Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d88127c8-8f4c-3655-81fd-d2443b106cb6.roa
File:                     d88127c8-8f4c-3655-81fd-d2443b106cb6.roa (raw, json)
Hash identifier:          1Uy8hulUYIsqrTsZ2Z82+h8YQ56+9PpK6sXgP1qP4Lw=
Subject key identifier:   EC:35:E2:B4:BB:89:7B:BA:50:6F:03:8A:17:00:31:C4:39:F4:2A:8D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A9B25E0A68BF9B9751E503E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d88127c8-8f4c-3655-81fd-d2443b106cb6.roa
Signing time:             Tue 22 Jul 2025 19:27:22 +0000
ROA not before:           Tue 22 Jul 2025 19:27:22 +0000
ROA not after:            Mon 20 Oct 2025 19:27:22 +0000
asID:                     6167
IP address blocks:        174.255.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:25:e0:a6:8b:f9:b9:75:1e:50:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 22 19:27:22 2025 GMT
            Not After : Oct 20 19:27:22 2025 GMT
        Subject: CN=57338379-b809-486d-af24-69c45afa208b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:60:dc:28:26:8a:60:4d:21:09:c6:08:35:43:
                    ce:d9:43:8e:af:c7:97:d8:60:89:fb:04:f3:b6:20:
                    ff:13:fd:4c:65:9e:12:44:ef:b0:cf:fb:d3:ab:4e:
                    07:c3:f9:13:73:f8:37:1b:0b:76:e3:65:3f:88:7b:
                    6e:3e:5a:11:d7:f5:b8:3a:7c:93:b2:f2:2a:b9:97:
                    a9:8d:88:d3:b9:d4:73:1e:9a:0e:5a:99:8d:96:d1:
                    a4:21:ed:e7:e0:a7:7d:89:48:01:7f:90:8e:e1:1a:
                    ca:0d:b1:cf:c1:70:6a:68:89:45:0d:76:27:23:fa:
                    db:6e:ac:c0:ad:e7:f8:18:b0:00:b6:8e:44:ea:55:
                    d9:35:f2:0f:95:67:32:90:f8:83:b3:16:e6:18:74:
                    08:f0:57:f2:4a:34:e6:16:72:fd:5e:80:48:28:83:
                    f4:75:19:c0:ec:a4:85:87:48:3f:b1:6e:4a:f1:ab:
                    6e:0f:a2:19:db:51:ed:59:69:4b:3d:90:f7:ed:51:
                    49:58:62:80:f4:05:78:60:03:db:dd:48:a5:c9:24:
                    e3:ed:24:2f:42:da:9f:30:38:38:17:05:21:25:bd:
                    dc:1f:7b:1d:8a:5c:7e:bf:b8:af:62:cd:a4:03:f2:
                    7c:85:56:7e:05:14:68:38:a2:85:42:e7:e3:87:2a:
                    06:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:35:E2:B4:BB:89:7B:BA:50:6F:03:8A:17:00:31:C4:39:F4:2A:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d88127c8-8f4c-3655-81fd-d2443b106cb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.255.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:2f:d4:f8:76:74:aa:9d:92:af:a1:42:78:59:3d:d5:78:fc:
         f1:f5:a8:77:b7:a6:41:d2:98:c8:d0:72:d9:ad:86:a2:21:b4:
         e2:8c:c8:31:c5:d6:5b:43:60:89:e3:a8:8d:7c:cc:94:bf:c8:
         8a:30:d4:ea:07:2c:d3:b9:f8:95:de:7e:8d:a0:89:96:3a:1a:
         34:b3:2c:62:77:bd:31:3f:cf:d3:6e:9d:56:e4:1c:f1:e0:56:
         47:3d:a0:af:c0:75:44:12:62:5e:22:31:9a:2b:f3:ae:93:25:
         39:f7:bb:b9:f8:10:32:6a:6b:51:5f:59:02:85:41:93:30:35:
         77:22:21:9d:91:58:30:ab:33:dc:59:13:af:a8:b3:8d:1d:00:
         7a:e1:bd:23:95:de:fd:98:30:fc:8a:52:69:db:8c:90:7f:a6:
         d8:cc:89:50:69:b5:ef:39:24:77:2e:13:7a:47:a1:0d:75:54:
         d6:76:27:83:0a:96:d4:93:82:1e:34:6f:64:af:8f:25:4f:96:
         90:de:65:5b:cb:e0:0f:ee:2c:b2:25:f6:92:bf:22:4d:e5:9c:
         eb:e0:94:03:c8:53:a1:5a:c9:e6:4e:97:d6:20:30:d9:0c:90:
         95:9e:74:7a:fb:ff:62:f5:7c:33:bd:94:e6:5e:6c:ca:4a:37:
         9a:27:6b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:24:56 2025 by rpki-client