Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f299cef4-a12b-34b8-be35-26ae77b415a0.roa
File:                     f299cef4-a12b-34b8-be35-26ae77b415a0.roa (raw, json)
Hash identifier:          /oAZyJ8ZKMNtJ1/WyQ5NbadTPiqNew2yXGIZzehnY00=
Subject key identifier:   4F:A2:22:32:20:E4:FD:C1:0C:96:5F:A8:01:2C:46:AA:2D:D5:B8:E3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B8EAD081CFED0778B69209DC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f299cef4-a12b-34b8-be35-26ae77b415a0.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     22394
IP address blocks:        174.41.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ad:08:1c:fe:d0:77:8b:69:20:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=7798b27d-2a82-41e6-937d-452ad6a9b4d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a5:df:12:e9:76:af:3c:63:98:f8:d9:20:ce:
                    be:5c:16:a9:26:1e:2f:6f:37:54:ac:7e:d7:30:44:
                    78:1e:cb:72:2d:d4:b2:5d:ea:df:74:f9:57:62:93:
                    2b:34:61:37:cc:fc:cb:f7:6b:27:d3:02:78:01:ff:
                    c3:f9:0f:e1:7d:f1:d2:6f:5f:ee:3e:a0:19:96:2e:
                    ea:e6:b7:c0:da:7b:07:2a:c0:e9:77:1a:38:23:05:
                    86:6d:da:1c:b3:68:ae:02:91:f3:3c:c7:a7:a2:58:
                    3e:28:de:a2:50:df:2c:b1:77:94:66:0b:3a:eb:26:
                    3b:4c:ad:29:c7:c3:e7:ee:b4:24:17:9e:44:c2:7a:
                    e6:a7:dd:63:32:a6:69:e6:a8:17:3c:40:35:ae:59:
                    80:b4:38:ea:fe:e1:78:7f:14:66:4d:2e:1b:3b:77:
                    5c:c1:f8:7d:59:2c:75:87:2b:a7:d3:63:55:18:47:
                    65:8d:5f:db:7d:2f:d0:b5:c7:ef:59:63:cd:ba:05:
                    e6:86:79:86:8d:2f:27:40:da:3f:db:a3:00:fd:f4:
                    99:8a:48:73:80:db:ce:49:bb:cc:ed:38:01:e5:9f:
                    4e:2a:d6:fc:9a:8a:ac:38:ce:ed:e7:62:d6:7a:2f:
                    4f:08:de:2c:1f:18:31:c2:75:3a:ba:d6:60:80:2b:
                    2b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A2:22:32:20:E4:FD:C1:0C:96:5F:A8:01:2C:46:AA:2D:D5:B8:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f299cef4-a12b-34b8-be35-26ae77b415a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:80:24:b7:e8:e9:f4:96:6a:1b:a1:b5:60:66:08:81:7b:9f:
         f7:7b:fc:ab:fe:d5:0f:44:06:83:c9:4c:ec:a9:f2:74:ab:fe:
         b9:7a:b2:86:de:fd:46:fb:ae:aa:96:2f:16:6b:33:e1:33:68:
         bd:bd:e1:00:b0:00:86:cb:e4:2e:75:bd:7b:9b:30:2a:58:62:
         ca:62:e0:59:86:20:ad:3b:ff:b6:9b:61:f9:e4:2e:19:95:47:
         09:41:8e:a2:80:9a:80:92:bb:c5:e0:1e:95:b5:d2:a5:16:eb:
         0b:81:7d:0f:9f:99:d9:89:76:3d:6c:39:54:a4:ac:a8:1d:d3:
         b2:5d:17:f3:f8:d9:a3:d4:00:f4:40:82:eb:48:0e:a2:0b:f8:
         23:7b:ef:67:23:41:81:2b:ef:de:ba:8f:60:34:7d:3a:84:57:
         bb:75:00:4d:ce:2d:ab:9a:87:30:b7:ad:d2:2e:20:43:83:04:
         c0:32:26:aa:f6:8f:56:0d:9d:a4:29:a3:0e:e7:7d:e5:40:70:
         46:d3:73:90:9c:f2:a4:af:36:b4:2d:36:66:28:2c:0e:d9:b2:
         0b:91:15:f3:e8:bd:84:65:29:98:bb:40:68:c2:9c:a8:30:19:
         e8:ce:61:b8:85:5f:25:39:fd:18:b7:29:6f:87:30:f6:26:11:
         2e:9f:e8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:25:14 2025 by rpki-client