Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e8556876-fb8d-306d-b82f-ca2d8e4fffb8.roa
File:                     e8556876-fb8d-306d-b82f-ca2d8e4fffb8.roa (raw, json)
Hash identifier:          zhj+3b3RNd1SqUxf3PQRchmhjb0PDOcCF+pEuTPWY9k=
Subject key identifier:   C6:3D:5F:41:7E:1E:FD:7E:63:19:E7:DB:0E:C9:B5:35:8C:7C:D2:5C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B87B2278E1BB4389C96CC7F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e8556876-fb8d-306d-b82f-ca2d8e4fffb8.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        174.250.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:27:8e:1b:b4:38:9c:96:cc:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=3eadb2f9-d52f-48f2-85c4-a1138410c16a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:42:d9:2d:48:b3:2f:77:83:54:a3:20:fa:6b:
                    4c:24:b0:7e:32:6a:80:a2:5f:2b:37:65:16:6e:68:
                    78:42:78:09:9b:9a:73:47:44:5f:86:05:2c:c0:dc:
                    c4:25:be:d2:f5:5c:3a:5b:03:01:ff:34:b6:6d:cf:
                    3e:cb:fc:87:66:dd:09:79:b1:60:c3:5a:8b:36:fd:
                    f4:a9:a0:27:3e:73:4f:f3:24:3f:7a:79:cf:01:c3:
                    0a:23:bc:9a:c3:9e:68:61:7b:e1:b1:82:0d:79:f3:
                    ea:41:55:65:90:1c:79:4a:38:19:1a:59:37:2a:d6:
                    21:fc:32:97:8b:80:7a:49:09:24:cc:56:c1:42:96:
                    2e:95:18:8a:2b:c5:62:ec:0e:c5:40:08:7a:00:77:
                    56:31:ff:9b:cb:b2:f5:aa:36:c1:2b:17:2b:bf:9e:
                    a8:ce:c8:c9:72:5d:6a:21:f5:11:d6:7a:a8:d1:85:
                    c9:d8:60:f6:66:bb:d9:70:bd:88:0f:db:5b:da:a1:
                    7e:27:bf:ba:e2:63:ee:51:db:52:3c:18:73:e5:84:
                    41:55:a3:82:ae:52:d5:af:8d:5d:ff:65:ed:71:72:
                    bb:08:a6:3a:21:6a:96:20:5f:7f:97:6a:37:a9:69:
                    c8:4d:c0:cb:fd:d8:41:b7:62:b7:18:9b:b7:72:be:
                    d4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3D:5F:41:7E:1E:FD:7E:63:19:E7:DB:0E:C9:B5:35:8C:7C:D2:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e8556876-fb8d-306d-b82f-ca2d8e4fffb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.250.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:84:3e:c6:54:92:94:53:8e:40:b9:6e:5d:b2:44:7a:3a:9a:
         03:c9:5f:a4:51:0a:df:b3:90:26:2b:29:a2:55:6d:1a:84:d4:
         8e:07:64:9c:6a:73:8e:40:c5:58:0c:4b:a3:f1:a4:88:a9:01:
         19:88:5e:09:f5:74:c9:b1:31:a8:9f:04:db:1a:1f:dc:8d:01:
         86:4a:80:54:c4:38:4f:50:0c:c6:49:75:0e:e1:e2:59:9c:ae:
         2c:6b:8d:5d:4b:38:14:79:d9:0b:08:aa:61:07:3c:c0:bf:e7:
         b2:5c:38:8f:d8:f4:77:29:5c:ff:69:ed:57:51:42:4c:7e:44:
         9c:2e:c9:f9:5e:26:a7:42:f8:3a:cf:b4:c9:28:4e:77:09:a7:
         78:e6:24:0a:ee:da:39:c3:c7:76:5f:cb:9a:70:18:99:4a:8e:
         c0:23:ec:5b:2f:c4:e0:76:ee:63:0d:84:de:78:98:78:fd:4b:
         b9:7f:cb:fd:76:f9:67:1f:e6:92:c3:58:7d:cd:80:6e:00:3e:
         37:df:18:1f:0a:cb:76:53:18:67:d7:cd:ae:31:72:18:ce:0d:
         2d:54:7c:0e:41:38:0e:f0:1c:c7:37:f7:d3:2e:2b:99:73:9a:
         8c:64:0a:b7:c4:47:a1:d0:11:d2:0a:e1:18:51:66:4f:dc:3f:
         c4:fc:f7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:23:38 2025 by rpki-client