Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1a52c192-a570-3a6d-b546-198eb93677f9.roa
File:                     1a52c192-a570-3a6d-b546-198eb93677f9.roa (raw, json)
Hash identifier:          UvUvn/U0jQWGj/JR9QydLQcrkDi9QshkMT1aEHcVUHQ=
Subject key identifier:   B9:C7:78:60:77:F5:FA:19:22:8D:89:53:9C:08:E5:44:FF:F4:2F:96
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AA6F639FCC4F3064EF55DBB00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1a52c192-a570-3a6d-b546-198eb93677f9.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        174.232.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:39:fc:c4:f3:06:4e:f5:5d:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=05302f58-5874-4b76-9c47-adcf075cd5be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:42:c4:e3:e2:62:c3:ef:b3:84:2c:bf:9c:93:
                    6f:70:9a:60:4b:92:07:d4:2b:68:60:f6:fe:15:d5:
                    c3:b1:31:88:6f:3d:c5:f5:d4:bc:b7:65:63:5d:9c:
                    8a:f5:02:96:3d:35:76:29:e2:75:b8:c9:57:f0:1d:
                    05:09:eb:16:04:42:71:28:44:60:40:a0:55:ef:a4:
                    c0:72:97:e4:d8:35:f5:21:20:6b:1e:f7:a4:2f:3f:
                    3e:92:18:91:b7:a8:64:f3:b0:20:59:1a:d8:b0:ca:
                    65:44:68:ee:44:83:cc:51:e2:c6:e8:e6:94:c2:28:
                    ee:4d:b2:12:a7:30:06:80:ce:2a:1a:23:28:d6:7e:
                    77:2c:b7:26:c4:45:f6:5a:a8:31:7b:66:ba:69:6a:
                    14:85:d1:e9:28:08:03:00:a4:54:f4:2e:52:50:05:
                    84:c6:23:7b:fc:ac:51:7f:e7:f1:2f:b6:2a:94:4f:
                    3f:fe:51:73:0a:f8:ec:72:1b:71:ba:3b:82:96:dc:
                    b7:6d:19:f2:bc:4b:a7:46:9b:55:9c:c5:b5:68:10:
                    ca:96:08:d2:34:a0:b2:47:49:46:b0:6b:30:d7:ca:
                    70:73:b5:ae:05:29:bd:8a:b5:54:e2:b3:9e:a0:94:
                    b7:28:8d:cd:97:ef:b1:42:fc:e6:fe:8e:80:0e:1d:
                    dc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C7:78:60:77:F5:FA:19:22:8D:89:53:9C:08:E5:44:FF:F4:2F:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1a52c192-a570-3a6d-b546-198eb93677f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.232.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:ef:ce:4a:15:1a:e0:03:ff:6c:99:a2:42:49:f3:43:fa:7d:
         7a:55:c6:54:56:86:cc:d5:08:5e:46:4c:02:25:f6:57:90:4a:
         60:7e:2b:43:97:b5:b1:65:25:bc:ee:63:9d:1d:e9:b1:ee:d6:
         7b:73:f3:f8:50:f1:d7:0e:43:38:f9:bd:cd:d3:90:f2:5b:ce:
         8f:1e:30:b6:bd:9b:09:e4:74:96:4c:89:3c:6b:23:fb:66:46:
         c8:44:f5:b9:51:fa:0d:55:e4:20:fd:c3:8b:ba:dc:75:e3:23:
         96:74:5c:f7:ca:0d:18:98:b7:9c:48:a1:1b:5a:07:aa:cb:1c:
         fd:25:4e:b5:83:f2:6f:cd:8a:12:fc:69:96:ed:10:8c:a9:50:
         2f:10:10:8e:e6:0a:ba:85:fa:00:e0:05:44:57:10:27:d9:14:
         be:dc:b9:05:1d:c3:b2:88:82:f2:c5:e6:1d:d5:22:de:c7:09:
         06:29:db:c9:19:11:ef:35:b5:03:39:db:b7:06:45:a2:f0:3c:
         9c:dc:8c:64:d4:af:9c:b7:6d:a0:c0:0b:62:26:1f:04:e8:32:
         67:70:c5:1e:85:c2:5e:21:fd:b5:34:d1:dc:82:79:95:ad:8e:
         05:20:fd:ed:8a:3b:a0:2a:4d:3e:60:da:cb:53:7d:02:a6:29:
         1b:36:29:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:48:10 2025 by rpki-client