Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c55d1b9-99f1-31b9-8f57-f055c682d4e2.roa
File:                     1c55d1b9-99f1-31b9-8f57-f055c682d4e2.roa (raw, json)
Hash identifier:          9HRR36ufeBQRF58JC1z/W4ciRxWZcCX94muXWaIuCi8=
Subject key identifier:   16:DD:1D:37:55:A7:33:D6:3D:64:5A:D0:9E:F5:AB:39:93:49:42:86
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AAEC793E50A2A3A59CFE76600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c55d1b9-99f1-31b9-8f57-f055c682d4e2.roa
Signing time:             Tue 29 Jul 2025 20:13:32 +0000
ROA not before:           Tue 29 Jul 2025 20:13:32 +0000
ROA not after:            Mon 27 Oct 2025 20:13:32 +0000
asID:                     6167
IP address blocks:        174.255.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ae:c7:93:e5:0a:2a:3a:59:cf:e7:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 20:13:32 2025 GMT
            Not After : Oct 27 20:13:32 2025 GMT
        Subject: CN=6d4d4d72-e429-4a4f-8f23-2598c10a8885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3b:12:ba:64:39:12:61:bb:91:89:1c:45:c9:
                    5f:18:55:46:4a:12:ec:39:20:6a:d6:9f:52:3d:47:
                    51:fd:63:5c:8a:a5:ac:38:2c:f5:a9:4e:7b:26:27:
                    e2:8b:6b:49:c6:ca:8c:aa:ed:f1:57:97:eb:88:97:
                    9f:63:5c:55:e5:3e:31:12:6d:c1:3a:80:6e:47:fe:
                    ab:8c:15:29:e6:0a:d0:f3:f6:1c:0a:fe:09:3a:6b:
                    7c:e2:62:67:35:09:75:3b:b0:a0:3f:3a:f7:3d:dc:
                    19:ee:d8:5f:07:51:00:5a:5c:29:52:05:a1:94:79:
                    af:f0:db:91:1d:a5:31:3a:4f:aa:87:3a:65:2a:aa:
                    7d:c6:c2:07:7c:71:a3:ed:d1:4c:62:50:f6:60:69:
                    c2:00:86:9a:84:3c:2d:22:51:14:31:99:e0:d1:6c:
                    e4:d6:1e:ba:ca:af:04:d8:c8:a1:4b:a1:08:8c:8a:
                    2d:5f:81:56:4b:f9:d7:27:cb:1f:52:e5:43:6f:94:
                    45:bc:6b:0d:bd:bf:fb:5c:22:2b:5f:1c:1f:5e:b1:
                    d7:e3:5e:be:e2:ef:c8:56:83:a1:07:23:8b:98:f6:
                    f4:1c:5f:9e:fa:fd:bb:e8:01:04:bb:2f:91:d4:d5:
                    45:2c:f5:ce:9d:03:73:91:41:4b:da:0d:a3:c7:84:
                    da:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DD:1D:37:55:A7:33:D6:3D:64:5A:D0:9E:F5:AB:39:93:49:42:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c55d1b9-99f1-31b9-8f57-f055c682d4e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.255.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:f8:6d:af:f2:07:1a:1d:a1:6a:8a:98:23:69:b4:9e:60:39:
         e1:70:b1:70:f5:4f:ad:93:eb:75:b3:82:91:0b:dc:7c:8b:14:
         11:0b:11:aa:b1:1a:f0:12:9c:8f:df:28:62:4f:4a:ed:3a:e7:
         a5:91:68:48:1b:eb:85:d4:6c:bd:67:c6:dd:c6:70:6a:ad:25:
         ae:0d:e9:45:bf:73:13:a3:67:c6:5e:3b:91:f8:fd:fe:d2:a5:
         ef:97:58:af:ac:a0:23:57:df:91:da:3b:90:e9:65:0b:9e:e8:
         2f:84:bc:90:3f:cb:67:6b:26:a8:3f:2e:be:ab:ec:26:9b:a2:
         89:f1:41:36:e2:90:33:30:d0:b3:10:65:0c:b6:13:f7:a9:85:
         56:e9:e4:3d:1b:c2:12:52:02:aa:e8:c3:88:2d:7f:5b:cb:e1:
         0d:f3:00:76:3c:6b:64:1b:25:67:41:25:d0:19:b5:82:c7:c5:
         7a:32:05:47:92:ba:ce:cf:1e:0b:a4:f3:a5:37:ec:a0:98:62:
         c8:41:ca:fe:76:c1:bf:24:22:bb:a3:36:2d:9e:d4:f5:00:06:
         6a:9b:e5:d1:c2:0b:ee:e1:c1:49:f3:82:c4:f2:f0:db:e7:bc:
         1c:54:26:fa:30:c1:f4:a2:18:10:a1:4d:17:37:c9:86:09:c3:
         27:1c:2c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:12:45 2025 by rpki-client