Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdbbefe7-189c-343e-9b55-6d08f354cb45.roa
File:                     fdbbefe7-189c-343e-9b55-6d08f354cb45.roa (raw, json)
Hash identifier:          Pt1s7tydl17MSuYG4CNemMEOgNDRaJgh0cigTo83SUs=
Subject key identifier:   84:DD:96:45:59:57:91:4C:E9:73:EA:63:C9:36:66:5A:36:9E:F1:4A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AA6F638B4CFB34479F4369700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdbbefe7-189c-343e-9b55-6d08f354cb45.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        174.229.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:38:b4:cf:b3:44:79:f4:36:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=4ed6b7d8-872a-4cfc-96a0-e99339fc91b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d1:18:0b:68:13:9f:8b:18:87:60:9a:e7:95:
                    6f:2e:6f:0a:b3:7f:0f:b3:81:5f:70:36:b9:5d:56:
                    8f:80:9b:59:bb:ae:ce:79:ef:ad:e1:3f:6f:72:ab:
                    1d:2e:61:6f:d5:8e:42:96:93:8d:be:86:94:fe:e5:
                    9f:57:9d:f6:68:91:68:38:d1:b1:e8:31:6a:3d:78:
                    8e:60:95:49:fe:76:f4:d6:cb:69:8a:02:3c:f0:35:
                    04:e8:e8:66:35:45:43:39:88:95:93:6f:15:d0:b0:
                    8f:3a:b0:f7:87:3e:97:fe:05:86:33:ab:b2:05:2c:
                    aa:5b:e3:65:a9:7b:4c:0e:29:1b:ee:71:13:bf:36:
                    3b:97:c4:97:bc:af:05:43:df:22:0f:4e:fc:b3:1b:
                    71:9c:d0:8b:94:47:ac:2d:b8:6c:df:15:44:5d:8a:
                    fe:13:e8:d3:f9:b0:a0:9d:84:eb:ab:00:47:38:4e:
                    82:62:cc:e8:16:9d:bd:a9:4b:57:86:cc:6b:7d:4d:
                    38:0a:9c:5d:4f:49:30:65:79:59:9c:12:20:0a:d7:
                    78:a7:85:21:5e:3d:8a:d2:79:1d:3c:35:1e:ef:0b:
                    6c:d8:eb:f3:36:4b:f0:7d:0a:00:c0:f7:6b:b9:24:
                    0e:f5:d8:10:b9:8b:cb:fd:82:7e:ec:48:b7:13:1a:
                    a4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:DD:96:45:59:57:91:4C:E9:73:EA:63:C9:36:66:5A:36:9E:F1:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdbbefe7-189c-343e-9b55-6d08f354cb45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.229.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:8a:7f:6f:86:8b:8f:c6:d2:29:f2:75:22:f1:59:3d:99:87:
         a9:c1:38:83:c2:43:4d:ce:66:b9:71:8a:bd:a9:c6:2e:11:26:
         89:d5:c2:5b:1d:e9:fa:f5:39:e1:5c:5d:cc:84:86:de:41:3d:
         a8:a7:23:14:69:6a:11:1e:f9:32:1d:5a:45:57:b5:bd:f1:b5:
         b7:d8:19:e0:57:b2:0b:99:64:40:0d:03:13:02:8f:b4:bc:39:
         e9:ac:e8:3a:a8:ce:9a:44:f4:b7:05:ee:6c:f0:19:aa:b3:2d:
         7d:4d:01:fa:a8:6c:7d:6f:e0:ac:5a:c8:0d:aa:a8:10:a4:bb:
         2b:02:8b:fa:87:58:79:27:33:de:66:81:5a:3f:32:99:7a:d4:
         43:e4:67:8a:f6:e9:3e:b3:60:bf:9f:26:08:17:56:44:a7:b6:
         82:6e:d2:10:b4:5d:65:02:cb:06:ab:0f:bf:fe:fd:55:53:44:
         95:c8:b1:46:5c:55:d3:86:15:a4:be:61:78:2a:19:7b:2c:37:
         90:9e:fb:19:b1:a6:fc:ee:a8:ce:74:c5:48:bd:d6:74:7e:97:
         7d:b5:7c:3e:9c:ef:5d:aa:0b:47:09:2f:b8:c7:7a:df:5e:43:
         62:0a:81:e8:72:a1:f1:b0:fb:1e:13:ad:5d:ce:c2:e7:0c:c4:
         f6:28:ce:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:33:52 2025 by rpki-client