Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74d6284b-66f6-3e75-b543-df6946ea557c.roa
File:                     74d6284b-66f6-3e75-b543-df6946ea557c.roa (raw, json)
Hash identifier:          10LolG7Z/sVncdW78dj5vgCQwF48CjpO4wsUzI9JPhs=
Subject key identifier:   CE:5C:62:0D:AE:AD:8E:2E:F3:42:64:50:E2:62:12:F7:B2:7B:FE:1D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AAEC794084038805E048E3A40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74d6284b-66f6-3e75-b543-df6946ea557c.roa
Signing time:             Tue 29 Jul 2025 20:13:32 +0000
ROA not before:           Tue 29 Jul 2025 20:13:32 +0000
ROA not after:            Mon 27 Oct 2025 20:13:32 +0000
asID:                     6167
IP address blocks:        174.255.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ae:c7:94:08:40:38:80:5e:04:8e:3a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 20:13:32 2025 GMT
            Not After : Oct 27 20:13:32 2025 GMT
        Subject: CN=15589e0c-e2d8-4a5d-b030-cc4a90b71629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fc:30:c0:89:7e:96:9d:0d:74:2d:b8:03:db:
                    9f:3c:15:8f:7d:e4:01:d3:a0:2c:5e:b3:d7:0e:c5:
                    9d:ec:97:e2:b2:88:0c:8c:93:10:d8:a4:b7:63:c2:
                    40:89:48:ae:39:97:71:37:ba:9a:07:3b:ed:77:0a:
                    85:21:fe:51:bc:50:3e:ce:0a:2d:68:75:a9:a7:73:
                    1e:73:6c:cb:47:ad:6c:99:8e:95:00:12:22:86:b9:
                    34:b2:f9:c0:c6:f0:ef:11:bd:e5:f2:47:5b:ef:f1:
                    ea:c6:71:b8:0e:40:89:e2:4a:ff:5e:c6:1a:81:62:
                    d9:af:6c:3b:7a:58:8d:f2:b8:9b:b6:24:02:8d:29:
                    47:b5:95:c1:48:5d:d2:c7:1d:1e:ac:1e:01:65:f1:
                    75:b0:67:5c:7c:d9:5a:f5:a6:ec:a1:af:e1:a5:25:
                    e9:b8:64:9c:e0:d1:5f:75:da:be:8a:83:5c:aa:ab:
                    59:08:61:fe:25:ad:2a:9c:55:39:5d:f1:cb:a2:62:
                    1f:31:78:08:51:47:29:95:b4:92:ee:82:65:de:9f:
                    05:c9:0e:66:1a:4e:9e:01:80:77:9b:24:5a:d9:e6:
                    ed:d7:8d:77:28:21:28:57:7d:bb:43:d7:d3:23:9a:
                    5d:5e:c9:e8:8f:92:8e:6d:14:7f:cd:b9:76:98:5f:
                    96:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5C:62:0D:AE:AD:8E:2E:F3:42:64:50:E2:62:12:F7:B2:7B:FE:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74d6284b-66f6-3e75-b543-df6946ea557c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.255.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:47:a1:a4:44:de:15:6e:f9:53:13:75:01:22:d8:2c:21:90:
         1b:cd:a9:57:f6:0b:b9:d4:b2:04:83:79:66:7b:0e:45:3e:77:
         d1:d9:38:bd:8e:69:81:c1:47:e9:d9:30:71:03:c7:4f:ae:57:
         1c:80:18:14:a7:d7:93:0a:b1:e2:40:bc:c3:5c:f9:51:b7:f0:
         ae:8b:36:68:a8:a1:7d:35:19:14:ee:aa:ac:4c:c3:10:26:1c:
         0d:1e:b1:72:32:64:dc:72:ba:9e:39:27:36:41:a2:66:0b:35:
         c7:eb:e9:3b:ea:0f:99:4d:d6:bc:b3:db:8b:52:30:95:98:5a:
         55:a4:6c:24:b2:e4:d4:4c:07:8b:09:8a:00:00:ba:0f:6c:25:
         1f:32:c0:06:a3:d4:b6:b1:0e:93:27:a0:59:73:48:0c:b8:2c:
         2e:a8:62:e3:a6:f9:89:f3:5c:63:a5:9c:4f:19:ee:0a:70:10:
         15:73:03:12:f3:32:15:a7:18:fb:4d:d2:b0:d9:d6:cb:7d:7a:
         32:9c:da:0b:27:00:7d:a8:f7:70:f8:f0:80:81:b6:47:4e:21:
         b4:94:a6:6e:65:5f:15:ed:65:bf:94:c1:d4:eb:57:bc:91:d1:
         83:9a:6a:41:80:bb:7e:9e:59:5b:72:62:ab:f3:d4:90:3b:f3:
         8b:96:75:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:20:45 2025 by rpki-client