Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8468a34-e8f3-390c-95dc-fad92bc5b78f.roa
File:                     b8468a34-e8f3-390c-95dc-fad92bc5b78f.roa (raw, json)
Hash identifier:          2ynDZ0yM7x94Tpwo60TGIzKKI7z2EQPigpYwsESYUuc=
Subject key identifier:   6E:30:04:B9:79:18:FD:40:6B:BA:54:F2:F7:86:C5:6A:9F:DD:E9:36
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7FE09AA0B52C87B7EC042180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8468a34-e8f3-390c-95dc-fad92bc5b78f.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        174.201.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:9a:a0:b5:2c:87:b7:ec:04:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=92624187-98a2-4cd5-9bce-f49256ca9add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:19:90:2d:b5:37:50:f7:bc:14:1d:4f:71:6d:
                    dd:bd:19:c5:89:23:5e:ae:3b:d7:f7:54:c8:74:50:
                    c2:f3:10:80:d9:8e:d5:50:60:c1:aa:ff:11:32:f3:
                    f7:e5:83:67:e5:9e:ec:af:4b:a0:b1:91:6f:5a:eb:
                    a3:1a:65:66:0b:3d:1c:ab:50:b4:e2:fd:94:4d:fa:
                    d7:7b:9e:e9:ba:f9:a3:eb:fc:d7:d2:0f:18:4e:3c:
                    c9:1a:6a:4a:2f:08:6d:5e:f3:dd:9c:7d:25:62:32:
                    90:85:7b:ea:fa:78:8f:3e:3b:d1:fc:00:06:29:2d:
                    11:d6:de:58:12:59:48:0d:9b:73:8a:e0:1c:30:a6:
                    66:c9:b7:b2:c3:83:c3:34:07:f1:f0:7f:16:08:dd:
                    b8:de:94:f6:78:fa:cd:6a:47:53:e3:b2:08:fb:55:
                    c6:55:07:56:f6:97:9e:66:d4:63:a4:a6:4d:ca:cf:
                    cd:8b:76:63:54:07:fb:c1:fc:c9:d6:30:45:4e:60:
                    01:d3:a0:07:04:20:cb:1a:f8:7b:dc:d2:e2:28:8b:
                    1e:10:f9:52:b7:bd:3f:63:f4:8b:b7:2f:12:fe:fc:
                    7a:52:24:5f:e8:49:6d:50:97:1d:fa:3a:79:0b:ec:
                    31:d9:a1:89:4e:26:ff:db:f3:35:6e:8f:8a:b3:e6:
                    94:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:30:04:B9:79:18:FD:40:6B:BA:54:F2:F7:86:C5:6A:9F:DD:E9:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8468a34-e8f3-390c-95dc-fad92bc5b78f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.201.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:ed:7d:6f:31:ca:b1:31:16:46:81:5b:b3:f7:6b:4f:69:03:
         f4:b9:bd:f6:50:60:29:5b:d3:d4:78:cf:a8:fc:95:f0:57:40:
         8f:b9:7b:33:4c:ca:29:54:7d:2d:25:f6:75:7d:f4:9e:f7:3e:
         58:9f:ad:3b:af:5c:1c:03:e1:49:3c:62:70:36:04:d9:05:25:
         86:fb:26:66:1a:30:0e:e7:10:b3:3a:43:ba:6b:e1:a4:56:52:
         67:62:60:f3:0b:c8:4b:1e:02:2d:1f:d6:09:43:ae:97:01:9f:
         40:cf:27:2f:de:a2:37:3d:f2:01:09:65:8f:e4:26:47:1a:be:
         df:82:d6:8c:73:4d:1d:43:9c:19:48:28:2c:fe:68:e8:4d:fa:
         11:cc:1f:b9:1e:36:f1:6d:57:1e:a4:65:e8:6b:75:b2:5c:de:
         8c:0c:74:66:b3:14:0b:a5:aa:c2:00:e5:a6:f8:95:64:ca:fe:
         55:26:3e:89:62:b5:e1:f7:33:0d:e6:f1:70:d6:f2:66:79:10:
         9b:79:4d:68:f5:8f:7e:7b:82:0f:6a:ee:85:1c:32:8a:32:9c:
         2c:2e:3c:e1:3b:47:d6:ad:1e:eb:1d:e3:64:12:50:46:e4:ac:
         d5:66:22:b4:99:95:5a:ab:0e:87:6f:a2:74:5d:ae:01:3d:dd:
         29:46:bd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:20:45 2025 by rpki-client