Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44a2cc80-ee5b-3974-b50c-f3b9043187d3.roa
File:                     44a2cc80-ee5b-3974-b50c-f3b9043187d3.roa (raw, json)
Hash identifier:          UEN9exf9Qhws3BQdJwQ3iEhepviLb2D0DToQ4w6x9nQ=
Subject key identifier:   DB:6D:E6:D0:A2:17:02:81:3D:EC:3C:67:A9:76:D2:1B:5E:B5:74:7A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849929499DF2AA1B14D26A2CE00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44a2cc80-ee5b-3974-b50c-f3b9043187d3.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     0
IP address blocks:        67.107.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:99:df:2a:a1:b1:4d:26:a2:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=226c3027-5d4e-47f2-acf2-2852cc6798ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:81:9a:f6:c1:22:5a:b9:79:5f:fa:16:a8:9e:
                    10:fa:de:6f:7f:46:48:6c:88:89:6e:f9:58:f3:09:
                    fa:69:c1:aa:0c:47:40:23:03:dc:5b:c6:ce:10:af:
                    86:66:f7:d7:a1:d4:2e:36:e4:87:d6:52:59:57:13:
                    ca:c3:78:7d:b4:77:7a:4e:01:e1:87:49:8e:67:c5:
                    23:7f:62:75:75:7b:73:cd:15:52:ac:98:d6:38:18:
                    e7:db:d6:46:64:64:67:59:f8:03:22:b8:ed:33:f0:
                    41:2f:62:8d:cb:d0:d6:92:b5:06:82:31:5a:45:d7:
                    df:df:fa:e8:cc:f3:de:85:56:cc:d9:c8:65:23:54:
                    c7:e0:5c:6c:96:84:63:e4:6a:d9:b3:7d:02:6f:88:
                    fe:ac:9e:50:02:54:d9:4a:a3:92:76:04:b3:db:1d:
                    a3:03:3c:f8:f6:55:26:a4:77:06:6a:b7:c9:a7:35:
                    7a:2b:8e:30:b9:99:43:b9:6a:23:3d:d9:f3:29:07:
                    37:e4:a4:ed:a8:1e:ad:31:65:cd:e1:89:70:83:c3:
                    f2:f0:5f:8e:fb:b3:c0:57:7b:af:a8:56:80:f1:87:
                    7b:72:7b:97:a3:a9:3d:25:ad:89:9d:ed:fc:d1:7b:
                    a6:d7:c5:fc:ba:ba:50:0b:83:f2:1b:f8:72:6b:9a:
                    8f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6D:E6:D0:A2:17:02:81:3D:EC:3C:67:A9:76:D2:1B:5E:B5:74:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44a2cc80-ee5b-3974-b50c-f3b9043187d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.107.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:d5:85:59:6f:44:92:1d:fe:02:a3:10:ec:b8:b9:39:bd:34:
         ae:6c:81:c6:bb:a7:3c:dc:87:46:37:e3:19:b2:35:8d:87:6f:
         6e:39:83:a4:a6:2a:18:74:3c:42:af:f0:6c:87:86:33:47:bf:
         b9:31:d2:ff:4e:6a:b2:54:01:73:81:6d:38:e7:ef:ad:92:5e:
         be:3c:a7:ea:11:39:14:9d:50:cd:33:53:e5:a2:16:9a:72:1f:
         2b:c0:3f:a0:71:35:f0:d1:e8:b6:aa:4d:54:87:a1:dd:89:e5:
         5a:97:8e:f5:0a:b8:6d:53:be:f2:5b:f7:37:67:0f:74:bd:1e:
         a7:6b:39:a8:41:50:5f:63:07:1a:26:c3:41:07:33:78:da:f0:
         d9:49:5a:c0:92:3c:22:7c:3a:6b:ff:91:29:6d:21:fd:6b:ed:
         be:73:98:33:d2:64:70:7c:46:be:78:1c:d9:85:ac:91:13:3d:
         fb:79:10:e9:d1:0b:8c:89:b7:06:5f:34:08:0e:e3:27:14:b4:
         74:10:00:bc:6f:b2:ad:56:5b:52:45:05:d7:ee:57:0f:ee:c8:
         9d:82:70:0d:b9:8b:65:00:1f:bc:f4:e5:6a:58:88:5b:47:7c:
         f5:91:f9:91:14:6f:eb:61:b2:30:3b:31:02:2b:18:76:ed:c9:
         8f:c2:20:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:57:33 2025 by rpki-client