Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8fabfcb8-7b3d-3137-ba31-28fcf7d5900a.roa
File:                     8fabfcb8-7b3d-3137-ba31-28fcf7d5900a.roa (raw, json)
Hash identifier:          bgoKuvnszL18ia5pin1vbFInnL0erfQhvW33QeTtSBU=
Subject key identifier:   E1:AE:04:C4:00:26:07:34:AC:2C:D0:FE:02:1C:8D:AA:FB:D1:B3:1A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AF256A41ACCE2251FDF8E1C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8fabfcb8-7b3d-3137-ba31-28fcf7d5900a.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        174.230.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:a4:1a:cc:e2:25:1f:df:8e:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=0352f038-62b7-4f3e-bc0e-5f79650f0ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d3:bd:95:27:56:1f:7b:a0:8e:79:bd:99:8e:
                    b1:a1:59:77:a5:c1:78:68:8d:f6:74:e5:47:12:c1:
                    83:a6:75:3d:41:10:f3:5f:9e:fc:15:e7:fb:e3:4f:
                    b8:44:3b:fd:bb:62:7d:d3:2d:29:f0:a8:2a:22:f5:
                    cd:41:86:49:35:72:0a:8a:41:95:75:27:ea:e0:0e:
                    09:31:5f:ad:3e:8e:8a:7f:17:bd:11:c4:d8:ea:29:
                    b2:5d:fe:82:5f:4c:1d:39:42:0b:31:99:29:08:d0:
                    09:81:5d:c1:71:02:51:c2:1e:03:45:9f:ba:96:fd:
                    a9:7f:11:37:53:57:38:cc:a0:a8:4e:6f:22:8c:cb:
                    10:f7:ce:89:78:11:fe:61:c1:58:de:69:76:a8:dd:
                    5e:c0:bb:22:69:72:52:52:ab:dd:ec:a7:04:8b:b9:
                    72:f7:8a:09:99:13:5e:1a:04:0a:6e:5f:6e:ef:4a:
                    7d:06:e2:a5:b4:47:d3:6d:d0:d8:44:b1:3e:99:4f:
                    e4:e5:fc:c2:0f:26:d8:06:28:27:63:84:69:92:f6:
                    9c:1f:c8:c3:65:7a:08:0f:13:f3:47:7f:1a:54:8c:
                    02:fc:64:c0:80:8b:08:53:49:83:49:64:6f:f8:57:
                    9a:72:eb:57:5d:fc:41:8a:a3:ad:dd:e9:56:69:e7:
                    d7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AE:04:C4:00:26:07:34:AC:2C:D0:FE:02:1C:8D:AA:FB:D1:B3:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8fabfcb8-7b3d-3137-ba31-28fcf7d5900a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.230.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:7b:2f:df:bc:40:30:6e:63:88:8b:b2:a3:db:f7:9e:a2:0e:
         e0:d3:02:61:b6:91:b1:af:2e:55:99:dd:35:d2:0b:2e:6f:89:
         06:28:c7:6c:06:19:be:1b:52:56:5c:c7:12:ea:9f:77:dc:4a:
         a0:cb:97:7a:ce:7e:0a:63:d9:f9:da:cb:b7:db:b4:52:ff:0c:
         30:f4:ad:cc:ad:ac:55:e2:a4:15:2f:ee:04:67:e9:f2:59:d3:
         08:68:03:60:c6:96:a4:0a:9a:5b:37:93:7b:47:d6:66:2b:54:
         09:a8:6c:fe:56:fe:c2:0c:f7:33:06:9f:d5:a6:4d:77:8b:1c:
         ba:97:56:00:33:1f:34:e6:c8:e3:8f:ad:9c:52:d1:c7:cf:f9:
         6e:00:4b:de:49:92:28:df:19:ad:31:84:6a:28:ba:8e:6d:db:
         15:51:7c:b3:20:cb:9c:bb:da:cc:35:5f:65:56:35:3d:c1:0e:
         a7:c5:9d:7d:82:d3:7b:37:76:fb:8e:6c:be:34:82:42:b2:69:
         9f:7e:a8:b8:b9:83:8e:23:c5:d0:52:af:de:46:86:64:8f:d7:
         8c:f8:16:12:2a:c2:7d:ce:1d:15:70:a9:b0:0a:fd:fb:36:6f:
         39:72:90:e4:5e:18:56:4d:62:ff:c7:c7:03:4f:74:26:5a:89:
         55:e0:d1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:42:12 2025 by rpki-client