Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/58e656d0-1e86-36aa-83c9-58b19e41f6f3.roa
File:                     58e656d0-1e86-36aa-83c9-58b19e41f6f3.roa (raw, json)
Hash identifier:          WV/S27EXaV7BzcZPlow8Lbv9SM2x8LhwdzsG3jYa1Rw=
Subject key identifier:   BA:F7:FD:25:E5:ED:0F:18:98:30:F4:D8:81:6F:44:CF:23:8C:E3:D3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AA6F636C9205EAD7C8DADF500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/58e656d0-1e86-36aa-83c9-58b19e41f6f3.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        174.226.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:36:c9:20:5e:ad:7c:8d:ad:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=169a3530-ea5a-4008-a1ae-14b9ab4ef11d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:38:65:21:e7:d0:35:47:91:1b:ad:47:5a:7a:
                    ed:59:3b:97:22:dc:90:a7:e3:84:5b:3f:27:b4:97:
                    31:c3:a1:92:c1:45:c2:eb:44:2d:fe:e2:0e:71:4c:
                    7d:ac:1a:0b:d9:fa:1f:b5:fa:81:e6:55:53:26:c0:
                    ed:d4:2d:8d:89:61:20:35:2b:ee:3c:16:bb:14:ae:
                    96:6c:b3:73:94:d5:d8:a6:a8:58:76:51:4a:cc:bd:
                    d3:bf:21:38:95:05:45:88:81:b2:b4:aa:27:7e:9d:
                    43:19:3d:b5:3f:bd:04:ed:e9:4d:9f:ac:01:b9:29:
                    5c:5e:55:a2:54:9a:f8:09:ec:16:b4:18:69:9c:6a:
                    7c:49:8b:3e:45:b5:f6:55:2d:fd:39:56:c2:b5:ec:
                    8c:04:68:c5:e7:02:42:59:7f:cc:b2:de:40:51:ce:
                    df:5f:d1:08:06:e9:6f:e0:48:9e:96:46:ba:b7:38:
                    5a:77:e5:79:f0:02:ce:a5:97:3b:56:6e:79:6a:4a:
                    63:51:72:60:f1:42:d2:18:be:8c:2e:8d:8f:83:7a:
                    30:84:50:67:e9:48:89:84:ec:95:4a:e9:d8:11:cb:
                    f4:81:f5:c4:5d:9c:dd:9e:c3:3a:a8:8c:6b:05:18:
                    50:bd:e6:5a:d9:92:3b:66:20:28:95:30:97:46:ef:
                    79:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F7:FD:25:E5:ED:0F:18:98:30:F4:D8:81:6F:44:CF:23:8C:E3:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/58e656d0-1e86-36aa-83c9-58b19e41f6f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.226.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ca:1e:90:b5:33:75:62:e9:87:68:fc:eb:5e:9e:58:c4:8b:
         d4:54:e3:5b:7c:5e:42:7c:74:d5:66:01:3c:a2:25:eb:f6:2b:
         8e:40:f0:02:c8:c2:2d:18:8b:73:e0:f2:1c:72:ae:ec:77:6c:
         6b:66:44:b7:d6:83:7b:f5:84:b8:58:d6:3f:27:f3:3d:c7:b1:
         17:b2:30:59:67:26:b4:c4:08:2b:d0:7c:30:bd:9e:e4:46:95:
         39:80:8d:ed:ce:41:75:f6:18:b7:ed:02:a3:f0:da:e7:8b:84:
         96:91:1b:1e:19:83:1d:97:3b:91:96:0f:ac:05:41:5d:d1:1e:
         9c:28:46:db:ee:62:72:1d:4c:87:17:67:82:ff:3e:35:cc:b8:
         f2:4c:6b:57:8f:5a:35:c3:fe:8b:8b:88:07:85:ec:ba:67:99:
         ab:71:30:28:77:48:ec:75:1d:ae:ff:fd:34:c3:7f:71:5d:4b:
         6a:f9:e4:47:ac:5a:32:77:3f:01:49:5d:53:84:f2:19:8c:c6:
         89:fc:70:e9:2c:b2:f9:64:00:c1:ef:fe:0b:f3:42:28:23:59:
         c5:f3:0c:3d:3b:00:fd:92:f6:a7:65:c9:cf:b4:1c:b3:e7:23:
         01:87:c7:af:bf:84:c1:15:91:a6:ca:4e:14:f2:00:a8:fa:9d:
         4b:c0:45:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:31:26 2025 by rpki-client