Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98728352-aa01-3c61-adf4-548bc6b50574.roa
File:                     98728352-aa01-3c61-adf4-548bc6b50574.roa (raw, json)
Hash identifier:          +TECgLoPuT3rFqmlIGmPRjKoC8m7DyIYBqz+FlicQn0=
Subject key identifier:   3B:08:31:C0:65:7E:C3:D8:51:5C:BA:BA:5D:60:D3:2D:09:C6:7F:5D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB5C26BA1D16562ACB36CF5B0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98728352-aa01-3c61-adf4-548bc6b50574.roa
Signing time:             Sat 01 Nov 2025 01:00:30 +0000
ROA not before:           Sat 01 Nov 2025 01:00:30 +0000
ROA not after:            Fri 30 Jan 2026 02:00:30 +0000
asID:                     6167
IP address blocks:        174.200.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b5:c2:6b:a1:d1:65:62:ac:b3:6c:f5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  1 01:00:30 2025 GMT
            Not After : Jan 30 02:00:30 2026 GMT
        Subject: CN=eae62bc8-34d3-4ed5-8cd3-8833c89d6da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:de:02:3d:85:3d:0c:ad:e5:e4:a6:01:4c:6c:
                    9b:ed:71:29:9f:94:7c:a7:5b:ea:e4:0c:86:51:7d:
                    02:a2:94:53:70:fc:0a:fa:5a:46:69:b1:2d:fd:80:
                    ce:73:d3:b0:7a:81:54:3b:88:0e:e6:96:64:0d:67:
                    4f:f1:75:cd:61:ae:a6:5c:5b:9b:78:84:82:58:e4:
                    9a:a5:24:9a:26:65:94:92:95:51:5e:4a:10:c2:83:
                    73:48:62:f0:88:5c:f8:af:d7:d0:2a:d5:b9:b7:46:
                    ce:b2:15:83:41:8b:07:8f:a9:df:e8:5d:de:d7:8b:
                    af:7e:d0:0d:04:55:54:28:b9:38:4e:b9:87:6b:50:
                    1c:85:bc:cc:aa:fd:b6:0b:5f:68:7a:29:f4:c0:1c:
                    83:d0:ea:e6:b1:91:a8:e1:46:0b:28:93:df:70:98:
                    93:a0:8e:ac:6a:66:0a:1d:97:bd:75:b9:cf:c4:d1:
                    cd:1b:8c:6c:ef:72:87:e1:a3:6b:a4:90:7a:82:cf:
                    f3:c7:24:bc:49:0e:22:b0:9c:94:a1:a6:71:20:92:
                    07:42:2e:d8:56:13:e6:cb:0e:e6:13:ed:ae:f8:65:
                    38:fc:d1:83:46:64:37:3b:5e:18:12:b9:ca:50:b4:
                    6c:60:33:1b:4e:92:62:0d:58:17:2a:1d:3a:6c:a4:
                    f9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:08:31:C0:65:7E:C3:D8:51:5C:BA:BA:5D:60:D3:2D:09:C6:7F:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98728352-aa01-3c61-adf4-548bc6b50574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.200.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:76:99:7a:3c:8a:8e:d1:b6:1d:8d:6c:84:db:36:12:65:0b:
         f2:52:d6:1e:50:57:e7:d7:9f:be:f6:72:80:0c:dd:01:7d:96:
         76:0b:60:ba:88:ee:3f:3a:dc:98:10:98:d6:96:75:fd:32:ef:
         f9:e1:b0:63:1a:66:b0:20:eb:f7:91:6a:c3:b6:b1:e3:b1:48:
         e0:f3:fa:d5:56:91:f2:8b:31:fc:53:b7:28:2b:d6:e7:77:1d:
         f3:df:6d:9d:b7:35:6c:15:3d:bf:3d:e6:72:e3:85:f6:9e:fa:
         9c:20:55:18:ed:7e:a3:94:49:01:27:63:51:f5:e3:e4:dd:65:
         71:83:6c:5f:b4:fe:7c:37:09:c0:f0:6f:c1:e0:b9:05:27:64:
         96:af:fb:26:d6:1f:6d:10:89:9b:99:3e:04:6c:50:bb:28:20:
         cb:e6:cc:61:4b:dd:4c:54:e6:3f:68:8d:5a:f7:3d:70:5b:46:
         bc:a4:f8:c7:c7:b5:cf:db:a5:8c:fd:47:20:7c:83:04:b2:df:
         52:75:e4:a1:c2:99:d1:94:21:a1:51:39:24:ac:0b:de:7c:96:
         9a:b6:e0:3a:ae:b6:a9:d1:c1:b8:9a:e9:7e:11:eb:89:21:4c:
         01:97:d3:3f:7f:ef:3f:7e:1f:03:d8:29:ee:ae:e7:75:86:28:
         be:44:b0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:41:37 2025 by rpki-client