Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32ee1528-8e66-321c-b5d3-856cc00bc3e3.roa
File:                     32ee1528-8e66-321c-b5d3-856cc00bc3e3.roa (raw, json)
Hash identifier:          EFmsHJcBSPi3TA1ytaE1zjJKJ8NZy1+cm+/mzvmaDDU=
Subject key identifier:   CE:05:55:C4:A7:96:C0:8F:43:89:BF:9C:72:4E:78:21:64:FB:FF:B1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AA6F643ECDA4F13839041D100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32ee1528-8e66-321c-b5d3-856cc00bc3e3.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        174.247.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:43:ec:da:4f:13:83:90:41:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=9e6b5512-b577-4eb8-896d-938cf7f5460a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:83:39:04:cf:5f:a6:1e:8e:bc:24:b6:d2:e4:
                    2d:81:40:16:f4:b9:32:70:e1:3e:a8:9a:fa:86:9a:
                    57:2b:97:85:64:b7:85:2a:aa:c4:1f:a4:08:05:58:
                    7e:f8:4b:92:14:69:eb:5f:73:38:a7:0c:93:86:0a:
                    c5:16:6b:05:e4:13:88:82:21:3b:21:7d:a9:99:31:
                    5a:1d:47:8f:da:2b:7d:31:90:dd:20:e2:11:ce:03:
                    a5:33:7f:fc:71:d0:f3:9e:72:3f:3a:48:bd:49:dd:
                    c4:2d:af:bd:18:db:e6:73:e6:07:5b:29:91:68:ce:
                    af:57:ee:f3:d0:69:a6:6a:a5:c9:9d:13:c0:c7:76:
                    9a:f8:0a:8a:c4:ca:51:ab:63:aa:8f:86:f4:87:0d:
                    98:33:04:cc:4c:c8:f0:d2:90:e9:f1:37:0e:98:39:
                    b6:86:9e:c6:13:56:79:3d:1f:3c:b0:fa:0c:d2:2f:
                    a2:f6:7d:c7:dc:24:59:dc:8a:b1:10:4f:ef:0a:ba:
                    4f:04:52:81:e7:5f:b5:6a:47:26:d9:cd:2e:61:e9:
                    1d:43:c4:44:49:f8:cf:39:c9:45:6f:46:bd:37:da:
                    da:7f:cd:13:58:ab:a1:b5:a9:5a:8f:b1:a8:d6:86:
                    cc:f7:17:ea:b6:03:e8:df:70:61:dd:17:bc:27:ea:
                    76:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:05:55:C4:A7:96:C0:8F:43:89:BF:9C:72:4E:78:21:64:FB:FF:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32ee1528-8e66-321c-b5d3-856cc00bc3e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.247.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:b1:44:62:87:44:e9:2e:95:1f:2a:01:e2:f5:bb:b7:56:c5:
         4b:03:83:5a:e1:0e:0b:0c:86:de:86:ad:8a:18:a0:28:41:69:
         50:6a:89:8c:cf:db:ec:38:87:36:f4:4f:00:67:99:9b:81:35:
         40:c9:ae:6f:d4:8f:26:76:11:49:68:aa:aa:6d:21:f8:e3:a7:
         87:4a:aa:f5:45:0f:f3:8c:90:15:cb:60:68:d6:10:e4:e2:62:
         cc:12:4c:93:cf:3f:7d:22:a3:92:00:4f:68:28:c2:fb:ab:21:
         fa:9a:bf:6c:dd:af:95:1e:be:3e:fb:a2:8e:e2:2e:7d:6d:60:
         c4:8c:8e:dc:ea:1f:cb:7b:88:72:d0:10:00:65:d4:39:ea:d5:
         84:2e:7f:c1:26:1d:df:a6:ac:de:0f:be:1f:bf:90:57:01:22:
         58:5b:31:5b:9c:c4:fb:dc:c6:08:3b:87:7a:7c:5a:f3:2f:7b:
         68:30:fd:cb:e5:da:04:17:ce:a2:69:b2:72:33:00:60:33:96:
         89:2b:fc:fe:b7:d9:0b:2e:66:6b:4e:3c:c0:ba:6a:05:0c:07:
         1b:08:6b:64:59:b8:bb:03:39:57:db:53:d8:78:b6:3c:9b:89:
         30:7b:c2:ab:3a:ed:43:67:0f:45:d9:90:9e:f3:df:65:8e:d9:
         9e:45:e7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:34:47 2025 by rpki-client