Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1491b9bb-e2f0-3848-93c2-f72f56f16044.roa
File:                     1491b9bb-e2f0-3848-93c2-f72f56f16044.roa (raw, json)
Hash identifier:          FJEMkQHWpeVu9I5HwToEBWVzwjzqbOudALbxFKQ+KwM=
Subject key identifier:   20:B4:0E:59:FF:2A:D2:09:FE:72:EE:F5:46:31:D9:8B:12:03:F1:88
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849A089E905A1FAFEA69F1FB200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1491b9bb-e2f0-3848-93c2-f72f56f16044.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.192.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:e9:05:a1:fa:fe:a6:9f:1f:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=64360528-53aa-4767-bbf2-3aec2103c308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:58:8b:c8:95:60:0f:b0:f8:b5:0f:06:13:65:
                    9f:1d:e6:d0:d2:72:10:4c:81:b5:06:a4:ae:aa:c7:
                    92:3f:15:d7:6d:d0:5f:8a:e1:2a:9d:02:73:0f:1f:
                    6d:b9:72:38:37:f3:fe:06:fc:af:6b:4b:a7:0f:af:
                    5b:04:aa:56:ae:6e:21:da:ef:93:8e:fc:3c:0d:52:
                    df:48:df:aa:16:7f:28:c1:ed:3d:11:52:d3:81:a9:
                    d4:25:53:08:57:3f:57:f1:29:5f:2c:bd:2e:2e:3f:
                    56:55:db:77:b9:8e:0e:4a:30:93:d6:28:0b:16:7a:
                    db:b3:bf:9c:1f:92:38:80:2b:ad:52:11:07:21:cc:
                    e1:11:5b:67:ca:fd:63:f0:37:9f:10:df:95:d0:13:
                    16:0c:ff:f7:83:59:61:cb:cb:ae:e1:79:fa:44:40:
                    12:f4:60:7b:64:1c:53:3c:61:1a:1b:29:bf:b3:9c:
                    7d:0f:23:33:30:cd:9b:46:bf:57:9b:fc:b9:ad:7d:
                    c2:4c:d7:37:99:bf:e7:b7:ad:97:47:86:39:aa:57:
                    b4:c0:73:02:d6:3a:8f:8c:26:00:cd:ec:a7:1f:96:
                    82:28:5d:bb:c1:29:54:7b:1d:9c:2f:ce:29:5d:6d:
                    02:30:78:98:b0:f3:c2:9e:46:7c:e1:fd:a8:37:e6:
                    6f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B4:0E:59:FF:2A:D2:09:FE:72:EE:F5:46:31:D9:8B:12:03:F1:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1491b9bb-e2f0-3848-93c2-f72f56f16044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.192.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:fa:0c:8f:6a:94:2e:d1:04:b0:4e:59:f0:73:02:51:92:bb:
         9b:57:78:7b:fd:f3:b2:78:b8:75:d6:7e:54:3f:7c:6f:19:56:
         95:7a:06:57:df:58:b8:90:ce:56:75:ce:da:4c:c9:26:91:73:
         dd:28:1b:0e:b2:40:e1:4a:73:5c:2b:6d:62:d5:ae:bd:1c:b5:
         3a:bb:85:88:33:ed:d6:51:4b:a2:6b:09:51:ee:73:39:34:a8:
         4f:98:c6:d3:ed:16:66:b3:32:03:08:49:39:0f:17:d8:ba:88:
         1e:c0:f8:52:cb:d8:32:e6:e4:36:8b:3c:28:23:e5:a3:f9:12:
         bf:0d:9c:46:4d:15:51:fd:24:86:b2:11:11:45:02:5e:3a:10:
         23:af:f2:53:29:c8:d0:0d:1c:de:a2:a3:62:61:e7:3a:ad:f9:
         ad:df:7a:d5:5c:97:be:51:82:0c:75:97:6a:e9:ca:10:65:33:
         85:0f:21:2d:49:7c:ff:82:e1:15:75:14:32:56:cb:fe:e2:d6:
         ab:c0:bd:96:c3:2a:41:b7:27:3d:3a:10:65:39:46:77:26:54:
         c8:2b:f3:d5:39:3f:ce:4e:59:3c:f4:99:5c:fc:e7:76:37:42:
         31:6a:9d:62:20:fb:0d:7c:55:f7:25:98:3f:26:c5:cf:41:6f:
         b4:26:40:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:13:11 2025 by rpki-client