Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60316c37-f807-339c-bd7b-5fdd213976cf.roa
File:                     60316c37-f807-339c-bd7b-5fdd213976cf.roa (raw, json)
Hash identifier:          fucG9Ft7soyH5DmHvvu/dmgGMpXGlmNVjdgwxi57bE8=
Subject key identifier:   8E:80:E9:B7:80:58:7A:D2:99:8A:54:EF:6C:3F:65:EF:D3:B7:27:32
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7FE0A23EA098142D4D85D100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60316c37-f807-339c-bd7b-5fdd213976cf.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        174.215.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:a2:3e:a0:98:14:2d:4d:85:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=9633ec62-d39e-4cb4-9e9f-d9119174e615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d8:2e:7e:8b:08:b7:90:21:43:7a:be:11:db:
                    0a:95:96:67:62:1c:49:63:5e:2b:7d:b4:79:ae:a1:
                    ec:a1:bd:c4:10:e9:a6:b9:c5:73:81:4a:31:b8:5b:
                    61:d1:8c:9c:80:c3:79:78:b7:eb:5f:3d:be:df:8e:
                    b4:b6:f1:35:4d:50:24:1d:61:95:78:07:f9:c8:74:
                    e6:ce:08:a4:c1:f9:aa:79:ed:1a:53:57:88:65:66:
                    90:f4:cc:80:cf:b4:b0:f5:39:74:0d:29:9f:de:10:
                    d3:72:b6:c2:01:01:f0:1b:20:66:b8:55:7a:6b:45:
                    d2:37:99:90:44:25:ed:ae:43:bf:c1:fa:fb:ff:a9:
                    9d:7d:a4:91:ed:c1:3a:06:90:83:dd:f8:73:10:7a:
                    13:8b:74:b3:fa:ee:b2:ac:10:6d:35:8c:0c:81:80:
                    9d:63:db:9a:c0:b1:4b:5f:43:1c:29:48:8e:4b:e4:
                    fa:a0:f0:51:6c:1e:0b:97:ec:e6:5a:c6:21:47:ea:
                    76:70:97:08:c1:26:f1:96:d4:b2:d5:c0:73:11:d9:
                    12:a4:77:27:08:ff:bb:1c:c0:19:15:ec:d4:9a:e6:
                    24:6b:62:3c:59:08:c5:08:21:4a:26:2f:a0:c1:f2:
                    b9:28:17:be:a3:e3:23:22:dc:17:23:7d:29:d3:83:
                    9e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:80:E9:B7:80:58:7A:D2:99:8A:54:EF:6C:3F:65:EF:D3:B7:27:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60316c37-f807-339c-bd7b-5fdd213976cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.215.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:1a:1d:48:19:90:6f:44:5b:68:dd:3c:ce:31:05:7e:e6:4f:
         a7:41:71:e4:b3:34:57:a1:1b:30:fb:a8:1f:99:5f:b1:6a:f0:
         55:76:df:0d:6f:20:d8:85:23:c5:92:bc:1f:20:48:53:0e:30:
         5d:8e:7d:6c:97:41:f4:55:d1:75:34:b0:a6:f8:8f:b0:f3:2a:
         de:7f:e8:9e:c1:17:99:f1:e6:b7:f3:86:7e:fd:62:28:c3:2d:
         d5:50:27:3e:ab:15:14:a3:a9:d5:40:fd:10:8a:e4:06:0c:66:
         5c:c2:9e:97:2f:62:68:38:e8:fc:7a:db:11:76:32:47:de:de:
         f4:b5:06:fe:ca:d6:37:8e:2f:6f:07:c9:03:00:5c:61:55:e5:
         48:a2:f5:bf:24:cb:7f:de:9c:34:cd:89:c8:69:a6:67:a4:15:
         70:17:d2:45:31:d7:34:d8:3b:de:c3:06:28:15:dc:9f:ea:31:
         a7:76:99:53:60:6e:06:d1:22:e5:af:f5:6a:90:12:9d:45:e0:
         08:50:48:aa:93:0e:dd:a7:fe:16:68:20:32:4b:7c:0e:e0:37:
         77:a9:33:21:91:42:cd:67:84:3f:29:e1:29:58:f6:0f:e7:d3:
         41:c0:1c:25:b3:ee:bc:97:3b:d6:5f:2f:a2:3f:23:ce:f4:c9:
         78:a1:78:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:58:47 2025 by rpki-client