Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3af0abb4-e531-3527-b3b5-9c9dba80f7df.roa
File:                     3af0abb4-e531-3527-b3b5-9c9dba80f7df.roa (raw, json)
Hash identifier:          7djZR9gz6360xjbr5WUAYWmzND22sOUGg8dwmo21Yt4=
Subject key identifier:   34:82:ED:C6:9C:99:6E:36:31:1C:60:B5:FE:C6:D6:5D:0E:67:8A:74
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7FE09D39D9CF8581F9A96DC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3af0abb4-e531-3527-b3b5-9c9dba80f7df.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        174.206.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:9d:39:d9:cf:85:81:f9:a9:6d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=06dbd1f1-23c5-4d83-8d19-b01d1f6ef477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b2:3f:f9:75:db:34:e9:24:c8:ce:c4:7d:69:
                    28:66:b1:52:03:a0:f0:21:cf:b3:27:bf:27:6b:ac:
                    71:78:ff:85:09:14:fb:40:c4:8e:ce:a3:e8:17:bf:
                    24:ca:09:92:0e:c7:01:d4:63:b3:8e:57:fa:6e:1e:
                    85:7e:ac:13:5d:d3:aa:e1:e2:b4:7b:0e:db:97:1a:
                    ea:61:23:ae:39:ed:1c:b1:5b:e5:0b:67:93:ac:cb:
                    5c:bc:11:c6:52:15:f9:78:48:e4:dd:4f:c8:2e:47:
                    15:77:10:f9:28:05:43:33:32:4e:ae:28:97:29:a0:
                    f3:b8:c6:af:07:48:a6:50:97:0a:99:56:35:a2:b3:
                    ad:24:41:78:de:e2:87:f3:0f:65:d2:f4:6d:a7:a5:
                    1b:58:66:af:ec:99:61:36:cc:bb:88:f4:10:0f:9f:
                    d8:29:8f:03:fe:10:23:b4:fc:cb:1e:f3:eb:de:38:
                    2e:d3:a8:8e:c3:ac:f4:a8:32:59:1a:17:82:80:0f:
                    05:af:36:11:0e:be:82:18:64:bd:fe:95:ac:ac:2c:
                    b4:9c:75:ab:50:df:20:ed:cf:74:10:3a:1a:22:44:
                    01:c7:bd:91:5f:46:68:9f:cd:e6:c3:1f:06:cc:cd:
                    6c:68:3e:12:26:b5:0e:16:80:b3:8c:da:ee:2b:bf:
                    51:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:82:ED:C6:9C:99:6E:36:31:1C:60:B5:FE:C6:D6:5D:0E:67:8A:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3af0abb4-e531-3527-b3b5-9c9dba80f7df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.206.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:61:1e:a4:1d:67:02:97:b6:dc:b7:dd:29:77:aa:c6:56:10:
         7a:e3:e6:9f:e7:d7:22:12:8c:07:37:f4:ee:9f:a5:e5:a0:16:
         aa:5a:29:11:50:bb:b4:99:28:67:03:7b:7b:82:87:70:24:85:
         30:23:40:7e:cf:ab:1b:a3:30:1a:b5:28:21:17:9a:89:b1:f9:
         39:50:93:16:ab:36:c3:74:bd:e3:23:ad:de:e6:d0:1b:31:63:
         ee:02:b6:c1:4b:f1:8a:be:1b:3c:3f:5d:6d:3b:4d:32:d3:d6:
         dd:d5:4f:96:6c:43:2e:8e:aa:f5:11:d5:42:a8:c0:7b:d3:9b:
         be:d0:34:d1:67:be:27:80:00:78:25:75:a6:a2:17:7a:ae:90:
         8c:01:47:27:ca:fd:14:44:6d:16:47:fa:cd:6c:7d:15:92:07:
         02:94:62:ba:92:83:70:b9:6a:fc:81:a4:b1:5d:85:b8:09:af:
         ee:84:0f:f7:fa:35:f5:71:15:60:3e:44:ff:da:f4:cb:4a:5f:
         96:1a:a6:69:c1:67:b7:4b:27:54:f2:04:78:67:b4:15:6c:f6:
         8c:b5:0a:06:69:ad:fe:60:9f:d3:a3:88:08:df:9f:10:72:18:
         5b:99:34:85:43:a4:d1:f2:90:9c:0f:28:a9:fe:a0:e2:af:e6:
         7b:ee:32:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:38:54 2025 by rpki-client