Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/811665fc-8fa0-3bb1-8f94-9dc555407ee5.roa
File:                     811665fc-8fa0-3bb1-8f94-9dc555407ee5.roa (raw, json)
Hash identifier:          ClGOV3y0T88TSKvivvnmWXBJ6hzAUTy66YFDk/YGXMs=
Subject key identifier:   17:25:B3:54:9D:8D:FB:04:8E:4C:4C:84:BF:95:F1:59:A7:75:D4:C3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AA6F633EA8FB9F1B336F63440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/811665fc-8fa0-3bb1-8f94-9dc555407ee5.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        174.250.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:33:ea:8f:b9:f1:b3:36:f6:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=a91da9a3-b871-4761-a7c7-4fb6a66f50cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0d:4a:d7:b0:1e:50:ea:29:b9:b0:eb:05:ef:
                    c6:aa:5e:1b:85:fc:41:24:02:ac:d3:3f:59:68:a7:
                    ea:bb:9e:dd:41:ab:1d:ac:87:78:2a:10:93:6b:7d:
                    74:52:e3:2f:26:c2:f4:47:4b:79:05:86:47:de:c7:
                    29:b4:17:74:5e:14:7c:39:5a:60:d4:f1:13:d9:6a:
                    2f:34:a2:09:f5:51:95:44:1e:94:a3:5e:ba:a7:e7:
                    33:96:40:54:a5:3e:f4:d9:42:1d:01:36:24:b2:86:
                    d4:f4:1e:d4:86:5f:68:c2:15:7a:84:8d:7d:dd:d5:
                    8f:ee:c3:d4:24:93:af:29:fe:b1:a6:15:e9:a8:39:
                    81:06:05:d0:c0:f9:ae:c5:11:84:2b:ab:c7:d5:12:
                    b9:c9:b2:fd:cb:a4:ac:17:ec:1c:bc:76:e1:77:c8:
                    90:88:f0:31:76:60:5c:2f:6e:f1:d7:d4:dd:ef:9a:
                    17:d7:63:88:c1:1c:83:d3:de:ee:12:f8:26:3f:67:
                    34:c6:3a:20:94:e0:65:d1:19:78:fb:17:a4:0a:bb:
                    2e:1c:c3:a6:4f:2d:55:f0:e0:91:74:e8:87:f9:32:
                    67:c9:76:69:f0:aa:59:d1:fd:07:31:68:46:21:63:
                    d9:ef:e3:87:4d:bd:18:ec:0e:14:c7:88:39:20:b2:
                    e8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:25:B3:54:9D:8D:FB:04:8E:4C:4C:84:BF:95:F1:59:A7:75:D4:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/811665fc-8fa0-3bb1-8f94-9dc555407ee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.250.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:eb:c7:92:0d:e3:0f:30:7f:01:36:fd:8e:0a:43:14:96:4d:
         2f:75:12:ab:2c:07:ef:8d:ee:ad:da:a7:58:8a:28:07:30:cb:
         89:d5:fa:92:5a:f8:c0:58:63:e0:d6:d6:1e:30:9d:b2:81:b1:
         59:4c:9d:21:a7:fa:29:70:50:4f:71:56:0b:d3:ac:de:93:98:
         bb:dc:9b:7d:07:ef:a2:3d:06:42:4e:b9:b7:0a:75:6e:31:cf:
         23:31:33:62:36:c2:ed:56:8d:b6:4e:76:ba:49:6e:c2:ed:15:
         f5:a1:0e:b1:85:ca:6a:9b:8b:32:11:e4:9c:08:03:e7:ae:de:
         53:82:9f:4d:d7:fa:55:a6:c7:f5:37:38:c4:33:4f:61:41:fd:
         51:89:6d:6d:34:be:26:8e:f4:33:3b:df:5c:e8:e7:5a:60:fe:
         5d:d4:60:42:02:8a:05:57:7e:eb:e2:f1:65:49:4a:92:ae:72:
         30:b9:d4:32:1c:a4:af:1e:67:f8:1d:a6:6e:4f:59:88:7b:c1:
         26:59:5f:ba:ea:f3:c4:51:20:b3:e0:4a:c0:5f:43:17:75:54:
         d8:e3:b9:19:44:06:ae:54:d2:b5:40:80:6f:7b:dc:d7:f6:7e:
         83:16:b5:3c:95:57:9d:7e:4e:46:27:78:cd:4c:6f:89:6e:65:
         73:06:11:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:43:58 2025 by rpki-client