Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/751fa32a-71f7-3f0f-84cb-d2d1144ecd22.roa
File:                     751fa32a-71f7-3f0f-84cb-d2d1144ecd22.roa (raw, json)
Hash identifier:          HOFyBUx1/szw/01OmZbSt1fGazaCbJ7z51cYdD1aqpo=
Subject key identifier:   33:82:28:99:DF:DE:3D:DE:4E:DC:E6:FA:E9:02:A5:4E:DB:A3:7F:8F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B87B2395620F175B47EF87800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/751fa32a-71f7-3f0f-84cb-d2d1144ecd22.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        174.246.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:39:56:20:f1:75:b4:7e:f8:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=8d394513-dac6-467b-bd80-d9dd31f023bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5c:a7:dc:33:41:aa:04:e9:09:33:01:6c:be:
                    81:c5:0e:2b:54:73:5b:30:3d:63:1b:c3:a8:12:f9:
                    2a:29:c1:f8:56:23:75:30:63:f2:74:cc:c9:e0:e8:
                    0f:8d:f2:a5:56:98:bb:7a:77:1a:82:01:c3:5d:bb:
                    bf:47:45:d3:48:cd:a0:84:7a:02:ba:24:e8:c8:42:
                    c4:48:37:92:b0:e4:a8:be:cf:e5:67:39:c5:33:1a:
                    fa:3f:2e:7e:a8:d5:75:b5:c0:da:45:e4:73:2c:b5:
                    aa:82:97:5a:d3:e1:8d:b0:4d:e0:db:60:57:fe:94:
                    44:d3:68:35:e0:74:80:e5:ab:7b:19:fe:42:74:e8:
                    a6:f6:2e:f8:98:e8:ce:89:90:66:c4:3c:a7:3b:d7:
                    56:57:b1:e0:0c:32:a2:0c:17:b9:e4:fd:45:f4:01:
                    06:8b:05:3c:21:c2:2b:8a:19:22:b4:81:bb:4c:6e:
                    c9:6d:88:d1:73:b8:c8:2d:a5:f2:25:19:48:f6:29:
                    85:54:3e:94:20:53:60:cd:76:32:82:6f:06:e9:f9:
                    68:bb:40:c0:55:36:8f:50:28:d7:45:e9:dc:ee:36:
                    9a:c6:c6:16:8b:31:71:bd:cd:f4:47:76:10:46:69:
                    7e:e9:ed:fe:5a:1b:69:81:16:65:5d:38:d2:bf:8e:
                    13:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:82:28:99:DF:DE:3D:DE:4E:DC:E6:FA:E9:02:A5:4E:DB:A3:7F:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/751fa32a-71f7-3f0f-84cb-d2d1144ecd22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.246.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:08:c7:ea:32:0b:f6:f1:19:67:e5:d9:61:44:ce:b3:68:28:
         86:5a:62:70:0d:00:bd:b4:85:73:5a:c4:b5:86:6b:3c:74:ed:
         17:58:e3:13:9e:a4:1f:51:ee:fa:f9:8d:0e:60:f0:1c:c4:aa:
         de:c7:9b:72:b3:f0:36:fe:9e:52:d3:f2:ac:18:a7:88:ff:77:
         d6:a6:4c:8e:6d:05:95:73:82:a8:8d:de:49:c8:70:4a:aa:3e:
         68:45:d3:85:fe:6e:7b:c2:10:7b:1a:e6:d2:4a:64:65:2a:58:
         95:19:e8:54:80:dd:d7:60:28:12:23:1f:d1:e3:82:c1:b9:bc:
         7c:82:d3:a2:86:88:c6:ca:81:3e:5e:b1:ab:a4:f0:38:d4:a1:
         4c:0c:fc:67:49:63:00:a9:fb:dc:fc:f4:af:26:8a:96:9d:7b:
         21:00:b1:61:ef:0b:1d:9d:51:9d:12:cb:22:a8:5d:7f:14:ef:
         c2:2e:21:d0:a3:f1:2a:0b:4c:a6:24:37:88:4a:0f:b5:20:28:
         5c:b0:f4:dc:df:33:6e:66:7f:f2:ed:37:f8:84:6b:64:54:a2:
         e3:8b:fc:1a:61:22:f8:96:5f:0d:df:00:fc:dc:ee:bd:59:54:
         ad:a0:80:e8:df:8c:46:30:7d:e7:5f:8c:d5:0d:7d:e0:66:cb:
         c5:fc:c8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:07:07 2025 by rpki-client