:1a:51:4c:d7:24:9c:74:9a:
                    18:c0:ea:aa:19:94:ab:cc:cb:ab:3c:11:2a:94:0b:
                    fc:93:8e:76:d1:84:43:dd:3d:da:94:2e:af:71:ef:
                    94:0c:3a:21:cb:6a:5f:8a:59:25:33:c5:eb:c6:1d:
                    06:8b:ac:45:bf:01:41:cb:ad:72:0f:56:1d:bb:98:
                    b7:86:77:5e:2b:32:3e:1a:c0:f9:5f:e7:9f:63:7f:
                    d7:46:50:41:ad:a5:74:c7:19:6e:1f:dd:2c:b7:66:
                    c5:ab:35:af:e3:0d:08:25:03:d0:ba:27:1f:b5:e0:
                    ac:e6:e5:53:b7:6c:7a:f2:b2:66:a5:5c:3a:f9:a0:
                    fb:af:34:84:2d:32:34:db:82:c4:a8:aa:12:1e:2b:
                    b8:f2:e5:4f:09:dd:f9:ac:60:01:7c:ed:e4:e4:c4:
                    aa:8d:d2:09:00:20:9f:27:b2:df:6a:6c:19:19:46:
                    a7:55:52:14:8c:82:a1:fc:2c:84:20:8f:37:41:b8:
                    eb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:3C:0E:D7:92:0B:BE:52:63:71:7B:AC:CA:D6:1F:0C:31:68:9F:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63a6474b-a6a7-3626-8a56-59196517ca50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.40.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:ef:83:8d:c4:92:4a:75:66:c4:82:4f:3d:2d:e8:f1:f2:e6:
         17:99:6c:9f:c9:ab:60:78:ed:5d:84:3a:60:61:ad:4e:5f:07:
         83:27:b4:82:5c:f2:cd:8c:6e:07:2a:c4:22:8d:48:13:6d:47:
         dd:d8:c1:f4:0e:32:48:cd:a2:ac:0d:cc:c7:20:b2:eb:70:fc:
         86:79:1c:1a:1d:58:25:37:28:84:32:15:71:c3:40:36:3e:9e:
         d3:6a:d9:f4:f8:fe:11:48:9a:0d:fb:41:39:41:1c:bf:8e:cc:
         4c:9f:b1:e0:a3:54:ca:3e:43:af:a2:e6:46:3a:a3:c1:a0:bb:
         79:4d:59:da:cd:ca:da:e6:18:7e:fb:06:c1:58:2b:d6:27:7c:
         d6:20:34:3f:8e:08:e0:d4:f0:24:f6:14:a3:a3:d1:d7:dc:9c:
         f9:9c:b4:89:cc:8f:89:93:56:74:aa:2a:78:ac:e8:be:ec:8b:
         d7:2e:eb:0e:95:f4:3c:d4:73:7e:0b:21:78:b4:2f:c2:77:6b:
         98:c2:91:70:21:3e:2f:31:e5:03:73:91:9a:ca:09:d0:cc:41:
         95:bf:4c:e2:f0:e7:c4:3c:e1:1d:c2:84:26:93:f0:a6:f5:2a:
         41:de:ff:f6:21:85:6b:af:33:a1:00:d4:69:e9:63:17:3d:d8:
         58:05:a7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:19:24 2025 by rpki-client