Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4c74608-6dc4-3751-b5d3-83b47ea6bf76.roa
File:                     f4c74608-6dc4-3751-b5d3-83b47ea6bf76.roa (raw, json)
Hash identifier:          Njb3mtDvHRIBNsiPPB08h76j+pyvNKBuW9qS5Zl3vII=
Subject key identifier:   2B:70:36:9B:0B:0B:0B:05:39:43:C0:3C:CD:72:C9:B5:EC:BA:B4:19
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ACB40F684E1EB9987471867C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4c74608-6dc4-3751-b5d3-83b47ea6bf76.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     701
IP address blocks:        74.97.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:f6:84:e1:eb:99:87:47:18:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=302e7491-435f-48d2-aaab-0b18a72c289e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ac:72:b7:3b:ff:76:2d:93:dc:7d:ec:d7:35:
                    dd:1f:4c:1f:bb:e0:31:04:4e:8f:fd:c9:58:f0:b6:
                    8f:40:d4:9b:8b:1c:39:d6:b6:b2:61:a3:36:b6:ad:
                    ee:80:02:41:4b:f0:71:7e:d4:9e:8d:6d:05:22:a7:
                    40:c9:28:42:1b:1d:dc:9e:f7:ac:8e:52:0b:58:6a:
                    01:66:04:e7:3e:78:72:aa:c4:9f:c8:0f:0e:9a:78:
                    d8:1f:3d:1b:02:36:c2:39:98:71:4c:52:e3:33:b0:
                    3f:9e:1a:08:3b:ed:2c:96:51:9e:da:48:d6:bf:a7:
                    82:bd:4e:c9:6f:6e:dd:b1:cb:73:7c:68:bc:9e:e0:
                    b3:cd:2f:b7:e7:5a:8f:21:14:18:1d:e1:55:04:1a:
                    c6:e1:1e:f0:5b:06:2a:57:45:1f:6c:e6:f6:28:3c:
                    4b:bf:48:d6:57:88:00:72:cf:5a:ab:c3:a1:fc:6a:
                    bf:39:f9:ba:91:be:c3:92:8b:02:5a:a9:69:87:e3:
                    5f:16:48:92:be:d2:22:2d:7d:ed:2d:de:65:12:88:
                    17:08:07:0a:e8:55:13:ec:f0:b5:a5:b0:11:a5:30:
                    ee:e8:44:a2:9e:56:bb:36:d6:6b:87:25:03:b5:0c:
                    c3:f0:ac:a9:7d:20:ff:cc:b8:85:cc:2a:ea:42:57:
                    90:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:70:36:9B:0B:0B:0B:05:39:43:C0:3C:CD:72:C9:B5:EC:BA:B4:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4c74608-6dc4-3751-b5d3-83b47ea6bf76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.97.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:a4:39:b9:80:10:32:2d:d2:a6:ea:a6:48:2e:95:7a:4c:ab:
         49:d8:4e:6e:c4:65:2c:b9:cc:7b:1b:ea:1b:9e:88:91:47:da:
         02:5a:99:d2:9e:22:90:d6:0f:3a:d1:99:26:d5:93:54:50:20:
         4b:2d:55:e9:1b:44:26:3e:f6:a4:26:d5:88:a7:d7:11:b6:56:
         49:19:f4:03:75:b7:ff:8a:3b:38:a1:7a:bf:21:6c:77:58:59:
         6d:79:79:ce:d0:7b:6d:35:2d:28:29:fb:ba:cc:36:9a:fc:69:
         a3:95:3e:8e:5b:1a:7c:a7:8f:d6:9b:08:33:c2:ba:57:e4:2c:
         68:80:c7:da:73:1d:d8:6c:f5:2a:5b:bc:80:11:3a:3a:6e:0d:
         ac:a9:c2:f0:2b:c5:db:fe:4b:28:99:c6:a4:98:13:dd:41:72:
         9c:dd:93:eb:18:6c:b3:36:8d:3f:76:6f:eb:ea:2f:f3:3d:d4:
         c0:40:1a:ed:c0:88:5c:8c:6f:5e:73:b3:ff:1f:9d:63:ff:1d:
         2c:e2:f4:c6:a3:93:a2:9e:9b:74:63:fa:66:6c:5c:92:9a:18:
         79:03:a2:53:3c:ee:8c:8f:0e:fe:db:0c:86:e7:f9:26:5c:57:
         0c:c2:1c:41:db:a6:75:bd:9b:4d:33:c6:4f:0b:46:86:91:0d:
         70:5d:5e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:19:00 2025 by rpki-client