Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ab35cffe-6d4b-394f-9b13-9917268099cb.roa
File:                     ab35cffe-6d4b-394f-9b13-9917268099cb.roa (raw, json)
Hash identifier:          iTZgiy/UTECpnHMGbglF97RX0ZHsXntjwkqq9Au/Pes=
Subject key identifier:   11:FF:CC:FF:8A:5D:70:77:25:8B:FD:BB:49:1B:C9:10:AE:16:90:BE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7FE0AF79A7BD54A62601B240
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ab35cffe-6d4b-394f-9b13-9917268099cb.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        174.213.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:af:79:a7:bd:54:a6:26:01:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=b167ce70-55c4-4818-8c39-8711c5250ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:26:4a:3a:b8:81:1b:9e:e0:eb:a4:09:4f:76:
                    cc:d0:4a:43:c6:ea:e6:a8:85:f9:d8:16:da:82:8a:
                    17:f1:19:29:b6:7e:ef:ae:be:f6:9c:8b:5a:be:b0:
                    96:67:c5:df:92:bf:33:16:44:d5:42:9c:65:58:c2:
                    c2:4a:80:74:e0:d5:25:d9:40:7c:4a:a5:17:17:5d:
                    e7:8d:52:ba:3b:ba:0f:00:da:ce:21:e0:88:ed:a6:
                    a6:48:eb:91:7b:a2:32:b8:ac:d1:03:99:06:39:10:
                    6d:d0:24:da:9f:28:86:e2:6e:17:32:20:73:18:0c:
                    e3:4d:ce:df:d0:57:31:4d:05:2e:d1:ac:50:8c:63:
                    12:a7:05:54:f5:72:d9:dd:43:ce:38:4c:51:43:d2:
                    37:e5:92:0e:fe:6f:86:21:f6:88:53:cf:47:0f:f2:
                    12:7f:61:8f:d2:1f:5c:3d:1e:eb:de:9d:a6:40:6a:
                    26:8f:88:6d:2d:66:3c:ec:4f:b3:3a:5a:a8:56:40:
                    e5:ed:93:d9:cf:2d:8a:61:f9:12:29:4f:ce:38:6d:
                    67:f2:07:43:f8:89:93:ad:e7:b7:1f:4f:c5:59:7d:
                    bd:65:35:f2:91:3b:c8:73:53:e0:1a:d2:30:9d:f6:
                    43:fe:5e:bc:34:2e:75:b8:0a:63:f0:df:1c:82:48:
                    c5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FF:CC:FF:8A:5D:70:77:25:8B:FD:BB:49:1B:C9:10:AE:16:90:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ab35cffe-6d4b-394f-9b13-9917268099cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.213.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:b9:75:8a:63:17:74:c3:c9:44:32:ab:62:3d:80:70:27:47:
         44:f8:d9:f3:9f:2c:64:5a:0e:e8:f7:33:a6:5a:62:56:ee:16:
         bc:18:9d:f5:2c:f0:85:b7:b6:aa:a0:2e:3a:1e:05:64:e3:72:
         a2:f7:03:ca:08:3c:3a:d6:4d:ea:0a:b3:92:fa:d0:44:16:56:
         56:df:34:32:22:e6:80:05:9a:f4:b2:e7:22:45:2c:52:ab:6e:
         d5:a9:73:65:4d:d2:f9:c3:81:38:6d:f9:d3:67:c8:b7:23:bb:
         0a:7f:6f:ba:dc:17:de:e7:43:6c:05:24:a1:1f:98:4a:ac:bb:
         dd:fd:01:92:cd:45:72:23:cb:d6:da:5f:41:81:d9:bc:03:47:
         3e:5c:56:52:46:6f:f5:d8:b0:cf:35:b7:d2:05:87:f8:6f:67:
         11:66:5a:a9:6c:f6:51:13:c4:fb:bd:a7:bd:a1:dd:68:3a:ef:
         df:3c:a9:fc:29:da:c2:14:2a:3a:3a:03:1e:5a:41:ec:d2:60:
         f4:7e:21:8e:54:78:7f:49:fd:e3:54:c5:fe:e7:ee:d3:5f:05:
         35:be:ed:ba:34:29:4b:60:e1:e4:fb:49:b2:a8:7d:9f:76:0d:
         66:e7:d9:9c:c7:7a:b3:1d:c5:fd:0e:e4:e7:0d:24:4a:16:d5:
         5e:94:b3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:13:39 2025 by rpki-client