Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/16f19349-1a25-313d-904d-1962c935bbb2.roa
File:                     16f19349-1a25-313d-904d-1962c935bbb2.roa (raw, json)
Hash identifier:          hOZEiOm77ZNgXpZmOL3G3ys23UjVf3o/gTcJtJ3UhXc=
Subject key identifier:   69:EB:9F:A8:1B:EF:9D:5B:ED:AB:3E:30:CA:8F:1F:C3:82:AD:08:6F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849EA8528DD92B9BB6C4C757100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/16f19349-1a25-313d-904d-1962c935bbb2.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     701
IP address blocks:        74.111.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:28:dd:92:b9:bb:6c:4c:75:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=3756c689-960b-4077-b0aa-a7d4ce41cb16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:49:8f:b2:cc:0c:00:1f:1d:fa:a3:30:72:11:
                    03:37:d1:79:bd:0f:02:53:fe:9b:c7:7e:57:98:37:
                    d6:87:9d:d6:51:57:c2:2f:ee:be:6f:ea:84:2f:76:
                    28:4f:1e:14:60:dd:c6:d4:12:c9:f0:39:28:20:ce:
                    9b:5d:0b:ce:84:b3:22:84:70:6d:f2:67:24:29:28:
                    22:f1:62:c8:12:05:41:be:c4:8e:44:ce:2b:e4:de:
                    61:73:ed:80:42:db:39:af:95:fb:2f:b5:55:73:71:
                    b5:c2:76:94:6f:c6:69:f1:b3:f8:ac:ed:be:8d:43:
                    9b:42:0e:ca:6b:77:5f:04:05:42:8a:78:70:2f:95:
                    4c:a2:25:be:c0:46:e2:dd:ed:7c:99:9e:ed:10:b8:
                    27:e7:01:ab:70:9f:36:5c:ce:1d:34:54:86:28:94:
                    03:05:71:0e:76:89:ff:b2:99:2e:56:13:0f:c7:c6:
                    fd:f9:75:8e:73:55:d9:89:f4:b6:9a:c0:c0:5b:ee:
                    5b:d3:68:b3:07:2e:0d:e1:62:3f:bb:a0:77:e5:4b:
                    99:71:8a:e7:df:31:d3:1e:e1:4d:c0:b5:cc:bd:8f:
                    8e:53:be:0a:18:62:0c:13:b8:fd:e9:bf:65:3f:95:
                    8a:ba:f4:4e:2a:f5:94:b1:10:23:91:f2:39:61:4b:
                    ba:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:EB:9F:A8:1B:EF:9D:5B:ED:AB:3E:30:CA:8F:1F:C3:82:AD:08:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/16f19349-1a25-313d-904d-1962c935bbb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.111.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:39:f5:08:a6:bc:04:26:87:51:a3:8d:a5:b7:16:f3:7b:46:
         66:cd:c4:39:e5:16:ac:ab:79:37:32:a4:1d:7c:cb:b1:51:ff:
         78:9b:a2:fe:fe:0f:8b:e1:8c:94:cd:8e:86:bc:ec:ca:a0:86:
         99:f2:7d:61:85:d2:28:34:35:67:16:06:83:98:ab:c2:c1:d6:
         28:df:cf:b3:02:2b:82:40:7b:20:2e:e4:17:a7:95:58:5a:a1:
         6a:5c:09:96:b0:e1:c8:48:f5:6f:44:07:3b:70:d8:de:64:d6:
         c2:a3:38:eb:fd:a2:03:c4:2e:b1:64:cf:20:3c:76:6e:83:d1:
         d2:7d:2d:d4:e6:90:9c:99:58:66:82:e2:7b:ce:27:02:b8:2e:
         93:f9:a6:33:46:aa:4d:33:16:92:04:e4:12:69:f7:87:f7:1c:
         84:f6:9a:56:60:6a:0e:ce:6c:05:8e:89:47:c6:18:52:aa:82:
         56:38:df:41:fb:8d:2f:12:98:f7:59:f4:4b:f4:6f:4f:28:d9:
         1a:d4:4c:50:b4:62:2b:d4:a6:d3:e6:5a:e6:25:03:d3:d1:71:
         09:56:b9:32:7b:9b:94:5d:7f:f4:4c:82:02:6e:ff:a1:b3:c7:
         d8:72:5b:f6:14:75:62:9a:5c:c5:2d:f7:28:68:c8:1d:a0:f8:
         4e:d5:1c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:36:35 2025 by rpki-client