Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4d9141e-9370-3aa5-a129-89edc3ad7d6a.roa
File:                     c4d9141e-9370-3aa5-a129-89edc3ad7d6a.roa (raw, json)
Hash identifier:          9zP2jwpia0Y8mvbZDzk8L0uXz03kB6S5jGKZMxjZXmU=
Subject key identifier:   50:51:64:E5:87:01:B3:98:78:5C:13:E7:CD:A2:DF:27:12:77:3B:B4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AADF139CB74B9B6A90462DDC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4d9141e-9370-3aa5-a129-89edc3ad7d6a.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        174.43.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:39:cb:74:b9:b6:a9:04:62:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=0b01d2a6-0747-4c62-a06b-0bdc6c532174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ca:10:f0:92:40:7b:db:8b:10:08:db:c9:1d:
                    d0:d3:68:fb:b1:14:09:8d:1b:17:96:b6:b1:27:3d:
                    83:89:8f:4f:98:01:41:42:d2:50:80:64:7b:86:ce:
                    81:ff:a3:f7:e1:96:0f:4c:af:64:19:f2:2b:5b:19:
                    68:ea:48:f8:a6:c3:28:d4:aa:31:f9:a1:da:5f:ef:
                    1e:46:40:30:c5:9a:86:60:ec:85:44:0a:a5:6e:9e:
                    73:d3:0a:6d:82:0a:a0:20:89:bb:53:75:ab:9b:46:
                    44:fb:a5:fc:6c:3c:e3:93:1f:0a:f9:f4:3b:cc:27:
                    c8:5f:12:f2:72:b5:3a:82:8d:fd:92:99:22:d5:cf:
                    85:83:6f:f3:2d:de:93:ec:a6:6b:57:36:40:c3:65:
                    e5:15:be:a4:a8:e8:ab:c7:f3:00:2e:f6:52:1b:0b:
                    26:0b:c5:77:b3:de:fa:1d:05:ce:54:b6:86:12:6a:
                    00:eb:ea:c8:a7:4d:42:8f:72:44:74:63:d1:5d:54:
                    5e:9f:74:db:bf:5d:6f:25:40:e8:d2:e3:32:f7:97:
                    60:fc:59:92:07:b7:d7:34:ee:a6:99:36:1c:40:03:
                    1b:43:99:ba:54:6c:69:09:aa:5c:db:7f:77:04:17:
                    0a:e9:fc:a6:36:22:8b:66:38:bb:e7:9f:53:99:e4:
                    29:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:51:64:E5:87:01:B3:98:78:5C:13:E7:CD:A2:DF:27:12:77:3B:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4d9141e-9370-3aa5-a129-89edc3ad7d6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.43.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ca:d5:37:89:ea:af:19:4e:67:5a:60:f4:a9:5c:b0:5c:a7:
         81:93:c2:19:92:91:6e:e5:4c:82:77:32:8f:e7:c8:1c:28:e1:
         ae:1f:50:75:2a:8b:74:dd:9a:f7:6f:0d:ab:c1:30:6c:bc:af:
         f8:9e:ea:d6:ac:5a:98:e6:c4:9d:36:37:ff:da:6a:8e:4d:47:
         13:0c:d1:90:39:f8:c8:e2:6b:9c:95:8a:fb:69:ef:3a:16:29:
         de:33:83:75:8d:90:db:f5:e4:11:27:b2:4b:ba:42:5d:24:37:
         a9:93:8e:24:c9:cc:be:21:c4:ad:aa:b8:e9:51:94:21:14:b2:
         7a:9e:1c:a8:f1:f1:35:a4:71:e2:92:e1:e4:da:eb:4d:ce:dd:
         5e:ad:ec:c4:81:8b:1e:ba:38:39:b3:ea:23:5a:5a:64:cf:bf:
         2f:c2:52:77:ed:60:5e:33:97:c9:db:5d:7a:f6:b4:c6:fe:0f:
         34:2d:c6:58:88:fa:d3:15:2c:e3:24:6c:87:5b:79:eb:8f:de:
         a3:0f:c9:50:b3:e7:55:d1:f5:c0:74:8f:02:67:01:6f:31:83:
         36:fd:14:01:12:1b:74:bc:38:06:81:0b:78:36:85:c5:88:b0:
         ed:1d:cc:c7:46:b5:bd:6d:36:29:63:2d:8a:c6:0b:68:5b:95:
         fb:16:c7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:56:35 2025 by rpki-client