Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cb32344-435b-37b6-86aa-873adbe9c521.roa
File:                     1cb32344-435b-37b6-86aa-873adbe9c521.roa (raw, json)
Hash identifier:          abYzPWoDKTZF+DwkMHIgkv3AQNjmCsounFphCX8OLcE=
Subject key identifier:   4F:26:83:8C:68:8A:CE:FB:43:86:70:3C:09:AE:2D:C4:10:44:64:88
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AA6F63B7B7667602D8B7D5658
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cb32344-435b-37b6-86aa-873adbe9c521.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        174.235.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:3b:7b:76:67:60:2d:8b:7d:56:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=e028b4f5-d805-4c01-8204-426d98d5bec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:db:ad:4f:f1:ee:35:5d:fb:4f:4f:7c:86:
                    d1:a4:34:60:61:f8:50:b4:57:4e:a6:13:68:f9:c3:
                    28:65:07:ed:11:a2:c8:12:a3:cd:12:4d:9b:35:f2:
                    69:e3:a6:98:ca:78:33:fb:f8:3c:5c:07:6f:60:d2:
                    76:5c:b7:a1:f0:93:5d:6d:3c:9c:28:39:04:80:2d:
                    da:7d:78:c4:18:91:8d:7f:3f:b2:99:0f:d8:1f:3a:
                    27:00:c1:62:f8:d4:4b:67:d5:b1:b6:15:42:4f:a9:
                    9a:3f:58:7b:b8:51:5f:9a:c8:a0:eb:e7:de:36:5e:
                    2f:b7:a0:48:78:f4:5e:ab:e9:b7:15:2e:2c:d3:b3:
                    3f:95:08:f3:81:bb:cf:4e:6c:cd:0f:44:2b:8c:fc:
                    0c:7a:84:77:81:12:d8:39:73:2e:79:87:6e:9a:e0:
                    72:ad:67:16:8c:58:0b:7f:88:cc:48:b5:1a:44:78:
                    ef:a8:9c:01:e6:6d:eb:2b:7a:22:7d:65:d4:00:f7:
                    b4:14:bc:e0:86:a3:ec:25:02:f6:06:f7:9c:1d:d6:
                    40:b8:7a:9b:14:72:0f:a5:aa:9e:35:bd:dd:43:02:
                    e3:f9:87:1e:f3:e8:6e:c8:00:1b:c8:93:4f:9e:56:
                    8b:6d:ba:a8:8e:93:a4:9b:52:66:6a:8c:d9:1c:29:
                    df:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:26:83:8C:68:8A:CE:FB:43:86:70:3C:09:AE:2D:C4:10:44:64:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cb32344-435b-37b6-86aa-873adbe9c521.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.235.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:97:6a:65:86:bf:a9:8e:ca:cd:63:6a:05:46:4a:a6:55:d4:
         9d:10:cc:e8:03:ee:f3:d7:8f:4d:4a:bc:7a:8f:9e:66:76:04:
         9e:bc:e0:b6:ca:52:1a:22:41:e7:17:f5:a4:e7:f3:08:b7:d2:
         38:94:de:eb:5e:4a:e9:ca:5d:52:a4:ed:0c:4c:16:89:93:3a:
         30:b6:e4:94:6a:ad:2f:c2:92:5a:21:3c:6b:8c:86:96:3f:be:
         82:b9:7b:51:c1:26:12:bf:88:90:b4:01:99:85:2c:63:8b:cc:
         70:1d:1a:46:57:fb:0f:da:c1:a2:14:fd:21:8d:ca:62:55:05:
         ee:89:c9:68:98:bb:47:4b:32:92:61:ef:d9:fe:08:71:ec:25:
         00:55:8f:52:fd:91:06:5c:bb:24:67:5e:00:d1:3e:7b:8a:47:
         22:4c:30:d9:2a:73:af:32:48:f9:58:9a:a4:a0:eb:36:8b:cc:
         dd:be:56:a7:f8:5a:1c:62:5e:9b:ea:43:ba:32:b0:e3:e1:19:
         40:14:86:0b:59:c0:a1:f0:a3:75:a6:d9:09:81:52:56:a2:be:
         c2:fa:80:85:0d:bc:54:2e:fb:c5:16:ee:52:7f:2a:bf:aa:1c:
         33:00:f6:1d:de:83:c7:04:32:16:b9:bd:23:23:28:c5:89:be:
         65:c9:75:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:11:55 2025 by rpki-client