Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d03334a7-eed3-3553-b8a5-789c01d4a346.roa
File:                     d03334a7-eed3-3553-b8a5-789c01d4a346.roa (raw, json)
Hash identifier:          CFVIO7Z4N5NtxVmi6Mt12EXLE4x/7DBNpSrZNpIPSBo=
Subject key identifier:   35:83:26:34:D7:C7:C2:0E:E7:A8:20:C9:07:3A:96:C0:7C:A7:7A:47
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7FE0A140671AA34318802180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d03334a7-eed3-3553-b8a5-789c01d4a346.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        174.215.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:a1:40:67:1a:a3:43:18:80:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=c14a1801-e752-40b4-861d-2a87cc49fa19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f9:03:c4:f6:14:b3:dd:0d:60:74:a0:27:5c:
                    1d:ac:94:88:4d:18:68:b6:bf:f9:b7:96:c4:74:b0:
                    cd:7b:8c:6f:b5:c3:30:4b:15:4f:69:a6:05:bc:ba:
                    59:d6:97:7e:72:95:e2:a5:2c:3b:1e:5f:5a:14:19:
                    e0:6e:fc:8e:6f:0f:da:c2:c9:11:e4:b5:6d:be:ee:
                    6d:2f:ea:64:cc:e1:f3:9b:53:3c:80:1a:a4:ba:96:
                    58:6f:44:38:a5:59:28:b9:d4:01:6b:c3:0e:cd:3f:
                    d3:3d:40:4b:7c:92:32:e0:9a:d9:97:a4:d5:02:eb:
                    1f:9b:ec:fd:5f:cb:ea:64:9a:37:3e:53:b3:e0:da:
                    cb:41:6e:d8:68:26:92:b1:07:4b:a7:e6:d9:68:b4:
                    f5:a0:fc:ca:21:04:f9:06:eb:6c:f4:8c:3a:8a:dd:
                    13:ee:6b:ff:00:d5:58:ad:19:83:99:85:34:c8:ad:
                    c7:44:39:ba:5f:57:e7:f6:72:22:6a:33:0b:84:2f:
                    6b:7f:23:68:68:b3:b8:ed:99:1b:83:b3:0d:da:b4:
                    fb:95:89:16:ee:dc:c5:dc:c8:dd:1d:60:92:00:fa:
                    33:9c:2c:4a:fc:a2:58:e7:b2:51:c8:7b:d8:e3:1a:
                    d1:43:7e:57:70:88:45:ab:dd:18:92:a6:b0:d7:ee:
                    e7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:83:26:34:D7:C7:C2:0E:E7:A8:20:C9:07:3A:96:C0:7C:A7:7A:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d03334a7-eed3-3553-b8a5-789c01d4a346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.215.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:0f:c4:47:ed:7e:8a:2a:ba:bb:a6:16:82:28:01:f9:61:25:
         ac:be:f1:18:a2:b4:b2:f0:de:79:42:90:47:25:c5:18:c5:b8:
         c9:b1:54:09:09:b7:61:02:70:66:06:7a:15:3c:e9:dc:d7:74:
         b0:4a:c4:bf:1e:92:85:d4:1c:b6:72:f9:3e:63:07:fa:f3:f8:
         7d:5e:7d:60:92:e9:f1:04:23:7c:0c:85:8e:93:cc:fc:f5:32:
         e9:5c:d8:c2:41:bd:e0:79:7f:aa:6b:4e:d2:0f:35:e9:c6:a9:
         f1:68:e7:9e:ee:dc:b9:47:4a:ca:77:39:ad:cf:09:de:12:d2:
         26:8a:c6:cd:2b:b5:47:12:e4:87:24:10:c9:fa:8d:1d:83:ed:
         55:50:33:d0:78:9b:d1:22:9a:b6:34:65:73:41:22:64:81:18:
         c8:90:69:34:70:18:07:03:73:6c:bc:42:99:20:75:ef:c0:f7:
         3c:58:d0:1d:be:26:ad:4e:19:c3:2f:4f:f7:c7:cb:01:a8:b6:
         73:bf:a3:61:08:ab:32:30:52:60:e6:7a:cc:7d:0e:bc:47:0e:
         52:24:14:12:24:45:51:44:4a:3c:35:82:5b:cc:d2:22:47:07:
         01:3a:50:11:30:2a:4d:f5:8c:84:99:f8:69:e0:a5:4a:fc:d9:
         d9:75:5b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:16:39 2025 by rpki-client