Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c951fb6-cdc6-3df5-b720-945e2e609d1a.roa
File:                     3c951fb6-cdc6-3df5-b720-945e2e609d1a.roa (raw, json)
Hash identifier:          umTCRomgHSMWTLEAd5SlFt7AUF4EvtyAb3zxFK10uDc=
Subject key identifier:   A5:D3:A5:C7:77:A8:FC:53:09:34:A3:01:FF:54:65:0D:46:CF:A7:EC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7FE0A0D852137EA742740B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c951fb6-cdc6-3df5-b720-945e2e609d1a.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        174.214.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:a0:d8:52:13:7e:a7:42:74:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=e8b36a7e-5b38-4538-8a4d-e64e80688250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:3b:0f:ef:1a:0a:3d:3d:82:a0:fa:bd:90:19:
                    3d:38:fe:39:fb:14:f2:f5:de:e5:c8:50:5d:6b:83:
                    35:6a:41:5c:cb:82:93:22:bd:af:0a:4b:c7:91:68:
                    e9:71:f2:48:e8:ed:38:f6:14:d4:48:b1:85:24:6b:
                    ad:1a:47:18:7e:b0:ec:c9:fa:14:1e:f3:6a:0b:35:
                    48:bd:0b:cf:a5:6c:11:88:6f:09:ce:6b:78:e8:72:
                    ad:30:a3:83:ce:4e:15:69:b3:f7:f4:02:b8:70:15:
                    d6:18:04:59:95:ff:1d:e0:0e:07:e9:c2:9c:e2:74:
                    f0:de:84:b1:44:36:29:a9:ed:32:a2:8f:c2:b1:7c:
                    01:1b:e9:fb:f2:e5:40:41:5c:d0:d6:3c:b1:21:a7:
                    02:55:53:9b:d2:d4:ff:96:64:cc:97:c4:f5:e1:f3:
                    39:33:2f:82:f7:90:ac:69:f7:dd:40:17:55:89:59:
                    c3:9e:d1:93:d1:1e:5b:32:40:e7:e1:64:13:09:3a:
                    c6:ed:a9:ac:be:0b:cc:dd:9f:dc:0e:f0:87:d0:40:
                    85:7a:26:4e:b7:3f:57:e9:bd:1b:52:08:b0:83:7e:
                    d9:bd:8f:f9:7b:a6:12:13:c2:2a:d7:38:51:b7:33:
                    c2:fe:77:21:d3:ea:d5:21:65:08:03:b9:bb:a8:27:
                    71:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D3:A5:C7:77:A8:FC:53:09:34:A3:01:FF:54:65:0D:46:CF:A7:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c951fb6-cdc6-3df5-b720-945e2e609d1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.214.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:0f:81:5a:e8:8a:8e:7a:e7:aa:ac:86:17:53:96:96:c5:e0:
         60:43:bb:86:b8:8b:5e:da:b5:4e:20:70:82:d2:51:87:f5:0f:
         1c:07:41:50:ae:ce:37:bc:e1:b7:25:66:4e:32:cc:9a:db:1c:
         b6:04:9e:73:ca:3a:c9:13:41:9e:28:e1:f7:93:fb:5f:e1:02:
         0b:df:aa:87:62:b7:04:b3:60:06:a8:3f:67:12:64:a6:6c:54:
         14:b1:54:e9:39:fb:b5:87:24:50:26:c7:a2:40:07:29:d2:b6:
         c5:7c:e9:9b:46:52:61:99:d1:f7:d1:07:20:06:59:d8:99:92:
         5d:8f:4d:c0:e6:d2:4c:39:d9:fc:f0:d4:c2:18:c7:48:74:77:
         ed:58:87:40:50:54:0c:f0:0c:4c:84:91:e2:2e:57:f6:9b:e0:
         ae:91:5e:96:fc:53:3f:b5:59:e6:f0:0c:df:a5:40:4f:05:8a:
         81:f5:3a:38:3e:0e:f1:f5:b7:ae:bd:29:15:35:dd:98:3b:04:
         17:df:1a:25:4c:60:61:b4:bd:0b:26:d2:d4:99:2f:b5:b3:b4:
         11:ea:74:a5:74:56:99:cd:68:18:00:50:fd:dc:4a:0b:06:a0:
         c6:1e:8a:c9:5f:50:59:07:b7:fb:8e:0c:6e:ed:e8:3e:38:4f:
         3a:dd:8a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:05:02 2025 by rpki-client