Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4eec6853-240c-3225-909a-b2c6a1b55a8d.roa
File:                     4eec6853-240c-3225-909a-b2c6a1b55a8d.roa (raw, json)
Hash identifier:          AUy+SLMmp82zh5Y/JseURWjDy/DArEJfxLFdMeEtWnI=
Subject key identifier:   A1:8C:9B:DB:35:FB:A8:E5:FC:72:BF:60:18:5B:0D:29:D6:BD:CC:1F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849A089DDD1E64A9CE844D63D40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4eec6853-240c-3225-909a-b2c6a1b55a8d.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.210.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:dd:d1:e6:4a:9c:e8:44:d6:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=eecc75f9-bc6e-4f87-b775-258a6ae0fd7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:59:ce:94:4c:f2:b3:b8:f3:94:e6:be:37:a7:
                    46:aa:8e:50:cd:c5:9a:c8:91:ba:49:20:7e:1e:b2:
                    e4:8f:5e:1b:f2:98:9c:cc:96:a0:95:cc:1d:d6:cc:
                    71:ae:e9:5d:ab:00:93:bb:31:a6:26:75:48:6e:78:
                    2c:73:ce:0d:9b:c8:9d:5a:c4:3c:11:ed:1c:45:86:
                    3e:8c:54:cd:ea:0d:d3:4f:8e:37:dd:fc:7c:80:de:
                    d4:7d:c0:16:aa:48:5d:86:8c:aa:30:a6:59:01:bc:
                    b2:b3:5b:08:b4:b3:b0:31:07:00:d2:41:bf:48:23:
                    c7:7f:40:e7:ac:58:1d:8c:2f:d2:c8:5b:08:06:05:
                    82:3b:37:4e:97:ff:23:eb:c8:06:62:16:5f:d3:ec:
                    6a:0d:61:48:0d:ec:0f:3a:0f:14:b0:45:c4:b1:98:
                    ce:af:47:f4:df:04:e6:96:88:4a:d6:49:b3:93:8e:
                    fe:be:4c:af:97:53:ec:5e:71:b0:85:3d:1d:31:f0:
                    b6:ad:ce:63:e0:b2:c4:b7:6e:7b:f4:8c:ed:2b:00:
                    5f:54:c1:47:bd:1d:87:21:49:7e:3c:63:86:08:0f:
                    cd:4b:f4:34:d6:fa:5b:36:75:05:43:3d:4e:79:ed:
                    25:36:74:4e:0c:f1:b2:1d:bc:35:75:e7:d7:0a:f4:
                    d8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8C:9B:DB:35:FB:A8:E5:FC:72:BF:60:18:5B:0D:29:D6:BD:CC:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4eec6853-240c-3225-909a-b2c6a1b55a8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.210.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:07:6b:1a:4f:e7:5d:2d:3c:a6:2c:61:8c:ed:61:56:0c:09:
         42:21:3d:35:1f:d7:08:d7:93:94:7d:6d:15:88:0c:aa:0d:1f:
         a8:5b:fe:3f:f0:ea:70:f7:98:04:c3:c2:34:94:60:ad:10:23:
         00:7b:28:84:c1:02:91:8a:24:3f:72:d3:08:15:95:77:eb:4c:
         36:43:63:ea:d5:cb:52:50:22:27:1b:fc:78:ed:e3:1b:85:ef:
         83:b8:bb:87:09:f0:bc:39:22:97:c8:9a:87:fc:95:7e:a5:2f:
         f1:32:a0:7c:c9:f4:47:71:7a:c3:8f:39:d4:30:6f:31:65:c4:
         12:b3:ec:d1:9b:c9:5d:03:29:ce:fc:2c:eb:5d:85:72:31:08:
         98:61:d3:65:52:fa:57:45:7b:26:0a:d0:74:bb:7e:fa:ec:1c:
         a0:a4:c1:ad:03:5c:da:ec:03:2c:eb:c0:cb:77:23:c8:82:8d:
         b4:b0:54:38:1c:f3:b7:c3:a5:a4:ac:25:3c:93:84:b5:c4:5b:
         71:c6:4f:64:1d:41:ca:dc:c7:4b:1b:90:a5:0d:08:48:5f:68:
         b9:0e:e9:c8:c1:39:d8:ba:a8:75:0c:20:05:c3:97:2b:8d:f3:
         f3:3d:82:4d:7a:64:5b:c0:54:f6:ad:49:89:32:a3:f5:27:d8:
         fc:71:d4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:49:47 2025 by rpki-client