Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc8a6cd5-3153-3b39-ad3f-30ff813ede6c.roa
File:                     cc8a6cd5-3153-3b39-ad3f-30ff813ede6c.roa (raw, json)
Hash identifier:          1vAXGZn6jQ8naS3mrDy6N8KeFshg/Oe3NwGAPXUG/9U=
Subject key identifier:   25:9E:71:31:FF:77:BC:25:BE:96:16:4A:6D:F6:84:58:EE:D3:5D:52
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7FE0ABF5438AA9407B9F6A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc8a6cd5-3153-3b39-ad3f-30ff813ede6c.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        174.195.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:ab:f5:43:8a:a9:40:7b:9f:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=37499e4a-a161-4fef-95e2-ff5a660e4ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:75:a3:18:82:03:06:12:47:5a:90:05:f6:5d:
                    cd:a5:21:5e:62:44:f6:ab:c7:a7:d6:58:d5:bf:64:
                    1c:3f:c6:83:41:b0:f5:eb:1d:84:0f:00:d7:a6:dc:
                    7a:63:2a:02:b0:ed:2d:1b:be:a4:df:44:a4:0d:5a:
                    83:fb:fa:f3:83:d2:bf:a2:35:5a:e5:14:79:0d:bf:
                    8f:94:01:e3:d2:f0:66:4e:b8:db:e1:16:dc:f2:e1:
                    73:f1:cf:12:75:6b:81:41:32:5e:6e:ae:ea:c1:59:
                    1c:0b:71:e9:ca:b2:2e:cc:23:56:ba:ca:a4:f8:3d:
                    ad:2f:f1:76:b7:c3:a4:20:cd:44:93:f2:e9:63:10:
                    01:62:bf:f6:f5:cc:d6:25:98:eb:f6:51:36:6d:89:
                    58:b5:5d:1c:87:39:73:16:b4:97:97:c1:c1:d9:4f:
                    a9:9d:d9:56:b9:9c:af:ff:9f:30:51:f3:bd:d4:9f:
                    9f:d2:25:4f:57:af:79:f2:19:91:03:92:d8:6b:06:
                    10:20:98:72:55:a2:c8:e4:d9:cb:45:f0:75:af:ca:
                    82:15:75:b2:8d:ab:22:08:06:09:f7:9c:5a:e5:af:
                    2f:f4:2f:04:a8:35:42:b2:9b:45:58:6c:00:2d:87:
                    81:e2:1f:3b:47:aa:25:63:6d:ff:95:9c:58:da:3b:
                    fe:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9E:71:31:FF:77:BC:25:BE:96:16:4A:6D:F6:84:58:EE:D3:5D:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc8a6cd5-3153-3b39-ad3f-30ff813ede6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.195.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:7f:f1:5a:63:e8:4d:df:9a:95:08:fb:26:a0:b8:06:dd:9c:
         2e:29:b1:2e:db:92:8f:34:a5:a6:ae:85:9a:34:a5:98:c3:6a:
         14:68:aa:d7:0d:cd:60:04:e2:d4:bb:8b:04:61:a5:e7:c6:80:
         e4:19:52:13:95:bb:ee:58:b4:0a:8b:75:36:68:cd:ee:52:12:
         ab:2f:56:78:52:48:3c:ed:77:4d:1f:12:f8:c4:26:d3:95:c2:
         29:c7:f0:7a:44:a0:c6:66:00:cd:20:e5:c4:9a:40:f0:3a:6e:
         5e:45:4b:77:73:d3:0a:5a:03:1e:c1:1d:31:52:d8:7c:5c:b0:
         0f:e9:ea:b3:f0:9d:b2:1b:ef:1a:44:9c:e5:d9:51:41:8e:d4:
         85:f0:32:43:8c:f5:fc:65:45:48:3e:9f:4e:4a:b8:21:a9:c6:
         5a:fb:85:dc:05:5b:52:70:73:a6:68:dc:b2:c4:3f:ef:e3:96:
         50:5b:44:52:c4:0a:99:3d:c1:79:4c:5b:b3:8b:bd:d5:14:cf:
         4e:6d:d9:65:0c:18:ef:0c:75:b5:bf:42:44:2b:a7:d7:f7:57:
         7e:8e:99:27:9a:11:c9:a3:80:c4:75:24:91:ac:c9:75:34:4c:
         f8:9f:ed:23:8f:04:1d:fa:ba:26:7a:87:71:8a:30:46:41:78:
         1b:3d:6b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:18:07 2025 by rpki-client