Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74bd8090-640b-3f07-ab99-47235ce2db23.roa
File:                     74bd8090-640b-3f07-ab99-47235ce2db23.roa (raw, json)
Hash identifier:          8TLpcQO7W1uwq9i1Nf4FJUa4/fsOinYw6hYKQQ3pX8M=
Subject key identifier:   91:A8:97:13:09:B1:58:15:6F:68:1F:0E:FD:C4:B3:07:0A:20:C7:5A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7FE0AC79803F77BD5ED5E9A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74bd8090-640b-3f07-ab99-47235ce2db23.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        174.196.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:ac:79:80:3f:77:bd:5e:d5:e9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=81b5c239-0473-44ca-aa66-745fe18482a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ce:9f:5c:b3:9f:70:f1:8a:78:57:9c:d4:a7:
                    21:12:09:80:e3:04:4d:19:66:d2:98:24:dd:c3:41:
                    7d:bc:76:83:9e:ce:bc:8e:49:26:56:5a:d9:76:25:
                    69:7e:45:5d:65:36:16:73:b8:24:6f:31:5f:80:c4:
                    7c:ee:d9:fd:17:b0:79:46:5a:17:05:91:ac:4b:6b:
                    45:c8:06:ef:80:dc:32:c7:e0:fa:79:2d:e5:da:65:
                    60:ba:e0:68:cc:d0:39:36:d0:95:e0:4e:0d:49:dc:
                    37:df:7f:e7:f9:20:2d:92:cf:f1:52:13:1a:81:4e:
                    c2:8f:09:2a:6f:ec:20:2b:b2:26:bf:b3:c5:49:72:
                    88:01:64:f8:cf:f2:e8:4a:bc:c6:84:4e:b7:27:b3:
                    68:a1:9c:32:9b:03:7c:09:02:4b:d0:f0:16:d5:a0:
                    5b:6a:68:d0:e3:33:37:11:88:97:c3:d3:51:6b:cb:
                    8f:a2:1d:87:45:d5:1b:3a:a1:2a:d7:88:4b:bf:57:
                    dd:fe:c5:f4:13:dc:d2:1e:6e:0d:fd:7d:14:4a:2e:
                    27:c2:11:2b:04:29:46:6c:44:33:b8:6a:5a:cc:02:
                    bd:c6:a9:eb:b6:92:7b:2d:d9:6e:05:b4:da:5c:6c:
                    c4:74:82:54:9d:d2:a4:6b:d4:24:53:87:ed:9a:78:
                    dc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A8:97:13:09:B1:58:15:6F:68:1F:0E:FD:C4:B3:07:0A:20:C7:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74bd8090-640b-3f07-ab99-47235ce2db23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.196.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:b0:85:2c:0d:43:a7:bb:f7:78:01:8c:ae:8f:b0:6c:82:14:
         ba:db:46:11:94:f3:47:a5:89:44:e3:46:1e:a4:6d:96:e4:74:
         3d:07:0a:75:fd:be:80:c9:de:0e:e6:91:43:4b:cd:37:54:1c:
         33:36:9a:ba:c2:8d:eb:08:04:73:09:29:fc:8a:ad:ca:43:71:
         60:d7:67:27:e2:3b:8e:67:33:55:fc:40:f0:ad:e3:93:f9:b2:
         5d:56:0c:af:6e:b8:ce:92:02:1a:09:31:98:24:9d:20:56:e6:
         43:87:dd:3f:c4:cb:0e:dc:f7:f1:a6:54:21:60:03:c3:9d:94:
         06:f8:7d:bc:a8:d7:d0:d3:80:7e:27:44:95:ad:d5:4d:41:20:
         6e:b9:f1:5e:16:f7:b9:e8:ce:c6:05:89:3c:7d:9b:f8:06:66:
         16:95:1a:71:22:6e:d1:ed:00:99:08:89:af:7e:3f:98:06:3e:
         e1:d6:84:66:41:f2:89:f4:96:fb:e8:f7:77:8b:04:56:d5:75:
         3a:9c:39:4e:1f:62:e0:2e:a9:50:e9:26:fa:4a:7d:a9:8c:ed:
         d9:c6:95:a3:f9:df:da:af:1f:bb:80:60:55:6b:75:d9:5e:5a:
         14:a2:6d:c7:64:1b:de:e0:4f:e2:75:5f:cc:8a:00:90:e3:db:
         d8:15:64:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:26:33 2025 by rpki-client