Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/86fcd990-b355-3070-ae82-9b6a76430b44.roa
File:                     86fcd990-b355-3070-ae82-9b6a76430b44.roa (raw, json)
Hash identifier:          rRY9eJ2VDw+9JQmLnZpkl804/Y8MZCQ3jTtTPwuOZWE=
Subject key identifier:   EE:26:AF:AE:BF:33:FD:3F:95:07:B6:A8:D7:5D:81:B0:CD:2D:3F:BB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AA6F633CEEC78100060F36200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/86fcd990-b355-3070-ae82-9b6a76430b44.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        174.250.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:33:ce:ec:78:10:00:60:f3:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=70b5b097-57c9-4196-b808-96f6a4475b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e8:b5:26:54:c1:2d:34:ed:26:8a:e2:16:6d:
                    20:5c:65:b3:8c:f6:9b:4b:8f:0b:0f:20:3c:9f:8a:
                    15:a8:53:f2:5d:10:75:ed:b5:95:81:e0:b9:06:02:
                    8f:99:8f:f8:44:63:4a:37:cd:47:5a:08:00:f7:3b:
                    a5:c8:2b:33:74:8b:67:86:15:07:3e:99:bf:07:41:
                    d2:a5:c4:23:c5:c7:14:c1:9b:81:da:ea:6c:bb:ab:
                    e7:a9:ac:5a:c4:1e:aa:aa:a6:ce:03:d4:d7:04:9d:
                    9a:65:52:fd:e7:8a:be:11:5e:73:7e:57:71:84:35:
                    da:ba:5e:78:17:0e:f3:81:af:a0:cc:89:8d:3a:0a:
                    fc:69:e0:39:39:96:e7:d8:a8:0d:3e:b0:df:ae:1e:
                    c9:be:4b:8d:e5:65:61:f1:df:fe:5f:53:60:b1:96:
                    d1:7b:c1:d2:9b:a3:1a:6e:8a:cf:7a:aa:04:4f:a3:
                    98:39:2f:50:32:47:58:86:26:84:b6:0a:a7:2b:56:
                    66:b9:62:71:34:cc:8e:f4:2e:2c:d1:f2:f8:09:25:
                    f5:6c:e5:2b:0a:90:0f:10:30:08:b5:fe:95:42:42:
                    83:7b:d6:69:0c:d3:f8:bc:3d:0a:07:bd:16:96:24:
                    38:aa:c0:ad:ae:01:c2:6f:9c:ce:a0:70:c5:21:a8:
                    f5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:26:AF:AE:BF:33:FD:3F:95:07:B6:A8:D7:5D:81:B0:CD:2D:3F:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/86fcd990-b355-3070-ae82-9b6a76430b44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.250.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ef:84:eb:8c:bf:cd:4e:88:04:ec:ed:32:1c:05:ee:57:81:
         40:7a:83:e3:a6:36:71:fb:0d:9f:4a:8a:92:16:a8:67:59:cd:
         f0:26:1c:9e:01:fe:a6:ac:c8:26:0d:b4:fb:02:9e:bb:05:bc:
         78:6b:a5:68:46:12:10:6c:0c:10:2a:4b:9c:8f:a0:1f:11:8e:
         56:28:02:52:4d:4e:30:62:70:8a:99:a6:93:cd:81:dc:36:4f:
         33:4b:bf:f2:ac:f0:59:b1:40:f2:3f:fb:49:0a:04:ee:6d:9f:
         80:0e:92:eb:50:40:43:f5:4b:bf:49:74:27:69:0a:68:e4:5b:
         a1:97:f5:41:2c:4a:51:e1:40:3f:fe:37:78:dd:c3:9f:d6:93:
         56:52:b2:f5:67:b0:72:c5:33:25:40:30:83:74:93:1c:48:53:
         4b:26:6f:b3:7e:5d:8d:2d:3e:6c:43:c0:8b:d8:a8:2d:27:a4:
         90:10:3f:68:3f:ce:09:f9:d8:4c:da:09:ee:f7:82:70:ac:b5:
         57:b5:9e:48:97:3e:9a:42:09:ab:7d:50:c4:cf:5b:23:ec:26:
         7d:02:2d:ab:6a:33:ab:6e:1d:87:50:37:d5:6f:59:f3:48:1b:
         8f:33:7a:e7:bc:f8:22:31:d5:48:b4:04:22:68:17:d2:ee:ab:
         a2:4f:75:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:26:46 2025 by rpki-client