Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd564d0c-cad3-38ec-b744-2d7756c19340.roa
File:                     fd564d0c-cad3-38ec-b744-2d7756c19340.roa (raw, json)
Hash identifier:          yaoT04lft9QqGooBbksso/99QF+PxoZ2FubLNrJxzxQ=
Subject key identifier:   39:A7:13:23:B5:48:45:0B:B3:05:F3:C2:65:02:F1:4F:45:16:EE:A8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B87B23D02AE6526D9176DDC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd564d0c-cad3-38ec-b744-2d7756c19340.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        174.249.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:3d:02:ae:65:26:d9:17:6d:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=b8c952f7-ae2d-4fd6-b97c-64e70e8a0559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:83:03:74:96:99:84:46:9e:67:fa:da:c8:61:
                    f6:f3:cb:04:9f:e8:c3:17:4f:7e:3a:e1:5e:d1:8a:
                    a7:28:99:96:0f:ae:46:46:fe:82:e9:e6:34:90:a1:
                    64:df:32:ac:11:da:88:0a:48:8f:74:3b:58:cd:38:
                    b8:3f:92:7e:55:18:e4:df:d2:78:cf:23:35:60:e4:
                    d6:cc:e2:2a:aa:62:62:98:22:8b:f0:e8:39:48:65:
                    f9:38:bb:05:f4:10:16:ce:d0:67:43:93:b0:e8:d9:
                    98:5e:57:69:53:0d:15:de:65:0a:db:6c:81:4e:f4:
                    a5:9a:c8:76:70:68:59:01:8c:b5:53:b0:33:1c:2e:
                    87:b2:f0:89:01:d8:a3:00:21:1e:95:de:6f:b3:25:
                    8a:a6:db:6b:4a:99:d6:e2:47:77:e2:0f:66:11:80:
                    1c:46:b5:58:38:a4:3e:5d:e5:ae:36:fb:d4:a5:58:
                    2e:54:5c:48:15:0b:09:83:f3:08:41:ef:b1:5e:a2:
                    8d:35:23:ed:b1:d5:8f:4d:0b:88:a4:94:66:07:fc:
                    ab:9b:b3:59:8d:75:18:19:80:a4:08:66:ce:fc:d4:
                    59:f1:37:30:e7:58:32:bc:74:74:d2:ed:b8:3a:03:
                    cc:43:4b:0a:1c:f3:6c:28:c7:12:c3:f9:89:e6:f7:
                    ac:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A7:13:23:B5:48:45:0B:B3:05:F3:C2:65:02:F1:4F:45:16:EE:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd564d0c-cad3-38ec-b744-2d7756c19340.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.249.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:ef:6b:66:a9:7e:46:72:d7:e6:c2:ce:ad:93:1a:b2:7b:3b:
         86:56:ca:e2:c0:86:68:60:d4:80:b4:e6:41:47:58:2b:f4:79:
         5b:92:8c:81:64:3f:8e:f2:f5:2b:2c:7c:a8:56:46:ad:20:e4:
         12:5a:ad:9a:e7:aa:68:b5:fa:44:57:cf:1b:e4:7d:07:17:e2:
         c6:1c:ac:e1:b0:1b:92:99:88:52:57:4f:a7:d8:cf:97:e3:93:
         fc:01:cf:1d:7a:6c:0c:7a:92:7e:7a:27:d0:bf:6d:6e:27:e3:
         94:31:5f:56:4e:95:17:0a:1b:40:e7:f2:b6:e7:68:6b:ae:c9:
         32:6c:6c:c4:f9:ae:8d:96:c1:67:28:e4:ae:bd:35:67:71:1f:
         a0:dd:a5:e3:01:c1:b6:a4:9f:75:c7:56:e4:24:f1:55:6f:ca:
         f9:46:95:77:d3:bc:b2:67:a8:d7:d0:6b:45:59:21:fd:b9:e8:
         62:32:82:1f:09:92:f3:37:2a:0c:8d:c0:91:cb:b8:09:95:12:
         79:ab:f1:fb:bf:5b:d5:1a:4d:f6:e1:ff:2c:76:08:89:52:ff:
         a7:76:42:a6:cb:88:6b:ae:e7:c2:19:a4:6d:58:4e:6d:89:aa:
         e4:f6:ef:8d:f6:7c:7a:3c:9e:73:7f:97:de:55:b0:b0:fe:a9:
         88:3b:f8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:07:11 2025 by rpki-client