Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9f0eb98c-d07b-3b75-8794-4e6b937f0357.roa
File:                     9f0eb98c-d07b-3b75-8794-4e6b937f0357.roa (raw, json)
Hash identifier:          Ok/1kO9iH+v3uIiZ8MwqQBtzCbQkhW3zXlHw/mJxo2g=
Subject key identifier:   69:10:51:38:E8:40:1E:F1:F1:21:68:95:64:E5:2C:C2:DE:7A:7A:B3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B87B23890CCE32438FEDDD200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9f0eb98c-d07b-3b75-8794-4e6b937f0357.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        174.245.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:38:90:cc:e3:24:38:fe:dd:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=d61cea9a-fce1-4720-87ee-cba7a168f44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d7:6f:78:2a:bf:b3:a0:97:84:93:00:60:6f:
                    26:b8:73:65:ed:fa:25:06:bc:4e:63:61:7d:a0:51:
                    cc:7c:00:6a:87:92:8d:81:eb:eb:eb:21:2e:89:16:
                    fc:12:9a:5a:c1:8a:4d:52:b2:8c:27:cb:99:d4:83:
                    a4:26:df:de:a6:1c:c6:41:bf:1a:53:13:d5:16:2c:
                    c1:f4:2c:0d:9b:c4:50:f5:f7:a0:ea:41:1c:10:97:
                    ed:73:f8:01:91:fb:65:ae:6f:93:55:53:63:47:23:
                    be:5b:55:53:b8:44:36:13:c2:ee:cc:ad:99:28:c9:
                    12:61:af:93:42:18:3e:5a:b3:c6:f0:90:c1:e2:b4:
                    0d:f2:70:33:32:ed:b3:79:30:32:53:3e:7b:bf:39:
                    e6:25:2a:f9:5c:90:9d:ee:99:47:4f:ae:12:96:f8:
                    aa:fa:3a:ed:da:75:2e:fa:e7:5e:85:3d:5c:43:18:
                    6e:d2:7d:40:91:d2:3c:37:7c:af:c4:0f:fa:a3:21:
                    b2:3e:53:e1:7a:4b:db:48:65:ee:15:d0:eb:ec:27:
                    86:7f:8d:5a:42:c7:11:4a:fc:cc:30:f4:15:6a:1e:
                    76:c3:f7:06:fa:01:81:0e:7a:04:59:8a:4d:4e:95:
                    df:c3:f1:bb:00:fd:29:63:17:b4:4a:d3:d6:d3:47:
                    cb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:10:51:38:E8:40:1E:F1:F1:21:68:95:64:E5:2C:C2:DE:7A:7A:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9f0eb98c-d07b-3b75-8794-4e6b937f0357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.245.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:57:b2:c0:dc:5b:83:bf:39:06:f4:2b:cf:84:f5:8c:ed:c4:
         d2:c6:62:aa:56:6e:0d:8d:fc:cd:49:a8:a0:5c:04:3f:bc:81:
         d7:22:ae:97:84:30:de:fa:10:80:8c:c3:41:ee:01:38:fa:16:
         39:21:0a:2d:89:81:32:2b:94:64:b8:33:1c:81:4d:6d:6b:f4:
         06:de:31:9d:53:89:84:92:f9:be:c9:48:81:b5:93:d8:20:c0:
         d2:67:bd:d1:7b:d7:fb:71:96:72:9d:f7:19:b0:df:cb:29:a8:
         b2:3f:2d:4a:46:54:ae:1f:b0:bd:e4:df:d7:8c:15:7c:e3:de:
         fc:c1:a3:aa:9e:11:c7:f5:76:e0:f2:2b:f2:68:5d:bd:68:c8:
         4d:a3:30:08:4d:88:5b:8d:63:c8:1e:38:42:f6:66:f7:e9:3a:
         be:16:55:71:c6:f5:06:73:b9:2a:48:5e:b4:8e:ef:43:04:c1:
         ac:85:a4:c9:e8:cf:8b:57:82:05:51:dd:6f:9a:39:fe:43:00:
         95:c4:27:be:15:af:ba:1b:c1:97:e2:24:c5:07:f5:e0:05:db:
         94:a7:b6:20:8a:84:14:b8:4a:99:d9:d9:01:22:fa:7d:cd:15:
         55:69:39:1d:51:69:cf:1e:20:27:54:55:3f:70:fd:0b:33:e6:
         2f:25:4c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:11:51 2025 by rpki-client