Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f48658f9-3ed4-3f3f-8593-d3adabdaa6fb.roa
File:                     f48658f9-3ed4-3f3f-8593-d3adabdaa6fb.roa (raw, json)
Hash identifier:          ssZXn5y2F+nZJGeeglEGUWz7iyisAeccd5tkEcGgS/U=
Subject key identifier:   E0:C6:38:DD:50:71:BC:D5:F6:AA:D9:84:8D:45:43:9A:5C:84:65:B6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AA6F63CEED5BE6A76C97B4B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f48658f9-3ed4-3f3f-8593-d3adabdaa6fb.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        174.236.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:3c:ee:d5:be:6a:76:c9:7b:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=6a68375f-8144-4ede-91d8-82fac81adbef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:57:4b:f6:38:97:62:55:66:53:e7:37:2c:27:
                    1c:89:79:71:86:f2:86:f9:b0:e4:93:d6:16:ef:66:
                    ef:a6:c5:14:10:b5:63:33:47:ce:36:17:38:74:58:
                    fa:98:55:af:dc:fc:cf:54:c1:28:2e:5b:db:a2:3c:
                    28:a4:ef:5d:a7:6c:8c:d8:ea:40:f7:75:d2:fc:ec:
                    92:d1:0a:aa:d8:c5:9e:43:e4:a3:2e:60:23:cf:b2:
                    07:4f:23:e2:46:28:25:16:48:f9:e7:2f:eb:18:ee:
                    be:ef:f0:2c:f0:95:cb:9f:70:b5:07:f1:89:2a:61:
                    10:e4:ab:6b:f4:42:07:31:28:04:c2:55:9d:8a:d4:
                    b2:ac:cd:06:29:88:ac:d8:a4:d4:a0:f8:f5:a2:23:
                    0a:f5:3c:af:5f:f1:df:59:82:a8:7c:fe:6b:62:94:
                    87:49:a7:00:a2:8a:6d:24:ce:7e:fb:29:1f:5e:da:
                    6e:03:e1:6e:f6:1e:f0:b4:99:39:e5:81:6b:b0:2c:
                    e3:28:f6:83:25:8f:7a:14:3d:86:83:10:9a:49:b6:
                    56:8a:e9:98:f3:25:94:93:b3:7b:d1:79:65:15:2f:
                    db:5d:54:c9:07:71:b8:95:db:63:28:dd:22:8a:64:
                    64:1c:04:d2:9c:18:56:81:24:ac:46:9b:98:8f:59:
                    94:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C6:38:DD:50:71:BC:D5:F6:AA:D9:84:8D:45:43:9A:5C:84:65:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f48658f9-3ed4-3f3f-8593-d3adabdaa6fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.236.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:2d:db:5f:41:36:59:8e:ae:6e:b9:5f:df:a1:a2:e9:c8:de:
         f0:ff:06:85:b7:37:c6:87:bb:75:a7:f8:ad:6e:af:c0:e0:a7:
         62:b4:ee:55:7f:25:9d:d2:1d:a2:d5:8f:04:70:e7:4d:81:87:
         89:16:13:b0:d3:f1:26:27:fa:1c:e7:3f:6e:43:2e:d9:7d:d4:
         92:13:e9:5a:d0:7f:bc:49:b8:42:e0:41:a8:b4:bf:90:ca:74:
         ee:d1:f5:90:c8:60:01:3a:79:79:93:b2:2d:c1:ea:ae:c3:ba:
         b7:05:51:de:b9:61:08:5e:bc:06:91:27:fe:e9:55:a5:1b:89:
         7c:a1:50:b4:ef:a6:73:d4:d2:83:d4:e0:b2:37:d2:19:ab:c7:
         c0:43:4d:66:0c:b3:dc:d3:4c:7e:49:19:6d:a4:01:16:50:eb:
         3b:12:61:e1:da:bc:b7:61:08:25:68:8b:65:4e:2a:7f:c8:4a:
         78:ce:0a:e5:17:71:40:07:8d:47:e6:54:69:79:b3:d8:a6:7c:
         fb:4c:35:99:89:b1:d3:70:f2:f5:46:66:7c:b7:8b:33:d2:e8:
         74:89:8b:72:b9:c3:cc:c3:4d:f5:4e:61:eb:e7:79:3e:54:01:
         a0:46:c6:cc:9d:ba:9e:24:43:e6:4d:03:fe:22:4e:6f:7c:30:
         a8:45:4e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:23:30 2025 by rpki-client