Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a6b8ba51-f948-3772-8416-4a44b1474a31.roa
File:                     a6b8ba51-f948-3772-8416-4a44b1474a31.roa (raw, json)
Hash identifier:          oxsD4Z54Ick6bu4eGCHhjOZQmsIovrVCVtbiacnGkL8=
Subject key identifier:   C1:0D:B4:1F:E2:E0:6F:39:95:CF:27:C6:F8:DB:9B:7A:D0:02:B3:79
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AA6F6404F78F7827ADD9936C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a6b8ba51-f948-3772-8416-4a44b1474a31.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        174.241.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:40:4f:78:f7:82:7a:dd:99:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=2cae98d7-0495-4d4e-bf3d-7f4e5297fab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:92:2d:a9:7b:fd:63:4f:32:9e:e4:84:a6:cc:
                    35:e1:1b:f7:41:c2:51:89:86:6a:7e:a9:6d:8b:56:
                    4a:10:e7:ab:3f:3e:d4:a0:83:f5:cc:f1:a4:ad:25:
                    eb:3c:a2:3a:f2:21:b2:2c:ab:1e:bb:62:d2:0a:7d:
                    80:1a:33:7f:3f:2f:51:7b:53:3e:8f:a9:0e:77:43:
                    fb:e0:7c:fc:4c:15:59:b3:d1:fd:81:cb:b7:1f:76:
                    c2:f3:74:73:3f:c7:d0:9f:1b:4b:2f:71:74:a4:f8:
                    70:82:55:d1:2b:d1:6a:96:cc:58:fa:12:28:ee:07:
                    de:be:5e:7a:a9:42:d9:9c:a8:70:ed:f6:75:e6:bf:
                    30:c2:14:36:51:56:37:4a:a5:8c:f4:bb:bd:98:ed:
                    49:59:fc:7d:9b:57:fb:fe:ba:5e:32:0e:96:2e:f5:
                    b4:37:ff:74:a1:93:99:d4:32:b0:73:1b:eb:8d:89:
                    24:e0:de:1d:17:34:60:de:16:7c:2d:46:56:38:ee:
                    4f:23:e8:8d:40:48:48:da:a2:f6:65:1a:73:f0:46:
                    19:16:52:a8:b1:93:16:a3:ab:61:58:f7:81:6b:12:
                    ce:f5:86:38:71:f9:23:da:1a:66:f5:03:aa:47:0c:
                    c0:25:4d:25:02:d5:28:e1:76:ba:77:2a:12:45:f8:
                    99:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0D:B4:1F:E2:E0:6F:39:95:CF:27:C6:F8:DB:9B:7A:D0:02:B3:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a6b8ba51-f948-3772-8416-4a44b1474a31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.241.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:79:a3:48:5b:75:ce:a1:5b:69:bb:b4:88:ab:13:f5:50:84:
         08:d3:ab:b6:02:28:c6:91:3e:02:3e:04:dc:d6:45:75:e7:23:
         15:5c:82:a6:28:4d:04:88:c9:a2:22:02:78:84:93:39:7b:00:
         40:31:e7:97:4c:2c:1d:6e:1c:f2:a7:94:4b:d8:04:85:29:32:
         ca:30:49:b9:b3:c0:dd:3b:63:83:7b:ff:c3:cf:13:ef:09:2c:
         b1:b2:ef:e4:64:21:9a:3f:43:1a:e5:f9:30:b8:9e:f0:e2:89:
         4a:cb:82:2f:8b:37:b8:a5:8a:58:06:96:b5:1a:87:1a:93:5b:
         4d:a3:e0:02:e0:d0:3a:da:e7:97:b3:63:4b:76:73:86:17:7a:
         e4:4c:eb:a4:22:e4:64:9f:7b:71:77:b6:49:06:b8:7b:d7:14:
         57:b8:ca:c4:8d:2d:45:33:89:9d:4e:3b:bf:ea:ed:a6:2c:04:
         61:40:80:84:6d:08:55:f3:f3:33:f6:25:54:44:29:2a:45:ae:
         b4:4c:53:01:16:b5:22:16:30:c8:da:c8:da:89:e8:92:f4:38:
         a3:90:a6:ec:6d:f4:ff:84:be:d2:d0:45:76:3d:52:57:db:1d:
         65:d3:6b:bc:ee:27:67:cd:5e:fd:0a:a6:d0:c2:6e:a0:2a:29:
         6f:b1:6d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:07:47 2025 by rpki-client