Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/011b68fb-13ed-3ee8-98ea-2a0f3d6c3e36.roa
File:                     011b68fb-13ed-3ee8-98ea-2a0f3d6c3e36.roa (raw, json)
Hash identifier:          TPZ8Yh5uilsK8Yomz3sooJz8ufzj7B4ACv2mzOQHHjo=
Subject key identifier:   0F:55:20:B2:FC:B4:B8:43:DF:49:EF:1C:48:2E:D4:62:72:AE:44:E9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7FE0AB8E3DFF3760862C1BC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/011b68fb-13ed-3ee8-98ea-2a0f3d6c3e36.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        174.194.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:ab:8e:3d:ff:37:60:86:2c:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=3c96f38a-4837-47b0-8af1-91ba7741a7e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b5:d6:66:84:aa:71:45:3d:3d:26:6e:6a:72:
                    d2:9a:4f:ab:39:a1:e4:32:b3:cd:a3:38:fb:10:2c:
                    a0:ac:18:00:cd:6e:7e:89:d4:9f:b5:06:40:2f:ee:
                    e2:2b:13:3a:62:ef:0e:17:a1:a7:29:0e:ac:58:a6:
                    50:94:92:a7:4f:8b:cc:d5:37:8b:5b:22:4f:38:fa:
                    b5:90:b5:e7:54:81:01:e9:83:5a:88:03:86:30:7c:
                    1a:09:f4:15:c7:4a:a3:9e:68:42:52:25:77:f8:1c:
                    98:2c:bc:ba:e6:32:13:46:15:bd:49:2f:00:52:7d:
                    39:4c:49:ba:87:45:d6:a7:7a:c9:52:42:27:25:27:
                    87:ef:09:df:aa:46:ba:17:df:83:b8:df:0d:ac:34:
                    e5:59:35:4e:b1:78:b7:22:a4:21:1b:97:48:1b:ca:
                    ee:a1:b2:9a:77:2d:df:9f:76:21:e1:34:c8:13:80:
                    04:1a:58:d7:6b:bf:23:e8:80:3f:2f:b5:53:c3:78:
                    9b:4a:2d:34:06:43:ba:88:79:5e:63:a7:15:18:f2:
                    41:1e:99:5b:fd:ce:f4:a4:a9:76:05:b2:a2:9e:a4:
                    db:99:06:1d:36:62:72:02:fa:0a:d9:89:d6:72:d1:
                    52:60:f1:5c:ea:5a:01:04:89:99:90:16:7b:5c:0a:
                    db:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:55:20:B2:FC:B4:B8:43:DF:49:EF:1C:48:2E:D4:62:72:AE:44:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/011b68fb-13ed-3ee8-98ea-2a0f3d6c3e36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.194.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:6f:10:98:60:57:85:10:eb:f0:71:2a:84:8c:ca:59:4f:04:
         5d:2f:0e:2d:1d:f3:0b:cc:8d:84:40:6b:3d:cb:cc:6f:cc:ae:
         52:6e:49:4a:c7:59:06:65:3a:3e:13:e4:1b:49:56:83:13:1a:
         03:7f:09:dd:f5:19:39:cd:78:20:19:ff:65:b7:d0:a2:b6:bc:
         47:c8:e1:49:9c:7a:7a:c4:f0:74:99:86:70:f0:14:70:23:2a:
         ac:52:aa:bd:c2:ca:e2:7b:c4:56:70:26:f6:79:70:b4:fc:03:
         7d:66:06:a9:b9:db:b2:2b:a0:9d:58:20:72:26:c5:21:eb:04:
         25:44:65:a9:e8:7a:32:a0:ce:73:de:01:c6:c6:20:19:37:de:
         86:d3:e3:a7:0a:14:b2:0b:35:62:b0:a0:5a:9d:8a:ce:13:3f:
         a4:3c:33:4b:73:3b:18:0f:25:bf:27:9a:11:8f:cc:ea:97:d3:
         72:67:61:c7:08:2b:e7:83:99:ff:0f:a7:2c:6d:8e:84:62:c8:
         ca:85:07:64:9c:b9:da:6f:3b:7f:75:77:c3:21:50:c4:45:f2:
         78:28:dd:2b:4a:12:58:ff:79:d7:ec:fe:ea:ec:fd:43:8e:26:
         e3:1c:eb:48:6e:49:82:3b:b8:ca:05:96:ed:4c:35:67:60:b0:
         64:ce:f2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:50:58 2025 by rpki-client