Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4e60823-f0de-3369-bb3d-ab9edd16fdc3.roa
File:                     a4e60823-f0de-3369-bb3d-ab9edd16fdc3.roa (raw, json)
Hash identifier:          AOgIH1SzchG7/LUxS4zUORbvPpRw49eEXkI0bM6Sfp8=
Subject key identifier:   4A:33:5C:23:F4:98:CF:98:C2:D5:03:C3:43:7A:FF:69:D4:E0:FA:9A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7FE0B1BE45169F53A52BE380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4e60823-f0de-3369-bb3d-ab9edd16fdc3.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        174.224.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:b1:be:45:16:9f:53:a5:2b:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=3b7e4a44-b128-488e-ab84-f1ab0fea5136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:65:5e:55:9d:07:b6:9b:e8:8d:74:16:c3:6c:
                    e3:29:8c:a5:9f:e5:2c:87:99:37:ad:9c:4a:59:98:
                    41:d1:47:03:b6:15:b1:21:14:d3:fa:70:c6:0b:52:
                    23:e5:08:50:03:71:86:32:c5:10:a8:c4:e3:59:57:
                    6a:d8:e6:bd:c3:5a:cc:62:01:cc:b9:80:a9:d4:61:
                    70:5d:29:9c:8f:65:27:25:1a:d0:1d:d3:6c:48:3b:
                    db:fc:b4:61:f0:a5:e0:ce:ee:28:a0:ac:89:50:fb:
                    fd:62:c3:09:48:34:36:25:1d:9b:c3:6e:e6:2c:56:
                    2f:08:84:e8:83:f9:15:20:3e:33:8a:b5:5b:86:c7:
                    f6:d6:2c:a3:90:94:e6:9a:df:82:02:c9:e4:6e:3a:
                    ae:a2:bd:29:bc:95:fe:f7:22:80:3a:21:e5:c8:86:
                    ec:16:8b:b2:95:36:5a:74:53:64:ff:7b:f3:e7:1d:
                    db:c5:32:2c:21:cf:ba:74:73:78:7f:52:4c:ab:ed:
                    bb:56:5f:c3:1a:f7:cd:75:f4:2c:10:d4:b2:a9:41:
                    ba:b0:65:46:01:01:5a:c9:09:9c:38:da:d5:38:e8:
                    33:2f:f1:a6:7d:03:0e:fd:e6:41:fc:4f:c1:80:9b:
                    55:d7:a6:cf:1b:48:f2:a7:61:ef:13:c4:76:8c:76:
                    c7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:33:5C:23:F4:98:CF:98:C2:D5:03:C3:43:7A:FF:69:D4:E0:FA:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4e60823-f0de-3369-bb3d-ab9edd16fdc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.224.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:d6:70:4a:c4:e8:66:46:02:bb:71:59:8a:bc:bc:3f:66:72:
         0a:22:93:09:45:39:21:c6:fa:2c:33:2e:67:7d:57:c8:d5:b2:
         1c:19:8a:0c:27:3a:69:0d:59:8c:51:a8:92:d5:fa:8f:5c:97:
         2b:0c:58:76:48:60:e4:da:19:9d:a8:f8:db:f6:19:17:56:ef:
         4c:06:6c:7a:3e:ec:f1:9f:58:f8:66:4e:b0:16:36:f0:c1:a5:
         24:eb:14:e2:1e:77:8b:bd:cb:3c:e1:53:1f:f4:0c:be:f2:1a:
         f7:cb:5a:21:b8:14:c5:34:50:b5:52:95:be:60:1c:24:32:96:
         d2:53:d3:79:14:52:2c:4a:08:81:c3:fb:72:72:55:b7:f8:43:
         28:08:41:39:ea:ad:e8:d9:2c:55:49:d8:3a:a3:f3:e7:81:0a:
         e7:91:70:87:b9:a7:6b:88:16:7a:26:e1:8a:00:b3:1e:ed:5f:
         78:b9:31:7e:91:14:08:18:d1:3d:b7:62:a6:80:e1:99:f8:36:
         6c:d5:6a:b7:7e:bf:ab:71:80:c8:94:f0:41:80:a2:14:b6:9c:
         18:04:75:f7:5b:0f:5b:e1:47:23:bc:d2:ac:b3:15:d5:57:71:
         31:50:6d:93:12:69:ac:18:82:42:18:d0:82:b9:9a:29:8b:c2:
         54:36:57:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:15:55 2025 by rpki-client