Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a6c8cdc-85a8-3acf-98c5-c9b9cd39a796.roa
File:                     0a6c8cdc-85a8-3acf-98c5-c9b9cd39a796.roa (raw, json)
Hash identifier:          4g2VRFPvq1UmPqdQMDDPzU2DjoB3AKCkvG3F+aRz75Q=
Subject key identifier:   53:98:D7:B7:88:7A:BA:8B:81:51:F1:E8:AE:8C:28:88:AE:93:2E:28
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849CE9A74A92104FC6D78DD1500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a6c8cdc-85a8-3acf-98c5-c9b9cd39a796.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     6167
IP address blocks:        174.43.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:74:a9:21:04:fc:6d:78:dd:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=9024b5c0-770a-40e1-9ef6-db0002f5f8d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:80:7e:00:f2:8a:75:bf:b4:f1:f9:c1:fd:58:
                    ee:47:74:bc:6e:d8:59:94:a2:1e:53:93:f7:46:9f:
                    f0:6c:b3:d0:72:93:af:74:61:60:e7:0d:fc:0c:e1:
                    e1:3b:61:87:5b:58:18:91:b4:df:d6:0d:6e:ca:92:
                    9d:c2:89:90:5a:97:f1:08:05:3d:ad:15:aa:5e:b5:
                    f1:dc:41:4c:5b:16:1e:cd:b9:76:c1:6d:42:4f:c3:
                    22:20:f6:63:6c:36:99:d4:b3:56:bf:17:9b:c3:bb:
                    dd:05:f5:22:8f:97:06:15:72:81:65:ea:f6:d8:92:
                    af:fa:86:95:74:fd:0f:3a:2d:26:7a:f8:32:9c:37:
                    b2:b7:2e:f5:d8:53:f0:92:b6:f3:4f:41:69:a6:fc:
                    28:e4:16:2a:da:2e:e0:65:65:99:ba:9a:22:46:33:
                    a3:c5:8f:b1:c0:50:13:1f:7a:ab:01:65:77:5a:df:
                    d2:91:35:e8:3c:3c:20:0a:ff:01:c7:9c:e3:79:07:
                    42:65:6a:1c:f8:43:14:7e:4b:78:a6:0d:07:0c:35:
                    b5:f0:16:cd:38:b8:7c:b5:54:f6:cb:02:64:fa:54:
                    ee:5f:49:60:5b:ee:5b:62:c6:1a:04:1a:83:ef:62:
                    68:c5:a1:38:00:6d:a3:45:4d:09:e5:4a:bc:c6:a6:
                    38:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:98:D7:B7:88:7A:BA:8B:81:51:F1:E8:AE:8C:28:88:AE:93:2E:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a6c8cdc-85a8-3acf-98c5-c9b9cd39a796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.43.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:30:08:43:61:ed:0f:b0:b0:98:a5:aa:93:ab:8e:d9:ec:d8:
         26:81:70:7d:1a:92:df:6f:2b:57:55:7e:50:ef:2f:36:45:ab:
         8f:b9:af:43:ec:7a:46:de:d2:f8:69:74:9c:b3:18:71:58:bf:
         df:50:7c:58:fc:4f:72:a0:e5:fd:70:9a:eb:97:79:3f:4c:1b:
         14:d6:90:2c:dd:67:15:70:11:52:d3:f6:d2:4e:5d:9b:f6:71:
         9d:46:69:b6:c1:94:1f:2d:91:bb:dc:95:bd:8c:e4:d3:a8:8e:
         c9:30:b5:fb:d7:0e:7b:80:d4:55:1b:fa:68:94:56:d5:85:ad:
         08:b9:6a:66:7e:a1:73:09:42:b6:02:f2:96:37:c7:36:40:2b:
         6b:9a:72:ef:40:2e:2a:90:51:c9:64:49:15:47:10:7c:77:a9:
         7f:0f:85:d4:88:69:ce:13:43:22:51:1d:f4:0c:48:19:1d:63:
         1c:cc:d2:73:22:09:6d:da:4a:70:6b:9a:2c:02:19:04:6d:4a:
         d0:fa:24:09:79:c4:0e:67:65:dd:1f:a3:46:49:d3:1a:52:13:
         14:94:f7:c8:06:1d:a1:ab:01:35:09:53:53:95:00:29:bb:32:
         6b:ef:35:59:dd:b8:25:83:f3:64:10:5f:d5:ce:41:11:e6:dd:
         59:31:8b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:03:48 2025 by rpki-client