Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b3b9b3e-1be1-3b04-92f4-90c764decef9.roa
File:                     3b3b9b3e-1be1-3b04-92f4-90c764decef9.roa (raw, json)
Hash identifier:          k/g6c/aKyR4bFWcXYwNVyygy5WIxmdtKVrs29I2QY14=
Subject key identifier:   7B:72:2D:C1:53:AF:F0:87:F8:F7:D5:01:FB:DB:5D:F1:A4:35:48:95
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AADF12F80DBF1CAEEDEE43B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b3b9b3e-1be1-3b04-92f4-90c764decef9.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        174.43.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:2f:80:db:f1:ca:ee:de:e4:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=b429e10f-0026-48d1-8a3d-7a11cf10337b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:39:ce:69:26:a5:22:d0:a0:88:ad:41:92:89:
                    68:d4:c1:9f:86:d8:f0:b3:04:aa:91:42:b3:a3:bc:
                    19:3e:fb:91:64:86:f7:a2:05:c4:9e:9f:31:75:1e:
                    34:d8:b9:4d:e7:24:c7:67:db:85:8b:8e:4f:23:eb:
                    02:8a:f4:91:75:00:68:5b:04:6b:4e:71:c7:a6:f2:
                    37:d4:71:35:66:13:1e:ec:4f:40:56:dd:69:89:04:
                    54:84:65:51:53:b2:50:5f:25:31:60:b7:fc:97:a5:
                    f3:21:45:85:eb:ae:f0:99:51:25:cf:3f:92:a0:f5:
                    eb:8b:19:a7:f4:21:96:21:72:d5:9f:3a:df:46:b9:
                    1e:62:20:f8:f2:e5:11:68:06:fb:d9:8c:08:17:dd:
                    bd:8e:e4:01:95:7c:fb:e5:48:dc:d4:3e:f5:0a:8a:
                    f6:ab:8f:97:69:28:b5:00:e5:63:f2:17:6e:b4:d5:
                    2a:f2:1b:8a:e0:a6:f5:fc:db:c6:9e:dd:9e:5d:24:
                    5a:ce:9b:35:4a:1c:13:66:c3:e3:83:fc:09:56:96:
                    b0:53:ff:fa:de:5e:a4:19:45:53:91:22:b5:b5:66:
                    22:13:50:35:15:3f:6b:fc:bc:d9:28:ea:ec:10:51:
                    6d:de:8b:fb:40:97:be:b3:a1:e8:cc:22:5a:1e:04:
                    8a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:72:2D:C1:53:AF:F0:87:F8:F7:D5:01:FB:DB:5D:F1:A4:35:48:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b3b9b3e-1be1-3b04-92f4-90c764decef9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.43.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:c9:17:bd:6c:d2:5a:24:71:38:68:a3:1c:0e:b7:d9:2a:78:
         3e:d6:f8:77:4b:92:7a:84:82:d9:62:fe:62:c1:5a:48:c8:ad:
         0d:5d:16:42:06:e5:3a:9d:94:39:da:48:14:b9:a4:ce:f3:16:
         62:48:b2:89:c9:28:47:f4:61:be:a4:46:dc:a6:78:b1:0d:61:
         0f:4a:a5:70:90:9a:3c:8e:e8:b0:8c:0b:4a:72:38:af:8c:47:
         94:3c:05:11:a4:6f:dc:25:06:b2:14:e7:28:b2:10:38:f5:db:
         1c:2b:14:64:9b:8b:7d:b6:39:39:c4:48:a3:35:6b:e6:a3:1d:
         d9:63:2c:73:a6:60:86:f1:ae:6a:08:e4:cc:2b:1d:44:e4:6b:
         53:de:c6:ba:e1:0a:f6:e5:b2:58:74:1f:ef:a5:4c:63:04:85:
         42:66:b3:5b:0b:ce:08:fd:c9:e0:c3:4f:06:1e:1d:ad:82:5f:
         87:fb:13:3f:26:d1:8a:f2:fd:d7:ac:a3:73:6a:ac:09:f6:86:
         34:8b:86:36:c2:b6:0f:87:99:3b:e9:8a:8e:75:e2:18:b4:79:
         a0:9f:4b:73:9d:bd:b4:5f:f8:bc:25:be:fa:0f:98:83:56:60:
         d7:9a:c1:1e:f8:cd:19:74:0e:3d:67:7c:3d:d8:de:7e:2a:35:
         14:28:31:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:12:49 2025 by rpki-client