Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4767785-5daf-3fa8-885e-9e3aa74f354c.roa
File:                     d4767785-5daf-3fa8-885e-9e3aa74f354c.roa (raw, json)
Hash identifier:          7o79Ci5lu2Npk2kxSDe04wddTahd5ArJ2TeP478aOaw=
Subject key identifier:   88:CA:C8:85:AD:70:DA:85:EE:78:D3:59:73:7D:44:18:86:94:CB:B1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B87B238A33B3E13ED68652A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4767785-5daf-3fa8-885e-9e3aa74f354c.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        174.245.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:38:a3:3b:3e:13:ed:68:65:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=3c83323a-2c96-4198-b1bc-aba5d6b24e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f6:fc:ec:b0:74:93:32:d2:d0:c8:4d:bc:5d:
                    88:0d:73:56:27:d9:db:7a:32:fd:ec:74:88:41:11:
                    76:5d:eb:b1:33:98:70:e0:99:48:15:55:f9:d7:d4:
                    18:c4:2d:6c:84:c9:30:7f:ae:ea:83:e7:43:8f:86:
                    f6:65:7a:b4:22:11:11:70:47:b0:b8:03:3e:34:67:
                    01:d1:61:53:7e:0b:dd:2c:1a:f2:94:97:88:09:c2:
                    c0:0d:85:63:e7:70:14:66:2a:09:f2:77:98:1d:f3:
                    d8:0d:00:4d:da:37:49:17:3b:b1:91:6b:38:ca:29:
                    b4:9b:51:5f:f6:f3:40:05:47:39:aa:43:61:bc:7c:
                    c9:80:f5:bd:c0:aa:b0:54:a0:81:9a:fd:3b:c1:df:
                    eb:64:fa:07:d3:43:c5:2d:a4:aa:f3:62:4b:30:54:
                    91:e6:dd:48:55:84:93:6b:dd:29:b7:97:86:eb:c1:
                    dc:ac:f4:3f:a6:f5:40:61:e6:51:6d:38:f2:3d:4d:
                    74:27:e2:33:57:60:98:98:27:87:78:06:8d:5a:72:
                    b1:0f:eb:cf:85:7c:dd:76:b6:3b:b3:14:fd:7d:7f:
                    6e:b1:be:bb:fd:46:28:dd:88:1a:64:b6:8b:c2:5d:
                    a2:5e:38:f8:e9:4f:c9:72:6e:12:4f:8e:85:ce:57:
                    2b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:CA:C8:85:AD:70:DA:85:EE:78:D3:59:73:7D:44:18:86:94:CB:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4767785-5daf-3fa8-885e-9e3aa74f354c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.245.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:40:2a:45:bf:5d:42:f7:a8:b7:54:21:d1:c5:96:3e:3d:27:
         c6:27:16:56:4f:63:3e:ee:ee:a8:50:05:d4:e1:7d:4c:0b:99:
         04:91:02:83:96:09:3e:ec:87:f6:30:c5:e6:83:1c:21:b0:f9:
         c1:0d:e3:38:b9:60:91:31:89:0c:cf:4b:8a:d4:aa:28:74:11:
         60:02:56:c5:17:d5:6c:5e:e6:ae:7f:a0:67:0a:fb:39:99:f5:
         fa:f7:1a:86:9e:a5:fb:0c:c2:a9:70:1f:52:5a:59:9e:c1:78:
         77:e8:c3:a6:02:7c:f4:bd:e8:2d:bf:5f:1f:2f:fc:6a:e4:ae:
         0b:4d:25:90:e1:b4:17:31:dc:c2:81:07:f4:1b:32:e8:df:a9:
         6b:48:05:f5:ef:bb:b3:8a:c6:36:f6:e8:08:32:c9:16:81:67:
         6f:2d:94:07:cd:26:72:9d:c9:e0:ce:2b:f3:69:58:bb:a4:bc:
         28:4a:d4:82:d9:5a:6d:45:77:22:24:b2:e1:44:ef:21:0c:36:
         b1:fc:eb:c0:d1:ef:8f:c7:be:13:25:87:6b:39:9a:17:e0:97:
         45:ae:5a:bf:ba:a2:81:ca:c7:e7:8c:21:62:28:35:25:ce:b9:
         d4:75:13:10:d3:e4:57:4d:c4:16:cf:f1:0e:31:cc:5d:7a:14:
         d8:e4:74:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:10:04 2025 by rpki-client