Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34159536-2508-3a29-8321-9f2201a20b24.roa
File:                     34159536-2508-3a29-8321-9f2201a20b24.roa (raw, json)
Hash identifier:          0cTgrtyqDet72c1V88ADEyuyXv1YHDCdGMR3sKaQDR8=
Subject key identifier:   56:39:B4:68:35:D8:5E:FD:ED:7F:12:CD:B3:8B:D3:A3:C6:FC:56:56
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849A089EA98F4E19AAC31AEA880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34159536-2508-3a29-8321-9f2201a20b24.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.195.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:ea:98:f4:e1:9a:ac:31:ae:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=9712194b-c486-4bfe-a41d-e02319af029e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:37:5a:b1:1c:2a:00:69:8a:dc:d1:b8:4b:d7:
                    f2:ac:20:01:72:9f:6a:6b:70:23:03:18:7e:b0:1f:
                    bf:66:9e:57:ce:f0:f9:73:78:40:95:9d:92:c8:be:
                    f4:02:2a:34:89:bd:eb:9b:9a:55:12:0b:da:c2:08:
                    6a:97:42:55:1f:a2:f1:7e:86:61:77:26:de:06:0e:
                    a6:96:ef:c2:ae:4e:8e:cd:62:c7:b3:13:d2:4c:07:
                    1a:d4:1f:05:68:b4:cf:eb:e2:85:ab:62:4e:c1:f1:
                    de:4f:f9:f7:fe:ea:73:83:0e:fd:59:55:3d:5f:d7:
                    8b:ab:bd:87:4d:14:e0:cc:7b:f3:00:e9:4e:37:51:
                    c8:d2:5d:99:b1:39:d7:17:a7:25:32:b8:fd:2f:83:
                    fa:e5:5a:5d:ae:7f:6f:01:f4:fc:85:0f:ad:d6:ad:
                    21:fd:df:25:d5:bf:7c:27:6f:52:ab:e3:df:d0:49:
                    c6:42:6e:9d:9f:98:e7:36:15:ff:af:0a:da:fd:c7:
                    de:63:84:0f:7c:73:75:40:68:e7:2a:0d:fd:7c:4e:
                    00:e1:41:de:4f:ec:0f:f5:0a:fe:79:31:24:ed:e9:
                    bc:7c:d3:31:bd:cc:f5:25:fd:97:17:c0:8f:7d:73:
                    ed:01:39:61:04:4a:32:20:57:68:a2:5c:9c:72:9f:
                    00:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:39:B4:68:35:D8:5E:FD:ED:7F:12:CD:B3:8B:D3:A3:C6:FC:56:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34159536-2508-3a29-8321-9f2201a20b24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.195.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:03:77:f5:0a:6f:8a:b3:a2:96:4d:08:7f:15:81:dd:1a:24:
         2e:eb:83:fa:c3:a8:88:3e:7b:83:02:a1:b5:91:ed:ee:53:48:
         7f:09:e1:59:67:b8:ef:25:0a:1e:56:e1:0d:76:61:76:19:25:
         37:7d:09:81:27:43:dd:52:d3:78:5d:4f:45:35:b5:62:36:33:
         75:73:aa:5e:08:43:92:ce:f7:19:f3:12:21:67:f8:a7:db:40:
         86:b9:e6:38:3c:98:94:a7:98:f8:a8:ed:71:e9:45:87:cd:50:
         99:f0:c6:03:3b:f7:a9:88:12:a4:9e:22:56:62:70:31:10:ce:
         4e:84:e7:b3:6e:49:b0:b1:5b:8f:d1:5a:b0:1a:c5:93:7e:87:
         94:a6:42:fa:55:82:39:28:7c:1d:dc:04:d2:4e:41:ca:04:fe:
         24:35:26:65:bb:4b:04:43:b1:6b:b8:59:3d:b1:5a:22:d9:d5:
         e1:3f:5a:8d:8a:60:eb:e6:52:a2:3b:db:88:33:70:96:e6:42:
         e3:97:c2:53:90:df:09:9c:bc:6f:b8:04:4b:34:e0:f9:86:9e:
         63:79:c0:80:ed:b1:af:04:4e:f7:1b:ef:b3:60:a4:43:7b:94:
         65:5f:37:f9:18:a8:bc:9a:a9:33:dc:95:7d:bb:ee:0d:25:10:
         a9:77:42:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:52:22 2025 by rpki-client