Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc6b4ea0-ed85-3b85-8605-7d59a0026e1f.roa
File:                     dc6b4ea0-ed85-3b85-8605-7d59a0026e1f.roa (raw, json)
Hash identifier:          WhwadXAiJVVIongLgjAgQbKgGGE3o88f6EO4FyTJZhQ=
Subject key identifier:   26:C7:ED:BD:79:7C:59:84:F3:AF:2D:28:AA:A3:4B:93:D8:BD:E9:6B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7FE0A539E5B7A4F8D415F980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc6b4ea0-ed85-3b85-8605-7d59a0026e1f.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        174.218.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:a5:39:e5:b7:a4:f8:d4:15:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=7d438a43-24d8-48dc-8f6a-bed8806a92d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5b:26:9d:79:4a:ed:d5:d0:5d:27:83:e9:e0:
                    72:74:4f:3e:1c:1e:52:c1:6a:04:26:a7:36:b2:c5:
                    3a:9d:95:a3:b7:f4:d9:1b:4d:36:1b:d7:fa:4a:5e:
                    a7:85:76:fd:2c:c7:91:fd:7d:34:95:e4:eb:3e:75:
                    ba:7e:f3:67:8b:7f:f7:86:9a:70:87:fb:b8:21:c6:
                    19:7e:a7:44:1d:95:cc:de:83:7f:54:5f:87:a6:7d:
                    e5:3e:a5:d0:72:66:22:b2:2a:73:4b:df:10:79:c7:
                    ab:fc:1b:de:46:ec:4c:95:59:17:df:58:63:3f:49:
                    6f:3b:f7:5c:38:c0:d0:5c:30:45:d2:21:84:01:73:
                    b1:a2:eb:51:1b:84:d7:b1:bd:1b:d8:00:e7:18:04:
                    c0:75:00:4d:07:28:b7:9d:db:43:51:b9:9d:c8:a1:
                    c7:88:80:10:23:e9:8b:c1:43:30:78:8f:a2:35:96:
                    4f:3e:92:f2:e7:8d:a4:f8:03:41:95:38:1d:ec:c1:
                    f1:32:1b:47:29:c1:d2:fb:13:6c:77:55:5c:e5:a5:
                    95:37:46:74:15:11:87:b2:c2:a6:db:58:b1:a4:45:
                    5a:72:58:c1:ca:d8:b3:2e:3b:68:62:ed:12:de:1b:
                    e6:db:1b:79:43:eb:fe:82:2e:d4:70:bb:e6:5d:ef:
                    a1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C7:ED:BD:79:7C:59:84:F3:AF:2D:28:AA:A3:4B:93:D8:BD:E9:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc6b4ea0-ed85-3b85-8605-7d59a0026e1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.218.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:05:19:fb:a2:41:11:f7:85:68:01:62:46:69:19:3e:12:5d:
         55:1c:f8:8b:34:98:db:a9:07:c2:d6:43:f2:6c:9a:ff:89:c0:
         9d:9b:a3:db:c4:d0:7b:1a:97:55:77:9c:9a:ac:e9:fb:5d:cf:
         58:a7:d4:cf:59:f8:2b:b6:86:51:b6:83:b3:24:47:a0:3e:54:
         00:e3:8a:3e:66:f7:3d:1c:5b:05:01:8c:01:c6:7d:4e:d5:16:
         87:25:5a:f5:1a:be:f1:8a:53:cd:1d:3f:2e:fb:e5:dc:e9:5d:
         68:79:9a:03:46:44:56:4c:3d:2d:1f:ec:15:df:08:ba:40:94:
         52:93:ec:04:5f:0b:b7:ff:9e:bb:d2:a4:6c:29:5c:90:2b:5c:
         23:1e:9f:77:43:21:aa:68:be:db:85:11:0e:7d:cd:63:c3:42:
         de:78:1d:e1:29:d5:af:fb:0a:08:71:b9:ae:bb:3d:98:3c:55:
         b6:4f:3b:05:ae:3f:00:4e:fe:97:26:8c:da:4b:28:80:f8:fc:
         5d:1d:b7:39:d9:e0:ae:8f:ac:71:1a:b0:93:95:6a:c0:89:68:
         63:b3:9b:5c:ce:1a:b2:c5:26:25:e1:77:51:a6:38:2b:aa:26:
         4a:90:e2:dc:9c:18:bd:a0:2c:71:8c:84:01:83:f1:d3:e2:13:
         d0:3f:f0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:11:36 2025 by rpki-client