Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ac08b63-f199-3eb6-8fb9-97ce2540a182.roa
File:                     0ac08b63-f199-3eb6-8fb9-97ce2540a182.roa (raw, json)
Hash identifier:          ZwduslANrrHvQAA2yKC0zRMNDU1aaHVggsnKgobxZzs=
Subject key identifier:   85:7D:B7:E6:20:22:0F:A7:3A:0B:A8:0E:AA:E4:3F:51:06:B7:E0:8F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849A089EEA1A21907536B807BE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ac08b63-f199-3eb6-8fb9-97ce2540a182.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.213.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:ee:a1:a2:19:07:53:6b:80:7b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=dcc48e3b-e545-49de-b618-5add78bafeb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1a:54:08:5c:d4:7f:64:3a:d5:0c:23:16:68:
                    c1:9a:5a:da:ec:9f:64:35:f7:c0:2e:07:58:bd:f4:
                    b6:f5:08:e7:f1:b7:54:e2:f9:7f:12:65:64:6a:9f:
                    fb:26:e7:34:ec:c2:80:e2:f8:53:98:8a:eb:a4:c7:
                    23:a0:7d:c7:86:70:f5:fc:05:11:49:d7:15:40:63:
                    9e:ab:66:ea:cb:ae:da:77:68:54:a7:14:76:2f:38:
                    10:c5:5b:b9:89:0c:06:10:4c:58:0b:52:58:3b:a1:
                    c9:ab:88:83:5b:a0:fa:2d:84:79:9c:79:7c:98:b9:
                    29:ec:0a:b2:af:4f:78:6f:2f:8b:13:47:05:60:6d:
                    ba:2d:35:e8:fc:8d:b5:a7:6a:fd:6b:54:1c:ed:be:
                    f9:08:cf:93:b5:34:23:48:9d:99:80:8e:a5:6d:48:
                    ac:05:31:95:79:2e:50:0d:6e:22:cc:c7:98:34:00:
                    dc:bd:5d:11:9c:20:02:91:c2:e5:db:16:d2:5c:1a:
                    a9:c1:ed:26:82:4a:2d:95:b1:05:28:2c:27:70:75:
                    ca:87:e8:fd:00:0b:01:47:bf:20:77:01:76:14:13:
                    be:f8:af:19:4b:6e:1c:66:76:ee:a2:3a:39:54:95:
                    8f:93:99:d6:f2:03:cf:5a:18:1b:5a:f8:1e:d1:e4:
                    ed:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7D:B7:E6:20:22:0F:A7:3A:0B:A8:0E:AA:E4:3F:51:06:B7:E0:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ac08b63-f199-3eb6-8fb9-97ce2540a182.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.213.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:ae:f2:22:46:1d:70:22:a2:42:56:30:4f:92:29:f7:2a:e8:
         32:17:5c:c2:2c:53:27:34:e1:d5:2a:66:ac:c0:68:88:68:09:
         48:16:52:5c:48:c5:28:64:35:98:f3:0d:61:90:31:3a:b6:52:
         87:e2:d1:7e:c7:05:00:a1:0c:6e:d8:0f:77:dc:b6:21:6c:fc:
         32:b6:5e:c9:21:c6:bd:9b:38:11:1a:80:45:f7:1e:f4:48:1b:
         6f:ae:86:2b:05:75:14:fa:85:5c:35:55:a6:48:5e:63:d3:eb:
         a3:0b:6d:8f:ce:b0:cd:ef:1b:71:6d:e8:0f:79:b2:d6:a8:e2:
         f8:1a:90:d3:0a:cb:6f:bb:4c:e7:29:c4:4b:bd:90:93:7b:af:
         e9:5c:7c:0f:ee:1d:45:46:b8:b2:8f:22:1e:93:fb:87:9d:1f:
         d4:46:a2:85:4a:0a:ec:69:5a:de:bd:71:98:fc:cc:e6:fb:96:
         58:78:ad:97:2e:6c:65:6c:79:e4:23:ca:02:be:ae:a6:b3:15:
         b8:35:74:1e:e0:5d:31:2d:03:72:92:1c:40:bf:8e:e2:0d:76:
         77:1e:a6:34:83:4b:24:02:b2:72:77:c7:2a:fb:25:58:77:f4:
         d0:d9:ad:e9:fb:e9:47:c8:73:b6:b0:3f:71:5d:60:57:e6:ec:
         a0:37:6e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:54:22 2025 by rpki-client