Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f6bc21a4-c967-32bf-b5d6-1206eed4a60f.roa
File:                     f6bc21a4-c967-32bf-b5d6-1206eed4a60f.roa (raw, json)
Hash identifier:          Sdgos79VBxVmaIC/ts6MZOjM6ZuqHeUHGcN1c6CE86c=
Subject key identifier:   D0:2B:BC:DC:64:49:53:1C:F2:DF:DB:EE:3E:47:8C:FC:C0:0F:E9:C8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B8EACFAF8B997C55BD0529C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f6bc21a4-c967-32bf-b5d6-1206eed4a60f.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     22394
IP address blocks:        174.41.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:fa:f8:b9:97:c5:5b:d0:52:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=e8f7d22d-95d3-42f0-b690-52aded34a27f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:65:09:60:bf:80:31:76:f8:0b:bf:d2:7f:53:
                    81:61:f6:e3:2f:c5:dd:35:dd:37:cc:37:07:42:94:
                    0f:b5:e9:6f:9f:40:91:fd:3d:5f:b7:0e:d0:3e:82:
                    20:4a:89:d7:ca:52:f4:4e:aa:a0:fc:b2:2b:5d:c7:
                    dd:1b:33:9d:94:cf:bb:d4:f1:45:60:04:f5:90:fe:
                    fc:16:45:9b:09:2b:80:e5:35:73:93:59:b2:1a:d6:
                    97:49:de:4e:0b:d0:27:e7:04:a1:1d:e3:9a:fa:54:
                    28:ed:f5:df:f5:d2:4d:da:33:ef:20:49:97:0f:32:
                    ee:98:8c:e9:70:c1:cf:33:19:1a:00:68:fe:6f:df:
                    0c:40:3d:5f:f3:04:f2:0a:d4:2a:b7:7f:dc:a6:f8:
                    89:22:48:81:03:e6:5a:64:be:67:d2:2e:ed:f9:c0:
                    1c:c9:ba:bf:b3:7d:db:ac:92:f0:78:31:30:62:d1:
                    2c:99:20:30:05:9b:0b:fa:40:ef:0b:aa:ee:c9:c3:
                    49:98:45:33:38:74:3a:0c:5d:df:d6:a1:b2:4a:e0:
                    a1:3b:81:26:d5:20:22:ab:1b:0f:5b:72:c1:64:b1:
                    e1:ab:02:e2:f1:f1:c3:c3:c0:40:bd:39:da:6a:5a:
                    b3:c1:c8:6a:d4:d3:f2:fc:c5:8f:16:24:d2:98:0d:
                    81:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2B:BC:DC:64:49:53:1C:F2:DF:DB:EE:3E:47:8C:FC:C0:0F:E9:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f6bc21a4-c967-32bf-b5d6-1206eed4a60f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:09:e6:87:72:6d:3e:8f:8f:16:c1:a7:7d:b2:b9:f2:a7:5e:
         02:14:ea:f4:db:b5:d2:19:eb:e3:29:c8:0a:80:55:ad:02:d6:
         ff:8b:d7:0a:70:b5:8e:cc:a8:8f:67:a6:66:80:da:10:ba:67:
         16:98:6e:7c:67:08:76:59:e5:d1:04:c2:ea:92:e6:48:dc:f5:
         26:46:e5:c9:a4:b9:81:71:01:8a:ff:b0:ee:df:43:19:84:ac:
         8b:c5:d3:02:1c:d6:35:d4:21:8f:30:5b:e4:98:ac:73:46:55:
         dd:69:3b:d9:97:6b:14:66:4d:02:a9:54:db:7c:60:3c:2a:2b:
         f9:74:a2:ca:e8:ac:2d:69:8a:0c:f5:35:4d:7b:68:c6:de:64:
         82:41:ea:35:ef:9b:56:08:f7:74:90:95:ee:15:56:71:b8:22:
         8f:fb:9f:e0:cf:d3:17:3b:09:8b:ed:86:5c:74:74:22:ae:51:
         ed:e4:94:cb:8c:04:36:55:13:08:7d:5a:6e:b2:18:96:21:de:
         15:8f:2e:13:cb:b4:19:04:5d:0d:4d:ae:c7:b1:2a:26:f7:80:
         52:01:17:9d:c4:de:4b:2f:09:61:eb:8a:1c:51:8c:1b:25:22:
         a3:4f:d6:a1:c0:55:fb:db:37:1e:07:73:7a:ef:31:52:c6:8d:
         20:65:88:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:23:01 2025 by rpki-client