Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c58dbe7b-6d49-37e6-9054-4a53328fa884.roa
File:                     c58dbe7b-6d49-37e6-9054-4a53328fa884.roa (raw, json)
Hash identifier:          Rljv0f+WcCuEDMdTs3HvkoPEqqjxG3tBFu/euWO1awY=
Subject key identifier:   72:5E:3E:07:68:78:6C:BE:74:8E:B3:E1:63:C8:E6:60:B5:0A:A0:F2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7FE0AD37C863E43DD8BBAA80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c58dbe7b-6d49-37e6-9054-4a53328fa884.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        174.196.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:ad:37:c8:63:e4:3d:d8:bb:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=30c46541-27da-4a34-b186-5769a1a7f9bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9a:39:d9:c7:55:ce:51:f7:21:59:ab:9c:44:
                    0b:7b:aa:09:1f:8f:3c:46:d3:96:bb:d8:57:6d:fe:
                    3c:7b:38:83:b6:a4:c5:72:b3:9a:ae:b9:56:a9:be:
                    54:8e:3d:5e:ef:52:d8:8a:cf:50:d3:08:88:05:50:
                    60:23:18:f8:9d:b3:5a:a5:03:7f:a5:66:33:ab:1e:
                    c7:00:1f:ec:c6:2f:7b:05:2a:a4:e7:94:4c:16:6a:
                    c4:ca:83:5b:b4:1a:d8:7e:31:f2:ae:1f:80:a5:22:
                    a1:5e:7b:89:6c:22:f9:20:d4:42:74:92:0e:fe:be:
                    89:8e:86:7b:b7:d6:35:be:59:73:e3:e7:e6:2e:d4:
                    56:be:65:60:15:9f:27:c4:99:93:1b:f8:28:ed:ce:
                    93:b1:3c:2f:de:14:45:01:40:73:47:86:33:37:f8:
                    bf:61:33:a9:a3:82:13:f1:4c:0a:0c:8c:22:fb:ad:
                    3c:3f:79:4b:f0:cb:4e:44:ed:61:3b:cc:2f:84:cf:
                    9f:a3:da:7b:30:85:a7:78:85:45:76:78:2a:28:76:
                    81:27:cb:70:2f:73:b6:47:13:20:d7:07:f2:4d:00:
                    b7:0a:c3:be:8b:ed:59:fa:87:b7:9f:56:3a:4b:c9:
                    ae:44:5c:07:90:c6:c8:94:d5:a9:a5:26:ec:62:5c:
                    50:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5E:3E:07:68:78:6C:BE:74:8E:B3:E1:63:C8:E6:60:B5:0A:A0:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c58dbe7b-6d49-37e6-9054-4a53328fa884.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.196.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:58:f6:32:0d:e1:21:95:67:cc:33:b4:49:49:94:5c:1a:f4:
         e6:72:0b:cf:c3:72:fb:30:59:c2:14:fc:b7:65:a2:f9:e7:8a:
         49:3d:71:ed:7d:00:05:23:b1:1c:2b:4d:b2:e9:48:ad:a2:ba:
         2d:75:83:80:8d:58:58:90:e7:21:99:03:5a:68:74:15:1a:a1:
         b0:d8:9e:c3:f6:6f:ce:85:4e:de:48:ff:44:ea:3a:c7:ba:ff:
         bf:d9:08:5a:c5:36:c6:e3:6a:81:fe:70:f0:3f:88:f7:01:5b:
         34:1f:e6:9d:09:fb:8e:ae:df:d9:7e:9d:04:07:97:dd:f4:db:
         bd:7c:cf:5d:bd:d8:8c:0d:d8:d7:f3:a5:57:8f:8b:db:3c:3a:
         6b:95:ee:34:64:56:64:fd:d5:d1:c1:b8:99:6f:6c:b0:df:22:
         08:f7:3c:db:48:5d:e1:43:e2:33:e0:e7:03:90:6c:7e:17:21:
         8a:52:91:dd:69:f1:d0:c2:f4:11:80:0e:57:d3:f2:a4:d1:a9:
         42:5a:03:9d:64:cb:4a:4f:af:71:61:b8:d4:db:9c:8a:70:cf:
         54:a8:ae:76:89:d0:a2:20:dc:b3:bb:25:bd:60:f6:96:32:f1:
         99:2f:2a:aa:ca:7b:73:63:34:42:02:ad:43:81:84:8e:d3:fa:
         85:4a:91:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:52:24 2025 by rpki-client