Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c9659736-862a-3024-b267-0f854f81d32f.roa
File:                     c9659736-862a-3024-b267-0f854f81d32f.roa (raw, json)
Hash identifier:          P3YKotPyy2lQ2B8Hq4OIxHpR7q1tGjuWcgUGlYr6pJc=
Subject key identifier:   B2:28:05:AA:20:84:06:FA:34:5A:27:C3:24:E8:C9:A1:AD:1E:39:53
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AE196AA532A5CD4DE412FFC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c9659736-862a-3024-b267-0f854f81d32f.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        199.74.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:aa:53:2a:5c:d4:de:41:2f:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=f1d4cd64-b701-4800-993a-36b7ead49375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7a:97:1f:0f:a7:c6:1a:b4:a8:d3:88:f8:88:
                    99:bc:f9:5c:51:73:0b:d2:94:48:61:d4:01:d3:63:
                    dc:94:dd:0d:43:0c:70:fd:50:41:65:c2:24:3c:05:
                    df:ee:6b:13:fa:0d:8c:e0:bc:63:67:5e:57:b1:c6:
                    7b:e4:7a:2a:9e:c5:cd:a4:79:f9:8c:b5:8c:47:02:
                    0c:47:37:47:79:eb:34:e2:2b:6e:32:c5:03:33:3b:
                    83:87:64:03:99:d5:5b:53:ed:7b:7c:0c:47:0b:61:
                    2f:1c:38:a2:69:a1:73:15:a5:93:02:ca:e5:64:31:
                    34:d0:8a:85:03:ba:ec:8f:f6:2a:1b:37:9f:d1:f0:
                    0f:53:db:8b:6c:d4:f1:b0:df:fa:8d:41:fc:0b:2a:
                    1d:73:07:f7:76:f8:68:c6:36:ac:49:34:09:65:ce:
                    42:a2:88:e8:8b:8e:d6:0a:7d:18:57:f1:85:a8:d7:
                    58:96:cb:34:36:db:42:7e:71:df:64:df:04:23:d9:
                    e5:3d:2e:65:da:a5:f9:11:f4:93:3a:a5:05:fe:af:
                    01:94:e1:96:82:97:61:c5:cc:30:1a:41:92:05:a2:
                    be:c4:3a:25:92:cc:90:c9:d3:62:d9:38:0f:b9:d1:
                    1d:0c:ef:59:70:f9:65:2b:e1:e5:8a:5b:bf:e3:bc:
                    bb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:28:05:AA:20:84:06:FA:34:5A:27:C3:24:E8:C9:A1:AD:1E:39:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c9659736-862a-3024-b267-0f854f81d32f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.74.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:93:38:82:5a:1d:40:c2:2b:3b:5c:c1:26:b6:9b:b3:d2:b8:
         13:c4:0a:50:9f:6c:d4:fe:7c:ba:67:68:50:d8:21:35:42:f9:
         4b:75:ec:04:e4:89:66:20:2b:a8:f0:37:5e:c0:3e:8e:56:fc:
         d8:c8:5d:08:0f:29:da:9a:24:4c:7d:0a:9d:4f:e9:9e:50:02:
         0b:8c:72:82:ad:7a:ac:a8:6e:32:11:46:c7:f2:b8:e6:12:56:
         47:cb:db:15:32:c6:0f:83:e0:e8:90:f6:a3:8c:ac:48:ca:33:
         0e:70:c2:5f:c7:06:90:88:64:a9:04:9c:dd:05:cf:52:a1:74:
         8e:c4:e5:7e:67:46:cd:80:c8:2c:2d:f3:d6:4d:ed:10:b7:c9:
         43:b3:fa:c3:bd:66:b9:36:41:df:8c:27:bc:dc:54:3b:68:05:
         c9:c9:8e:8e:8e:ef:49:70:b9:c6:d0:17:60:35:cb:93:77:18:
         96:6f:00:61:f0:0c:e8:89:3c:10:73:c1:25:e6:b9:21:72:ac:
         4e:fa:06:ee:c3:b1:0a:76:ec:1b:b3:2b:d0:d9:76:6f:ed:ea:
         7c:39:14:c1:7a:1a:dc:74:e6:1f:b5:a0:7c:76:2b:e5:7c:18:
         3a:92:bc:9f:94:b2:12:18:7f:86:0b:59:6a:11:bb:ff:05:24:
         59:ee:1b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:19:16 2025 by rpki-client