Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b55b0b4a-1d39-39d6-9b6f-1ee143fe35a8.roa
File:                     b55b0b4a-1d39-39d6-9b6f-1ee143fe35a8.roa (raw, json)
Hash identifier:          NZTJBsiZAbwe6Ps4VfYpJoGkT55mbAcqOv6WGxYqoFg=
Subject key identifier:   56:AE:31:EA:4B:DF:E1:A6:AE:9A:F2:10:AA:4B:87:7D:75:0E:89:8C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B609CB120DB5A1CED08651B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b55b0b4a-1d39-39d6-9b6f-1ee143fe35a8.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        174.224.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:b1:20:db:5a:1c:ed:08:65:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=34d6d58a-8430-4aa8-b0d5-5032a8cc1e5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b1:e1:b1:81:bc:cc:50:d9:90:69:59:9b:c9:
                    0c:6f:ff:9f:e3:05:bd:00:43:6d:55:89:df:7e:73:
                    b7:bd:7d:93:01:d7:af:f0:a9:03:bf:5f:d9:c0:9a:
                    65:17:df:e8:6c:05:82:83:68:19:c3:af:a3:34:0f:
                    52:76:dc:d1:4c:90:d5:45:94:28:51:40:28:c8:7f:
                    7c:f9:6d:d1:bf:84:a9:f8:1e:1f:88:52:65:3f:4b:
                    6f:75:96:d0:b5:45:c5:e9:38:8c:ac:82:cd:57:36:
                    f5:b9:07:e5:6f:94:60:19:07:91:89:02:06:2b:19:
                    b8:98:e5:ef:ce:ef:d3:05:c5:a5:99:b2:83:d6:ac:
                    11:47:49:b1:de:af:85:8b:d4:4e:7c:76:49:9e:31:
                    13:d4:02:26:54:c2:6b:f0:69:cc:f5:72:a0:d6:39:
                    92:f7:e5:ee:8c:ec:04:77:49:74:27:7e:20:41:8c:
                    b1:e0:b6:35:94:18:b5:c8:d7:3d:51:a9:b7:22:f1:
                    87:7c:be:d3:4b:67:bc:7f:e8:55:d4:bc:60:95:8e:
                    bb:ed:67:ef:65:fc:cf:b4:1c:5d:d1:6e:37:e1:c4:
                    0b:89:99:2d:bf:ce:b0:33:5d:92:5d:42:2a:38:89:
                    04:26:e6:08:02:a7:a2:17:cb:11:3e:9b:dd:4c:5d:
                    2b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AE:31:EA:4B:DF:E1:A6:AE:9A:F2:10:AA:4B:87:7D:75:0E:89:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b55b0b4a-1d39-39d6-9b6f-1ee143fe35a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.224.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:b9:d7:70:5e:e1:79:3a:ce:35:c7:f6:57:12:76:de:e6:50:
         94:3c:e8:c7:78:97:69:a7:b1:bf:4c:69:8f:bf:51:4e:b2:c8:
         41:88:ca:8e:18:88:12:20:c6:89:36:44:ca:3d:35:ed:b4:51:
         41:9d:eb:7f:23:3d:59:0b:74:0c:04:9a:b3:0a:b6:d7:fe:70:
         15:26:38:26:9c:94:6f:b6:68:65:08:a2:ba:8b:0c:76:4e:95:
         12:f4:50:7a:64:63:97:9c:a8:3c:be:43:5c:5f:53:f2:ce:d9:
         dd:52:0a:00:24:96:06:64:7e:48:54:b7:72:0a:53:69:ba:66:
         6d:80:b0:df:26:4e:3c:bc:9b:38:6c:db:df:33:69:11:57:78:
         f9:8e:d6:5e:05:4f:f2:6c:2c:9b:23:05:80:38:15:77:77:e9:
         7b:7d:c1:28:ee:f6:0d:ad:6d:e3:37:a3:df:50:0f:80:f6:b5:
         0a:b3:33:bd:2e:43:ad:1a:05:7e:fd:71:73:d3:95:c9:94:91:
         e5:ba:48:6d:b2:28:5a:4d:8a:13:73:3f:24:3b:03:aa:3b:01:
         26:d6:26:b2:28:09:cd:88:21:08:35:68:5d:97:30:0d:07:25:
         29:5d:6f:7a:e0:90:4c:b1:4b:e0:2e:d3:b4:f0:95:95:9a:f7:
         ef:a1:3c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:31:52 2025 by rpki-client