Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/73407e55-bb87-3af2-979f-f557fb0f4b02.roa
File:                     73407e55-bb87-3af2-979f-f557fb0f4b02.roa (raw, json)
Hash identifier:          +upP5VbHC2T2gh9OUygjEfh4bOVI3CtzGCD41WSjIU8=
Subject key identifier:   31:1D:80:49:DC:48:09:93:1B:29:90:ED:71:49:12:0C:33:C0:83:1A
Certificate issuer:       /CN=9a696f17-cb36-4b2b-be82-47f0c467096d
Certificate serial:       010D0C9F4328584AAB2665FA786E8E98D446E700
Authority key identifier: 38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/73407e55-bb87-3af2-979f-f557fb0f4b02.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     46632
IP address blocks:        174.137.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:65:fa:78:6e:8e:98:d4:46:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a696f17-cb36-4b2b-be82-47f0c467096d
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=76366b15-c46e-4851-8de3-6d943469c213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0d:8c:0e:60:61:9e:3e:be:26:e2:3d:c5:87:
                    29:4d:36:8e:1d:a5:33:51:60:8b:e8:7b:db:81:3d:
                    35:f5:77:36:ab:88:1d:67:0a:d1:fc:b9:81:f7:8e:
                    ee:6b:5c:01:27:20:97:6a:05:8f:98:e7:93:90:1c:
                    d4:d0:be:e0:7b:38:e7:83:a4:c3:e1:6c:20:01:39:
                    cf:0b:4d:57:42:f4:d6:b3:2f:ec:d6:ea:56:3b:a6:
                    47:ef:d8:0c:7a:1f:42:01:31:76:c7:98:ee:7e:01:
                    79:8d:d8:aa:52:70:ac:e4:6b:93:a9:08:7a:86:7a:
                    6b:c8:50:94:69:d3:91:b2:e7:3b:dd:dd:af:1f:5e:
                    c8:27:1e:60:f0:26:88:87:57:32:2e:5b:99:17:b1:
                    a9:66:1e:a5:71:14:a4:1e:95:9c:07:78:45:17:3f:
                    67:9a:28:ff:c9:0f:df:79:f4:f2:8a:a2:04:42:04:
                    28:16:08:5c:50:e4:fd:40:59:82:30:97:e5:e3:c8:
                    65:78:9c:67:5a:7b:88:0f:d4:dc:e4:a6:cd:42:19:
                    d6:86:1a:79:3a:41:2e:02:17:cf:81:a5:6d:ef:84:
                    af:86:3a:ad:11:64:ae:a1:23:40:8d:de:45:dd:9b:
                    96:5b:a2:9d:e5:75:ce:cc:bd:ad:de:0d:0c:19:bb:
                    4d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1D:80:49:DC:48:09:93:1B:29:90:ED:71:49:12:0C:33:C0:83:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/73407e55-bb87-3af2-979f-f557fb0f4b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl

            X509v3 Authority Key Identifier:
                keyid:38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:e0:25:26:f4:35:38:89:24:56:28:13:1d:c5:2a:07:a7:2f:
         40:dd:51:86:6c:e2:f7:38:16:2b:66:30:c0:bc:eb:8a:55:eb:
         b1:72:55:02:fb:07:9e:c5:89:12:f1:fb:52:62:62:b3:ed:23:
         f9:f4:09:85:ee:66:59:d0:99:b9:bc:fb:95:2c:7f:51:0b:9d:
         e4:ce:d9:5f:15:8e:4c:ab:c4:ae:e3:86:42:6d:95:1c:a7:4a:
         8f:1e:84:4d:28:2b:6e:88:94:44:11:9c:33:1a:15:91:83:c4:
         90:47:f4:8d:3d:9c:fe:70:e5:4d:c5:39:b1:67:be:63:bb:e7:
         8c:a0:d0:67:49:c5:e8:81:ce:a4:d0:5e:9b:3e:4b:d3:46:e8:
         f4:b8:4f:16:ac:b9:55:d7:b9:96:98:6b:a1:22:21:30:05:f5:
         f6:49:b2:bd:53:ea:7c:d7:6e:15:0e:77:01:d3:43:88:54:f6:
         fc:a6:ac:c9:ef:81:9d:1f:35:44:50:ae:ad:3d:b6:8b:f5:99:
         a8:e4:d4:d1:22:2a:cf:d5:10:f3:ce:49:f6:7c:4d:d4:6c:64:
         6a:56:66:5f:5d:5c:9c:9e:01:55:12:81:e0:a4:31:9f:13:0a:
         ac:01:46:c2:26:f1:af:cb:4f:77:6e:5c:2c:e6:d5:f0:a2:1b:
         c9:78:fc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:05:51 2025 by rpki-client