Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc32d6be-d34f-38fd-bcc1-8415d379e4c3.roa
File:                     cc32d6be-d34f-38fd-bcc1-8415d379e4c3.roa (raw, json)
Hash identifier:          0UhXK6F3sWip7i0O2QbAl77KRMJgrwVq7ypsoUxynpw=
Subject key identifier:   EC:B2:A0:94:15:11:E2:0B:26:C7:29:4F:2B:17:0D:ED:6E:F6:50:29
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AA6F63929DCA2EF41F770B100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc32d6be-d34f-38fd-bcc1-8415d379e4c3.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        174.232.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:39:29:dc:a2:ef:41:f7:70:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=e8f368fa-729c-4046-841b-495856176228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5a:28:2a:85:58:d9:ba:8d:27:d7:a9:04:db:
                    3d:e2:14:dc:28:31:32:9d:34:a6:e5:3a:8c:97:29:
                    c4:82:49:15:f8:7c:16:d9:a3:a9:5b:4b:b9:11:b4:
                    bc:11:6a:4c:7e:7f:84:d6:c3:f1:e0:ba:2d:7e:fb:
                    e2:ea:af:ff:99:31:4c:69:4f:6c:5d:53:0a:d1:91:
                    7e:96:13:fd:3d:aa:de:b1:78:86:02:53:26:6a:69:
                    3e:f2:dc:90:c4:a9:3a:45:2b:bd:c4:0b:de:13:21:
                    17:37:7c:56:13:f4:cd:cd:f2:2c:f2:af:45:8b:43:
                    a0:dc:3e:e6:64:14:74:0a:81:aa:43:69:cb:6f:23:
                    e1:e0:f2:52:d7:73:23:7a:98:52:cb:94:6b:63:2c:
                    c3:99:b1:e8:8b:03:0c:e0:fe:fb:df:81:63:64:df:
                    6e:99:60:f6:92:05:35:a2:d5:22:f9:b3:71:4c:2a:
                    4b:76:5a:81:64:3b:41:d2:18:fd:f7:b6:8e:c9:2b:
                    f9:79:3b:0c:56:67:99:92:fc:b2:2d:b1:5c:3d:22:
                    69:ce:e0:1a:1b:c4:19:31:95:68:89:13:25:83:eb:
                    8d:9e:6d:df:ee:62:c7:e2:f6:10:85:5e:12:4d:88:
                    0b:a5:c0:2d:05:47:da:af:6e:c5:22:80:73:e6:35:
                    50:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B2:A0:94:15:11:E2:0B:26:C7:29:4F:2B:17:0D:ED:6E:F6:50:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc32d6be-d34f-38fd-bcc1-8415d379e4c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.232.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:7b:a3:b3:13:4d:56:0a:9c:24:16:1c:0c:7f:bc:cb:a9:3e:
         bf:f9:22:f4:a0:f4:a5:74:cc:6d:a0:95:52:9a:81:3a:d4:49:
         ae:7c:91:74:41:bd:7b:57:f4:94:a6:f3:74:21:1c:f4:0c:ab:
         e0:fa:27:ba:67:2a:12:31:4d:8d:1d:bf:64:74:ac:43:10:46:
         c2:d7:6b:f9:38:ca:76:eb:71:cd:fc:3d:be:fa:01:26:53:aa:
         a2:3b:5c:08:4b:61:6e:05:9b:43:39:ad:b7:17:9f:a9:9e:10:
         37:d0:70:84:aa:37:95:8a:18:18:48:17:e8:5c:43:f1:8d:e6:
         aa:64:af:0f:4e:d0:2c:4f:cd:cc:60:6e:0f:d8:29:53:c6:7f:
         d8:74:12:9d:b7:24:1b:e6:dd:fc:ac:b1:37:65:ac:13:aa:5f:
         df:69:61:17:59:a2:64:6c:de:96:7f:4d:7e:62:50:fa:03:04:
         da:87:9b:65:c3:bf:f4:db:85:35:10:e2:4e:ae:1f:95:a3:b2:
         bd:27:44:c8:46:bd:38:38:45:1d:f8:eb:05:52:9f:2e:b8:6c:
         fb:1b:c5:5c:36:02:7f:56:aa:6c:84:a3:61:9e:45:37:ae:5f:
         8f:bb:f3:dc:b1:81:ac:be:02:74:2e:31:7b:bc:b1:e7:e9:fe:
         25:14:48:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:52:53 2025 by rpki-client