Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a36988b7-4a0a-31c4-98c5-64aebe1358e4.roa
File:                     a36988b7-4a0a-31c4-98c5-64aebe1358e4.roa (raw, json)
Hash identifier:          AcRK6NEmHlJIfZiDKsaBLm94SUU1O355oIsML6cV5Cg=
Subject key identifier:   69:35:DF:CD:12:BA:82:9B:37:35:F2:67:CC:E4:9B:39:57:8E:A4:52
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB2F7DE23773A3E6867978340
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a36988b7-4a0a-31c4-98c5-64aebe1358e4.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     701
IP address blocks:        173.75.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:de:23:77:3a:3e:68:67:97:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=3ef63cde-d652-414f-8f25-d33e0ca8de12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0e:2b:0b:8a:3e:b5:f7:25:9f:a3:ad:9f:c9:
                    6c:c5:d7:50:05:7e:76:af:46:cd:16:a0:58:f6:db:
                    47:ec:ab:1d:73:0a:5c:12:9d:4a:ea:d8:04:36:72:
                    78:01:85:29:62:c0:64:a2:67:4c:88:d9:54:c2:cf:
                    d9:b1:4a:3a:bc:a7:df:84:b7:da:46:4a:32:06:5a:
                    b4:47:5c:4f:26:2c:2e:f1:eb:35:1c:97:a0:1e:d4:
                    af:44:fc:ae:1c:39:09:db:7b:c1:2f:83:1a:11:83:
                    fb:b3:ea:96:d7:c6:81:32:ed:e9:fa:93:b0:4a:1c:
                    8e:01:91:2e:be:12:d1:70:64:c1:6c:ba:00:ab:48:
                    2a:76:01:2b:df:18:2c:e1:bd:e6:82:34:43:c2:42:
                    6f:f8:5a:ad:3e:4b:66:3a:a8:58:4f:65:f2:d3:09:
                    2a:70:6d:74:b5:65:43:b0:53:5d:e9:bf:0b:d2:01:
                    ff:95:03:84:e5:7c:b1:98:0f:e0:99:20:6e:94:55:
                    33:60:48:c6:dc:e5:4d:1d:e6:fb:a4:ff:b0:b1:3c:
                    3a:a6:4f:79:82:a6:75:dc:b8:78:80:ef:a9:b4:c6:
                    6e:a1:1b:ef:9d:c2:2f:96:41:70:32:f6:c6:8f:a0:
                    85:66:db:88:ea:b0:78:89:e5:5e:6b:7e:c8:8c:5a:
                    9b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:35:DF:CD:12:BA:82:9B:37:35:F2:67:CC:E4:9B:39:57:8E:A4:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a36988b7-4a0a-31c4-98c5-64aebe1358e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.75.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:78:e9:ff:92:a5:55:de:3a:e8:e0:c8:63:58:3b:e4:0b:6e:
         7d:39:ee:16:6b:0c:48:95:dc:94:17:11:e2:4d:30:ee:bb:ac:
         be:f9:41:4c:c9:84:16:fb:26:36:c8:b5:48:15:ba:63:0d:4d:
         07:eb:bb:0c:57:14:4b:d6:e4:df:c3:4b:22:b1:c9:ef:91:55:
         d8:c2:eb:53:3d:ee:5c:27:ad:7e:fc:68:f6:c6:1e:89:14:19:
         b9:73:9d:ab:19:c3:7b:2b:2c:96:e4:e6:80:7f:e9:a0:d0:b9:
         a0:b1:17:84:58:97:99:66:1e:c1:db:88:57:f0:89:fd:8d:e8:
         0f:89:5e:1b:96:1f:b2:38:c8:63:7b:91:32:f4:25:a3:5f:1d:
         95:b6:41:91:87:72:77:18:ce:97:f1:73:16:78:c9:a0:46:bf:
         8c:de:54:c3:84:00:93:19:f3:66:c1:47:e8:b9:e6:33:66:65:
         ee:a7:8f:fa:71:3e:d6:c4:85:fc:bb:ce:14:5a:1d:06:1d:3c:
         0a:a7:08:a1:72:cb:08:91:17:c7:a8:38:d9:65:e1:e9:95:aa:
         f8:ed:49:9a:55:a5:6c:e3:ad:40:3c:c2:ed:0f:cf:b9:55:2e:
         b3:1d:13:73:2e:26:91:26:1e:85:bb:90:0d:ee:9a:2b:47:d7:
         2f:4d:91:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:08:43 2025 by rpki-client