Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/16a61fd4-0cf1-3c21-b6af-9930d2d29d9b.roa
File:                     16a61fd4-0cf1-3c21-b6af-9930d2d29d9b.roa (raw, json)
Hash identifier:          pLXGqa9T+/p5tcndvKEQnSkiszylGQbVHD8UoNJPCBU=
Subject key identifier:   17:A6:81:F7:34:4B:B4:E5:EA:90:32:77:7C:5B:BA:F3:F5:36:43:01
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7FE0A2D44453D26F3328D000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/16a61fd4-0cf1-3c21-b6af-9930d2d29d9b.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        174.216.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:a2:d4:44:53:d2:6f:33:28:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=d511ed4b-7af8-4315-9d90-d3baa9488cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9e:f6:7c:1a:a8:48:d6:32:62:8e:1b:29:40:
                    57:f8:46:90:87:a4:46:6e:ac:77:22:84:85:8d:f8:
                    3a:7f:1b:a6:e0:78:28:4f:9c:61:08:c8:9a:03:5e:
                    83:c5:09:52:9c:ea:05:91:20:89:88:05:26:c1:e6:
                    18:0a:7b:f0:91:fb:61:9d:01:b4:c4:51:32:64:e4:
                    90:1f:5c:46:b2:83:93:83:9b:14:38:07:e0:8c:06:
                    c9:d2:2e:52:03:fd:77:b7:e6:32:ec:49:21:7f:9b:
                    2a:fd:30:f0:f5:ae:30:cb:43:ec:bf:4c:3f:a2:63:
                    a5:0f:09:cf:1c:80:d1:52:eb:fe:0f:ca:b1:b2:18:
                    c6:bd:d2:41:66:65:6f:92:1c:8e:42:52:25:72:a7:
                    de:f4:d4:da:ac:c2:3f:2e:7c:90:3f:67:72:d5:d5:
                    6e:69:74:06:7c:6c:ae:78:c3:60:66:d4:31:3c:ee:
                    cb:eb:8e:90:1e:38:2c:bd:19:11:0b:a9:e9:c9:d2:
                    23:eb:af:c9:e6:bd:bf:a8:92:7a:4d:3c:16:fb:10:
                    82:44:80:90:e5:f0:05:79:46:f5:bf:67:0c:12:09:
                    39:89:45:89:5f:9c:04:17:fc:0f:d5:6b:41:98:56:
                    0a:3e:d5:98:cc:fb:02:37:7b:4f:73:ed:be:22:8b:
                    e4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A6:81:F7:34:4B:B4:E5:EA:90:32:77:7C:5B:BA:F3:F5:36:43:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/16a61fd4-0cf1-3c21-b6af-9930d2d29d9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.216.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:0f:8c:e9:36:d2:30:90:d7:24:b0:19:ac:6b:71:33:df:bf:
         04:b8:34:37:b5:e1:84:31:b7:bc:16:50:3a:95:ed:14:81:3e:
         1d:76:a7:a3:8b:03:62:f5:53:2c:fd:06:3b:b7:d8:82:58:41:
         ae:fe:0c:57:af:db:32:45:4e:e2:8a:fc:4e:68:9c:72:de:60:
         e7:9b:6c:dd:31:15:1e:3e:39:d0:ed:ac:07:5a:11:09:c3:1c:
         ef:21:24:bd:d6:13:64:40:88:51:d5:8e:4a:03:5c:bb:02:f2:
         5e:49:32:87:f9:f4:14:4c:3a:da:51:40:cf:e5:8d:4d:f2:07:
         ee:22:c3:fc:97:02:af:7b:7c:37:d7:55:03:1f:93:ba:c9:ab:
         b0:28:78:56:29:e4:14:b2:6a:4f:89:a7:da:fe:76:29:1c:7d:
         e1:2f:60:c2:3a:48:59:74:9d:38:ac:db:33:3d:df:ec:d9:e0:
         48:e6:10:7b:cc:59:93:67:40:09:fe:e9:48:92:3b:e0:6b:d3:
         2c:cf:f3:e2:dc:e5:3d:03:bf:84:17:3f:7e:6d:b9:9d:30:2a:
         60:75:29:41:29:4d:e8:33:e9:71:05:16:b7:71:b7:4f:87:0a:
         ee:02:54:92:f9:e3:cb:18:cd:9c:c3:1b:42:1f:2f:22:1c:51:
         bc:9a:dc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:37:40 2025 by rpki-client