Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa25c6a8-08b2-3685-81d5-0fcd71323324.roa
File:                     fa25c6a8-08b2-3685-81d5-0fcd71323324.roa (raw, json)
Hash identifier:          aEYQ5saEKMpp89kKeeqvg00i7n5tOUysgDGPXrou6CM=
Subject key identifier:   6F:AA:B2:29:7B:9F:74:9A:17:D8:5A:99:6D:94:01:D3:AB:6B:F6:73
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7FE0A85E6049404256DBB5C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa25c6a8-08b2-3685-81d5-0fcd71323324.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        174.224.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:a8:5e:60:49:40:42:56:db:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=b58ef422-b97b-4ce5-9f0f-38b86cada98e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:40:fa:b1:51:4b:00:69:0c:b6:21:24:48:93:
                    c2:26:a6:e9:ed:57:81:8b:2a:c4:0c:b5:e3:3b:e9:
                    39:3b:be:85:7f:f6:c4:ac:2c:dc:86:38:1a:6f:e3:
                    18:ee:f6:62:1a:c3:23:eb:b6:30:2d:4b:80:9d:88:
                    2f:05:6a:cf:06:8b:51:8c:48:01:80:cc:cb:46:ac:
                    f4:94:c8:9b:66:7b:75:30:49:b6:e6:e8:32:48:d8:
                    36:1e:8d:f4:e1:9f:b0:56:6c:86:e5:a5:7a:41:8c:
                    65:94:d5:13:fc:5e:e9:34:bf:e8:bb:2a:53:d8:93:
                    74:ec:74:24:77:89:8f:85:88:a6:98:fb:09:87:d4:
                    65:34:2d:ac:93:8d:76:13:f7:56:8d:b5:24:eb:8d:
                    a7:a4:ce:e1:1d:6f:30:fe:92:a2:85:42:dc:bd:02:
                    ac:47:81:c2:84:99:7c:dc:fe:c4:7c:c5:d7:9b:e9:
                    9e:1e:41:bf:5a:10:57:eb:bb:24:15:a8:83:57:a8:
                    08:38:e5:74:9d:98:93:d2:05:d0:ef:ac:0e:ec:c3:
                    ca:57:22:5a:ef:49:4e:c9:dd:02:0a:dc:58:66:f0:
                    2b:96:31:1f:18:62:77:63:ea:8a:04:70:88:0e:26:
                    f5:0c:b1:b7:41:35:57:9c:c3:ee:1b:e1:ae:84:95:
                    df:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AA:B2:29:7B:9F:74:9A:17:D8:5A:99:6D:94:01:D3:AB:6B:F6:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa25c6a8-08b2-3685-81d5-0fcd71323324.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.224.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:7c:2c:a1:72:59:6e:d4:1c:2d:80:ce:35:47:79:98:43:36:
         89:33:ae:88:83:eb:38:4c:b5:24:20:75:2b:e9:23:2e:4e:df:
         0e:f1:9f:55:98:7c:6f:8f:4e:7a:12:60:ff:17:43:46:ee:cd:
         18:99:c0:99:b8:40:95:6b:bb:99:10:0c:2c:07:26:26:c7:a0:
         17:b3:f3:88:8b:ef:fe:79:d7:f6:0a:3c:94:ea:ab:87:63:6b:
         f1:0d:ec:3d:47:71:5a:e7:60:9d:63:44:52:4e:99:97:cc:61:
         30:a5:43:b6:90:f7:2e:d5:42:f2:e5:f9:c2:3e:0b:37:e9:a7:
         e4:a2:fc:40:79:f2:23:d1:f8:f6:e9:44:69:de:63:98:f7:07:
         a3:8a:0b:f7:da:7d:88:70:60:3d:d9:8c:88:85:f4:46:4c:b0:
         09:b0:e4:4c:d6:51:00:e9:11:fc:23:1d:92:42:a0:60:fb:32:
         6d:01:6e:b2:f6:14:c8:26:bf:60:b8:d1:0d:fb:b5:6f:9f:a3:
         29:48:d0:fa:c7:91:a2:2b:38:aa:20:24:2b:b0:06:04:7d:54:
         05:b3:fc:40:6e:c5:cc:0e:a1:1a:96:9a:77:b1:9c:a6:4f:e1:
         4a:fa:33:3a:9f:91:22:ce:b3:27:d1:46:24:85:e0:6d:f5:44:
         2e:65:40:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:43:36 2025 by rpki-client