Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/219c85a6-9456-3e18-bd6f-cd1ed0143fe9.roa
File:                     219c85a6-9456-3e18-bd6f-cd1ed0143fe9.roa (raw, json)
Hash identifier:          fIwP2m3d8IuJrspC5tG5BtSl77yvXL/MyuCfMyfYAAs=
Subject key identifier:   A7:FD:C4:92:39:E1:5E:48:B9:16:87:4D:D8:1A:B6:E9:EA:7F:45:B0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AA6F63E69352CB82F0F299740
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/219c85a6-9456-3e18-bd6f-cd1ed0143fe9.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        174.239.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:3e:69:35:2c:b8:2f:0f:29:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=16b74280-05c5-4a46-b685-e577cd5f2d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:02:64:a0:da:55:57:5c:68:6a:a6:e0:bd:8f:
                    5f:89:fb:64:43:be:32:f7:37:29:99:0e:93:86:47:
                    67:e1:c1:cb:bd:d0:f2:89:cb:99:d7:32:7a:6f:ba:
                    45:50:30:ef:b6:02:2f:34:8a:e9:59:e1:28:5c:b7:
                    a7:53:4c:83:33:af:f0:88:4c:38:87:d9:2f:22:ec:
                    c7:7c:f0:2e:50:e7:15:f5:bf:55:e9:12:1b:a6:45:
                    98:a8:79:55:76:d4:66:eb:ec:8d:f2:5d:19:d7:19:
                    5b:7c:43:b7:06:3a:6e:41:7f:6b:5f:62:d3:90:93:
                    b0:b4:c3:c1:81:38:20:30:72:29:84:26:c0:78:00:
                    84:2f:96:f2:33:11:ec:bc:0e:7a:5d:5f:47:9d:ad:
                    51:db:82:84:d9:bf:65:cb:13:65:a7:49:95:f6:db:
                    24:bd:ba:fc:0b:73:d2:be:69:f8:3f:e8:75:b5:b0:
                    84:02:d2:fc:ee:e4:18:ed:fe:b7:7f:39:ac:9b:55:
                    1d:b8:2b:6b:59:3e:70:11:99:b4:58:3c:7d:95:9f:
                    3e:83:8d:f0:16:f4:90:bb:e9:e5:94:e0:26:9e:f8:
                    62:bf:dd:8f:f1:69:3e:aa:fa:6c:b3:37:90:4a:58:
                    e0:0a:21:ce:ca:8c:24:d4:99:db:7e:18:b7:59:a5:
                    e3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FD:C4:92:39:E1:5E:48:B9:16:87:4D:D8:1A:B6:E9:EA:7F:45:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/219c85a6-9456-3e18-bd6f-cd1ed0143fe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.239.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:d5:1a:b9:54:8f:c9:71:dc:06:59:98:e6:0f:51:19:32:06:
         4d:be:e2:f6:79:65:4e:3c:e2:c6:73:ec:8d:4e:c4:48:94:88:
         b9:b8:57:37:19:77:4c:fd:45:a3:84:0d:00:a9:01:55:bc:cc:
         a9:8e:b9:de:9e:32:c3:41:e1:ab:75:c7:2f:10:4f:5e:23:d7:
         14:ae:aa:1f:76:87:57:e8:de:25:13:84:9f:e8:fe:d4:3e:4a:
         81:db:4a:39:4b:19:d0:b3:47:b3:af:ea:19:41:d5:d9:5b:5c:
         6a:e3:b3:10:03:59:d3:e8:ea:57:b3:a1:fe:fa:67:4f:20:28:
         4f:49:c8:ab:b3:29:61:5d:fa:46:e5:33:be:6b:d5:f8:10:69:
         37:fa:2c:1a:29:a2:5c:f1:c7:74:e4:63:a6:66:00:3a:ce:81:
         66:07:df:8c:92:38:af:39:d8:2e:1f:1a:19:ca:a9:dd:c5:72:
         30:0d:8f:59:c1:4c:fe:19:d3:dc:6f:d9:26:d1:c7:ee:ce:10:
         c1:52:07:4f:d9:20:d5:a8:d6:a5:a6:49:12:39:01:6c:43:2c:
         33:3a:6b:ff:69:62:3c:1a:f7:9c:07:27:d4:70:53:ed:b8:3c:
         06:11:ff:8d:0e:54:42:5e:14:55:01:9b:8e:87:0d:3e:85:9f:
         01:8f:ca:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:52:15 2025 by rpki-client