Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e91be0ea-2840-3c92-a2d0-dc11f4dd593e.roa
File:                     e91be0ea-2840-3c92-a2d0-dc11f4dd593e.roa (raw, json)
Hash identifier:          sJm5luA54/VRx9s/jrTSTGoMk4EtXPK12Zx9mGOHSuU=
Subject key identifier:   19:25:C7:FA:16:C2:3F:18:66:84:65:CC:F9:0C:55:BE:1A:E4:1C:DC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AA6F63A3D42F418890C6E0C40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e91be0ea-2840-3c92-a2d0-dc11f4dd593e.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        174.232.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:3a:3d:42:f4:18:89:0c:6e:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=fbbef585-74f9-4b2b-99fb-c5db88ced834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8c:e0:e4:f6:f5:e1:c1:5f:c0:d2:ec:e8:06:
                    8f:14:38:09:ac:f7:36:80:a0:81:55:9f:6c:68:34:
                    4e:2b:c4:e5:93:03:7e:1e:2a:66:17:6c:7e:06:98:
                    e4:14:8f:ac:06:02:e3:0f:8a:40:3c:e7:35:7e:d4:
                    dc:5f:b7:fd:ea:7e:1b:e2:7c:31:2c:61:ad:5e:9a:
                    9d:7c:36:38:7a:e2:30:ee:d9:93:3e:cc:08:a2:ad:
                    67:18:30:bf:d4:63:19:47:1e:04:fb:8c:7e:b6:5a:
                    a3:d0:34:e7:f8:5a:ae:3b:6d:cf:ba:1f:7e:7a:15:
                    37:d5:23:57:76:ac:e0:16:2c:90:1a:d5:0c:b1:8a:
                    19:cc:8c:30:b7:b8:34:43:62:90:1f:e7:50:bc:3a:
                    a6:ae:2f:d0:08:b4:36:ed:ff:f7:10:05:53:f7:70:
                    c7:26:95:10:78:9d:a5:2f:d6:50:f7:0a:f4:2c:77:
                    26:73:f5:61:dd:f7:9a:57:1f:04:95:69:be:d5:07:
                    6b:23:db:09:19:12:96:84:03:b4:90:c9:3e:69:2a:
                    95:7f:cc:fe:89:94:f5:7d:eb:39:9f:6f:d2:f4:71:
                    b8:c8:85:de:67:41:7f:f4:02:ef:f6:aa:fb:2e:86:
                    a0:f9:54:19:11:9c:24:d5:6c:a6:12:10:04:ab:61:
                    cd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:25:C7:FA:16:C2:3F:18:66:84:65:CC:F9:0C:55:BE:1A:E4:1C:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e91be0ea-2840-3c92-a2d0-dc11f4dd593e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.232.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:dd:d7:0b:5f:51:56:23:13:35:e7:40:5a:5e:b8:90:c6:bb:
         8b:61:c6:48:19:55:4a:f2:88:0f:f5:a0:5b:a2:03:0d:91:20:
         f9:70:7a:c9:cf:22:9d:59:44:23:90:db:1e:32:3d:44:e6:51:
         37:b9:cb:64:40:fb:53:d8:51:86:41:14:33:95:95:a5:54:d6:
         4c:8e:50:04:71:f6:40:3b:de:52:39:ad:94:c4:f8:d7:43:34:
         9a:d8:7c:50:80:78:2a:1a:8f:da:4c:3c:c3:60:39:96:a7:f6:
         ae:d4:97:36:b4:e0:bb:f0:58:39:40:60:22:26:65:4b:2e:77:
         2e:39:9c:25:bd:1c:4f:f4:20:07:6a:5c:40:39:a0:66:b4:56:
         dc:f4:34:48:e2:25:aa:0b:89:c1:a6:16:d4:a8:a8:7b:9d:f5:
         d4:74:45:48:ae:37:8b:8e:da:17:e1:0b:4c:20:a3:99:c5:f0:
         ca:83:fe:9b:75:6e:99:e2:0a:07:c0:74:44:11:42:12:7a:59:
         8b:9b:64:a6:42:79:97:b7:42:cf:c6:a9:88:ad:99:03:f2:f7:
         9e:a4:f1:09:84:b9:9a:ec:4e:d1:b3:83:9e:5c:4c:b3:49:b8:
         5e:88:db:e2:bf:6c:2f:b7:1b:e3:d4:cf:c9:b2:3d:40:c6:8a:
         ff:2e:7b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:10:57 2025 by rpki-client