Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03390be8-0131-31ea-9217-956bda6da81e.roa
File:                     03390be8-0131-31ea-9217-956bda6da81e.roa (raw, json)
Hash identifier:          0c8fUyKapZvbxgByj6zxpg3i40Q+I8lhV6Qno1nW/l4=
Subject key identifier:   FE:E0:C9:6B:A6:72:D3:2D:02:52:3F:69:AC:76:5B:70:BB:A1:DF:56
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849A089D9198A755A5912F71288
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03390be8-0131-31ea-9217-956bda6da81e.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.201.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:d9:19:8a:75:5a:59:12:f7:12:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=059b106d-1022-4330-ba53-774be16dd7c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:48:a6:14:34:21:ae:3c:46:e6:56:91:c1:60:
                    b7:8b:87:c6:4b:e5:d5:ef:05:75:9f:00:50:06:70:
                    92:bc:f1:3a:b9:d5:7b:bb:8e:b0:ab:c8:cb:89:07:
                    c8:68:3a:cb:56:41:31:3b:d4:82:83:f1:8e:1b:93:
                    aa:8e:5e:34:b4:82:31:71:7e:34:76:6b:01:2e:b2:
                    8e:75:03:93:f2:9e:5f:01:ea:eb:78:a4:a1:a4:8b:
                    d1:ef:89:97:4f:05:3f:c2:db:62:ac:b4:45:b7:f7:
                    2b:8a:8b:2e:df:61:92:bd:a2:de:39:b7:09:40:e3:
                    8e:a5:e7:cc:47:f2:1a:24:89:73:33:a2:89:fb:25:
                    9c:63:90:95:03:5a:57:6c:53:5c:b1:44:6b:20:12:
                    7f:50:f7:48:85:ef:c5:1a:7b:6e:a4:27:d5:26:bb:
                    de:18:24:ee:ac:93:d6:37:27:ba:3c:e2:df:0a:40:
                    48:79:f1:5c:8e:93:fd:54:ba:9c:f3:d0:2b:71:07:
                    69:d7:84:39:cf:ff:b4:2a:e8:a6:8e:c1:67:fa:f4:
                    92:97:d1:23:be:cd:4b:e4:d6:50:b2:b2:d3:78:6a:
                    35:80:33:a8:f6:28:14:a9:6a:6c:bb:72:6a:76:1d:
                    18:1c:2e:90:f9:e3:e0:ea:2b:69:2a:12:09:8a:a3:
                    6d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E0:C9:6B:A6:72:D3:2D:02:52:3F:69:AC:76:5B:70:BB:A1:DF:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03390be8-0131-31ea-9217-956bda6da81e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.201.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:70:b1:bc:b8:a8:70:80:cf:90:6c:c9:33:c7:ea:f7:a2:a2:
         a2:e3:2a:94:2f:85:16:e0:b7:20:e1:a7:98:13:7f:cf:d0:c6:
         a8:41:b6:6b:3b:45:28:da:45:13:79:52:36:a9:f0:6a:d5:6f:
         1b:39:fa:50:24:66:0e:c1:93:d7:38:c2:34:68:bc:ad:16:6d:
         13:7f:f4:46:57:85:af:6a:77:34:9e:ad:3f:eb:58:3c:ee:a7:
         81:43:b4:e0:2b:79:47:b6:83:87:94:26:cd:a6:fd:4b:48:40:
         ee:b2:b6:26:6e:1a:01:c6:52:08:d1:03:01:18:0f:81:96:73:
         3e:dc:ef:93:6e:d8:73:d6:54:7f:38:79:f6:4b:90:b1:79:18:
         c9:f7:cb:61:ad:dd:aa:c2:15:6d:d1:71:9b:51:d0:d2:21:ce:
         40:fb:0b:c0:7c:16:62:53:78:fe:18:f7:4b:1b:a3:db:3a:77:
         48:d1:83:57:56:8f:be:98:fa:cb:42:7a:5c:09:cf:e7:2c:ff:
         c0:bf:81:e0:b2:e7:8d:df:ca:e2:9e:5f:a5:1b:fa:8c:35:0a:
         f7:6a:a9:23:65:96:1f:dd:14:3a:d3:47:ab:42:5f:5a:19:ec:
         08:0d:81:f2:67:5b:8d:98:5c:88:0d:44:0a:18:19:12:1a:a1:
         9d:6e:40:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:30:08 2025 by rpki-client