Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ad38d378-bc1a-3aa3-b6af-fc3f6c96975c.roa
File:                     ad38d378-bc1a-3aa3-b6af-fc3f6c96975c.roa (raw, json)
Hash identifier:          UxHNjGOQ4da2SeHIkt4kDOO+Ie0xCDUB4RGZDpgqZNo=
Subject key identifier:   DD:6A:99:48:AB:3A:63:E8:F6:39:42:FA:E0:8F:33:28:D2:23:23:F0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AA6F63185FF0B2EAFF28D4F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ad38d378-bc1a-3aa3-b6af-fc3f6c96975c.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        174.231.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:31:85:ff:0b:2e:af:f2:8d:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=7c7cc90c-8f80-49ff-bb59-7ed8886b5be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dd:25:5f:48:12:fa:40:58:ec:02:fa:1b:f2:
                    59:d4:df:ed:5c:ad:9a:2b:f2:47:cb:63:ea:5e:be:
                    f3:64:a5:90:e1:3d:e4:18:3f:67:cb:0f:97:21:84:
                    5f:8b:63:dc:38:ab:9c:81:d4:9a:20:0a:3d:06:fe:
                    b6:d6:fc:05:0b:fe:68:80:39:9d:65:6c:b7:50:8c:
                    dc:aa:39:65:0e:10:f8:f8:0b:21:83:43:f6:46:a1:
                    d0:cb:92:88:05:60:88:77:f4:3b:bb:e3:d8:de:b4:
                    5e:62:bf:1f:26:5c:3c:a0:4a:ca:d8:c0:b1:1c:2c:
                    d0:25:c1:18:b1:1a:91:16:6b:7c:7d:5f:78:34:a4:
                    71:b0:c2:0f:c1:05:30:e9:77:6b:65:06:79:29:e5:
                    5c:61:2f:69:89:85:4c:17:a0:b4:3b:23:12:b2:b9:
                    02:e7:b5:14:0d:70:40:4e:79:42:83:d2:f8:20:34:
                    08:e0:1b:40:95:85:01:c8:eb:f6:ee:6e:3a:4e:c5:
                    38:6a:f4:33:35:a8:6e:d2:4b:1c:0e:f7:56:ea:58:
                    7b:2e:dc:0d:4c:73:3c:4d:c8:eb:51:2f:99:af:5b:
                    e7:66:e2:36:08:cf:d2:12:0b:a3:a6:1f:29:c7:1d:
                    f8:13:f9:fe:22:75:47:80:a9:6b:d1:74:7e:28:11:
                    6b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6A:99:48:AB:3A:63:E8:F6:39:42:FA:E0:8F:33:28:D2:23:23:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ad38d378-bc1a-3aa3-b6af-fc3f6c96975c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.231.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:45:fa:98:33:a6:3f:b7:27:36:b1:3c:51:88:f1:e4:71:1a:
         2f:5b:73:da:84:5d:92:a6:09:0b:34:ff:f8:51:e8:d3:c3:ed:
         df:f6:92:d3:58:a6:34:2d:f2:cd:79:f7:ac:5e:9e:72:d3:92:
         09:b7:ef:35:e0:b7:3b:e5:7b:6f:cd:95:9d:fe:6e:13:f8:fa:
         59:56:52:ae:b9:a3:1a:ec:41:07:80:38:f0:15:cc:69:f6:15:
         ca:0a:2e:0a:59:da:3e:58:d4:2a:6e:72:67:98:69:c6:10:be:
         72:90:b3:97:ed:8e:20:43:c2:27:b1:ee:4b:e5:c3:a1:37:f0:
         40:ce:94:a8:c0:e9:d4:b7:2b:d0:cd:57:ad:8f:6b:a8:c0:27:
         4d:20:bd:7f:21:6e:a8:98:53:96:80:63:a2:83:a2:f2:c5:f2:
         ac:87:d6:b2:1b:6e:ef:ab:78:cb:a7:ab:cc:51:82:d2:e8:7b:
         80:95:e6:ce:ee:3f:cd:74:bb:86:c4:ac:b5:03:ef:40:e2:b1:
         e3:3d:f4:89:0e:aa:e7:d8:f0:9f:d0:2b:45:7b:f1:1a:bc:b2:
         1e:ac:74:07:15:cb:d1:1b:6f:b7:90:3b:d3:c1:3f:04:36:d0:
         22:be:10:58:56:a5:af:0d:f8:2a:b8:ff:98:a5:59:c6:ba:74:
         9d:c4:07:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:08:41 2025 by rpki-client