Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c602be14-9222-3e83-9a34-c2e20e0f0e37.roa
File:                     c602be14-9222-3e83-9a34-c2e20e0f0e37.roa (raw, json)
Hash identifier:          0TIb5emZ5hW6Tu7Rp/2iEtfyseYntBcaef3CVkOGx/0=
Subject key identifier:   51:73:D7:55:88:30:2F:03:FD:8B:4C:44:38:A9:17:0B:67:C3:51:DB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AA6F643D0AA07E6A098A4C200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c602be14-9222-3e83-9a34-c2e20e0f0e37.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        174.247.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:43:d0:aa:07:e6:a0:98:a4:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=724d29f6-479b-4268-87f0-d248a3c1a609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:86:37:b8:8d:93:53:59:c1:e6:cf:1f:3f:26:
                    66:ce:36:22:7e:b5:86:59:8a:c7:33:62:0c:09:fc:
                    e3:33:ae:b7:21:31:e9:50:89:0a:c2:c2:cf:aa:a3:
                    75:f5:84:58:02:7c:f4:fa:26:7a:6d:93:aa:6e:8f:
                    27:78:e2:1a:bb:8b:38:24:1a:51:06:1b:48:5b:7b:
                    52:a0:3c:1f:52:05:f6:72:d9:c0:74:21:5f:c8:2e:
                    57:ca:a5:45:11:a8:18:1c:58:69:b1:ac:33:b3:22:
                    1c:f3:c2:c1:b6:6b:ed:eb:87:e5:97:d5:c0:76:9e:
                    cf:5c:2d:4e:0a:92:de:70:d8:9a:cb:b9:29:ad:84:
                    aa:61:85:46:8e:60:5f:7d:01:98:42:f1:6c:8e:22:
                    32:06:c7:7a:c0:11:e3:d0:b3:9f:68:07:1e:e4:13:
                    2c:a4:99:19:69:51:c3:fc:61:d8:51:37:f2:e0:a7:
                    cc:b6:f7:c4:8e:e5:e2:be:bd:8a:13:63:1f:69:0c:
                    bc:90:86:6b:52:d3:42:0d:66:f1:d5:33:81:c9:63:
                    44:cc:13:fc:44:64:0a:13:f4:9f:4f:a3:68:e6:ac:
                    e5:65:41:48:05:b3:76:4b:9a:ab:85:ad:30:3e:11:
                    49:df:6b:77:a3:78:30:fe:57:77:af:49:d6:b0:dc:
                    1d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:73:D7:55:88:30:2F:03:FD:8B:4C:44:38:A9:17:0B:67:C3:51:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c602be14-9222-3e83-9a34-c2e20e0f0e37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.247.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:4b:9c:01:02:6f:6e:d1:fd:fe:de:ad:44:81:34:c2:1e:55:
         93:48:8f:e0:a5:10:85:75:80:e5:27:c5:1b:46:3d:76:72:b0:
         c6:c7:6e:71:5b:35:45:c1:29:59:d2:48:47:7a:05:0e:32:0c:
         f3:03:d7:a3:ed:62:d0:87:1e:b9:c7:58:8a:1e:0d:60:af:7a:
         11:3a:f0:5e:fa:35:99:9c:bb:f5:44:c6:67:29:0e:53:94:bc:
         88:2f:5f:fe:41:e5:4d:24:02:ba:e9:ef:9c:89:d2:02:54:d6:
         24:a8:6f:6f:50:f3:51:d0:38:54:df:3f:5e:84:6b:7e:a9:09:
         11:80:aa:11:ce:30:86:5c:23:3d:00:28:b3:9f:bd:62:5e:59:
         29:0a:91:3a:6c:88:0c:de:74:20:50:1e:10:c8:e6:26:c7:13:
         cf:07:24:9e:c3:16:d9:2c:13:68:a3:de:62:f2:3a:ef:7b:f0:
         28:a9:5d:d9:57:b1:d0:8f:01:81:d1:59:df:ba:d4:73:88:d9:
         60:73:72:b1:2c:30:ae:ed:0b:07:25:e9:82:e2:2f:38:53:fa:
         b5:a4:4a:ae:a7:21:59:42:a3:bb:b9:29:51:9c:20:42:77:d0:
         03:14:5c:54:31:45:77:1a:17:8e:83:37:6f:a8:34:3a:ff:35:
         81:74:cb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:09:19 2025 by rpki-client