Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a88e73f-9285-3947-8fc0-c9511bdd3995.roa
File:                     8a88e73f-9285-3947-8fc0-c9511bdd3995.roa (raw, json)
Hash identifier:          AXbnZCEPAVFPUmqTJrFXvnRSb1v6NUGBys91x4YnYSY=
Subject key identifier:   28:24:18:01:6C:74:3A:7E:F5:49:B3:BA:68:44:88:7A:73:2D:95:D8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B87B22A42E2767923A69C19C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a88e73f-9285-3947-8fc0-c9511bdd3995.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        174.226.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:2a:42:e2:76:79:23:a6:9c:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=147bb143-6796-4a9d-b275-e3d47d4ea5bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:dd:8f:8f:2d:5e:49:d5:c3:f3:cb:f5:5b:67:
                    c5:fc:6c:0e:57:64:8d:35:ab:4d:01:41:e8:00:05:
                    f9:00:1b:d2:f1:66:18:bd:98:3e:33:0b:97:96:dc:
                    b2:23:39:f1:3f:9b:59:66:f7:47:72:40:39:82:e9:
                    aa:df:a7:25:e9:d1:6c:36:07:bd:ba:40:ed:65:a8:
                    62:75:da:3c:fd:21:bd:44:db:56:0a:bb:7b:cd:05:
                    11:5a:cb:9e:ee:c5:02:9d:c1:ab:c0:9a:09:31:ed:
                    84:2a:39:5b:ea:15:f4:54:26:7c:50:25:83:30:5e:
                    c8:b6:45:29:02:b1:aa:cc:d0:78:78:f4:f6:04:31:
                    63:2d:ef:10:f8:c3:ae:95:39:3c:78:52:6c:c8:a7:
                    6f:5f:4c:5a:88:3c:bb:84:69:ff:a3:f8:7c:9b:62:
                    e1:18:46:ca:99:14:46:51:67:69:c0:a4:67:36:ec:
                    9e:e6:a2:ea:99:25:ba:5d:1b:f3:e9:9d:b4:51:b5:
                    7f:46:ce:6f:3f:d5:09:14:fc:97:34:89:f6:ca:62:
                    c6:0e:fd:8b:2e:54:d1:51:f4:68:f3:8f:9b:80:1a:
                    c3:a0:19:ad:15:0b:7b:da:56:2a:55:c8:07:8b:00:
                    16:7a:d3:07:39:87:11:c0:38:ee:6e:05:b4:3a:2c:
                    d1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:24:18:01:6C:74:3A:7E:F5:49:B3:BA:68:44:88:7A:73:2D:95:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a88e73f-9285-3947-8fc0-c9511bdd3995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.226.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:8a:1f:ca:66:e1:94:58:2f:99:2e:a3:5f:ee:6f:a8:d5:d1:
         97:22:ec:ef:07:91:f7:81:a5:ba:ff:70:4d:12:74:ea:1f:2f:
         af:09:d0:eb:b7:46:e8:68:09:4e:63:6c:b1:e7:7a:15:fc:34:
         46:26:c8:02:2e:65:c3:40:a6:f0:ec:ad:bb:16:5a:57:48:e6:
         4f:4f:cf:36:86:31:c3:ea:89:40:d0:54:8a:ff:92:d6:73:7c:
         7d:f9:31:55:6d:80:87:29:2a:be:8b:5b:43:33:c4:b3:2b:e9:
         d9:44:77:78:6e:47:5f:7d:94:1c:3b:e9:80:7d:6d:83:f6:7d:
         f7:05:90:c7:5b:45:6f:c4:02:d0:6b:fa:15:1b:be:2b:6d:dc:
         87:69:5d:48:b1:cc:a5:6e:83:a7:09:7b:4e:a1:f2:56:c0:e9:
         c4:be:19:87:0d:72:92:f5:2d:fa:e3:e1:ec:89:ed:bc:7e:e9:
         a3:05:3e:a2:fd:40:cf:0c:17:e1:8d:94:8a:10:38:3a:9e:7e:
         ab:45:59:b3:11:ba:76:55:ed:94:35:54:48:d1:b0:2d:6c:9e:
         ab:18:82:08:e5:0e:a3:8e:3c:90:a6:bc:4f:59:ca:ff:38:ae:
         ef:51:b4:d2:f5:00:5d:3e:d3:75:f8:1b:66:ef:c1:21:ee:03:
         43:dd:3f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:18:45 2025 by rpki-client