Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb20ce80-2683-3f42-83b8-883beb4f12d8.roa
File:                     fb20ce80-2683-3f42-83b8-883beb4f12d8.roa (raw, json)
Hash identifier:          3NGmArk1N3utUBZl6uJZW/N3tzSHkVzTEEBrkD4iV00=
Subject key identifier:   13:01:0F:57:7D:5E:01:02:1C:0F:BD:A9:AD:19:AC:59:72:E6:F1:16
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7FE0ABCD25166D31B5D80300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb20ce80-2683-3f42-83b8-883beb4f12d8.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        174.194.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:ab:cd:25:16:6d:31:b5:d8:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=780cb7e4-b064-4a93-a4d0-d03a4fd9fdbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:76:c4:c4:b5:7a:db:96:a9:8c:ad:08:31:c6:
                    4f:25:11:14:f9:a8:8c:66:da:9b:49:fe:d2:9d:59:
                    46:db:64:e4:cd:61:5a:1b:cf:64:1f:6d:32:c8:3c:
                    a7:06:35:bc:b0:51:e3:7d:67:52:40:5b:bb:01:65:
                    34:63:f4:8a:6c:ef:ca:4e:93:38:b1:fd:d1:a8:2b:
                    3f:a3:f0:30:2f:16:11:3f:32:e5:e2:ab:97:18:48:
                    ab:8f:53:8e:05:40:ea:a8:7d:67:61:e3:1a:33:3c:
                    e6:db:27:50:1b:81:d4:46:d1:8a:dd:67:7a:0d:09:
                    63:ff:6f:5f:b6:d5:6f:75:59:b3:a0:d9:91:50:74:
                    bf:e8:c0:ea:d0:72:f1:cb:6e:b7:69:0e:75:7f:27:
                    df:d3:c7:71:75:28:d7:96:9d:ba:c3:d3:ab:b5:7d:
                    04:15:bc:f5:53:d9:11:d0:54:c2:63:7c:70:5a:ae:
                    d4:d5:c9:7c:cd:22:10:81:8f:7e:cf:1f:f3:13:ac:
                    1d:9e:9f:48:98:79:0f:6f:74:e4:33:21:7e:c9:bf:
                    31:2c:9d:57:ec:d7:e4:c3:2b:2e:8c:66:00:d4:04:
                    08:a4:11:04:04:bb:9d:3a:d0:df:00:23:9f:12:b9:
                    75:a0:24:39:34:21:20:64:f6:70:4f:d5:7d:f4:7b:
                    ca:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:01:0F:57:7D:5E:01:02:1C:0F:BD:A9:AD:19:AC:59:72:E6:F1:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb20ce80-2683-3f42-83b8-883beb4f12d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.194.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:33:a5:b3:0b:32:9e:9f:b1:9b:37:8d:a4:4f:82:a5:ed:3b:
         6e:63:25:c5:8c:5a:1c:9f:02:cd:89:51:1e:28:63:4e:23:d3:
         52:88:46:10:22:6b:e9:1d:08:56:6f:87:b9:0f:58:4a:b5:b9:
         76:81:ba:ca:d7:85:a0:8f:b6:69:1f:4b:d3:ad:9a:b6:d3:f3:
         c0:97:f7:e1:3e:e6:58:e8:37:1d:38:47:d8:21:97:b9:d9:9d:
         e0:cd:a2:64:d9:71:f8:b0:bf:4c:bd:bb:dc:9f:6b:dd:93:90:
         89:2d:af:12:86:bd:69:80:6a:95:ac:67:63:92:d9:56:1f:3b:
         e7:21:66:b3:cb:d3:0a:85:f0:8b:47:30:5c:7f:76:07:fb:c1:
         4c:64:6b:72:20:8d:d4:77:f1:3b:95:8c:9b:45:06:a3:c8:e1:
         2b:33:16:d6:d4:22:03:17:f1:fb:50:99:c0:52:a5:e0:8e:95:
         19:be:bc:b7:87:15:bb:66:2e:c1:fe:d3:ec:48:bf:0e:f9:c6:
         1b:ad:51:af:e0:7c:e5:28:7f:3e:fe:39:7c:4f:d6:51:5a:33:
         b3:b9:f2:51:01:f1:f1:93:0c:8e:e9:ba:53:30:1c:98:22:f6:
         c7:4d:76:c7:06:72:77:47:57:f5:3f:17:fc:1c:30:ed:bd:d3:
         6f:ef:11:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:39:37 2025 by rpki-client