Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a96c1692-47e3-384d-8737-aad738cc437b.roa
File:                     a96c1692-47e3-384d-8737-aad738cc437b.roa (raw, json)
Hash identifier:          f8r5bbzruv1IzR71eqNYJlsSkvDkrWkvDnKIcfZzAPI=
Subject key identifier:   71:14:3F:93:94:96:A4:BF:F0:50:78:46:47:79:0D:29:5A:5C:1F:A2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B87B22B02D449EF55BCE67A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a96c1692-47e3-384d-8737-aad738cc437b.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        174.226.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:2b:02:d4:49:ef:55:bc:e6:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=888adcae-d2ae-4016-986a-8e8ecb907237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d9:98:1b:ce:f0:f5:ed:af:e7:a6:41:d7:4d:
                    63:77:e7:a3:dc:0c:5b:37:8a:da:84:7a:f6:73:02:
                    a8:49:64:d4:84:2b:68:6e:22:36:3b:e0:0a:75:ec:
                    41:3b:ab:fd:36:16:54:bf:e5:40:33:18:22:b8:87:
                    1b:19:a5:4e:11:37:c3:5e:4f:f5:8c:61:e5:41:9a:
                    55:75:2d:e8:25:0e:b6:3c:b6:08:5e:ac:a1:20:57:
                    7f:f7:b9:a1:7e:06:3b:10:ba:3c:5b:ee:47:7f:af:
                    22:a6:be:ab:67:1b:8a:f4:34:5e:c3:25:3c:c5:40:
                    1c:bf:5d:d0:0d:60:b1:3b:90:b0:4d:de:a8:cf:b4:
                    f6:02:aa:d2:58:d9:22:95:04:99:36:0c:3a:95:ec:
                    28:77:c0:02:4b:ca:64:25:1b:f6:77:8a:4f:5f:63:
                    ce:4c:fe:41:bf:ec:9d:11:1f:f8:65:99:bb:33:e4:
                    d8:2c:1c:fc:51:4f:3b:11:2c:1f:fd:61:4e:48:d5:
                    69:fb:5e:fc:74:82:38:16:4f:ec:87:32:76:cb:05:
                    12:b3:32:d5:89:c6:d4:3c:c6:fd:bf:78:9e:03:3d:
                    48:57:e5:85:3c:0d:0d:e6:16:78:bf:1e:d8:ea:5d:
                    01:f3:54:90:1e:d2:5f:9f:e0:b9:e8:31:3f:b2:03:
                    fd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:14:3F:93:94:96:A4:BF:F0:50:78:46:47:79:0D:29:5A:5C:1F:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a96c1692-47e3-384d-8737-aad738cc437b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.226.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:36:dc:cf:49:84:a1:9a:44:e0:44:80:a8:01:5e:7c:c8:d8:
         71:a1:e4:f9:d3:a6:37:e5:03:12:f6:f9:e1:51:11:d2:36:86:
         1e:33:6d:ab:ab:e0:85:bc:f2:28:dd:18:ed:34:79:d6:d4:c0:
         dc:55:d3:96:64:dd:a9:cb:83:c6:73:46:3d:a1:ed:1a:5f:8c:
         21:57:44:60:1b:a5:86:53:10:d0:ca:69:ff:44:c5:44:48:04:
         f9:4e:e7:b9:05:0a:05:de:e5:6f:1c:51:fa:2e:69:11:b1:cf:
         2b:de:87:f8:50:41:20:d9:47:8a:58:49:ce:c8:86:6e:2e:b4:
         1e:f8:a9:be:a3:70:d8:5e:64:bd:7f:01:ba:2d:b1:7c:f1:16:
         a7:9d:71:a4:e0:27:8c:ac:22:36:cf:fc:e2:ce:9b:1d:be:f0:
         e7:3a:8a:06:98:2e:3c:d0:0d:a0:80:c9:93:da:67:09:2f:59:
         44:02:f7:e1:2f:8e:1f:73:de:62:c5:87:6b:8d:39:ec:23:e8:
         69:e2:36:1d:a5:a7:4f:12:31:86:a7:9a:14:62:24:59:10:14:
         61:a5:da:af:dc:7d:27:91:7c:5a:64:87:8a:5e:e7:20:a5:a4:
         6e:e1:9f:74:71:34:e0:11:89:47:95:2b:8d:6e:26:d1:4f:e0:
         45:37:cf:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:50:13 2025 by rpki-client