Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52532e5c-6799-3897-9bdf-f9d53ca2c1c4.roa
File:                     52532e5c-6799-3897-9bdf-f9d53ca2c1c4.roa (raw, json)
Hash identifier:          E8wyxKD3xyiT1AYk2ZWQcq43HPLtWSzf3v4A18NXUFY=
Subject key identifier:   D2:77:50:8D:A4:CA:02:C0:40:50:8B:F7:47:A4:58:BF:74:B3:6A:1B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849A089E6F6AECF24CE78866820
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52532e5c-6799-3897-9bdf-f9d53ca2c1c4.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.224.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:e6:f6:ae:cf:24:ce:78:86:68:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=ec8be0d8-c5ff-4f69-936f-fb517dca632d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ef:3d:83:5b:20:f4:7b:6a:c9:51:39:2a:fe:
                    83:b2:e5:34:45:30:88:d9:f9:a4:98:e2:00:15:8d:
                    e7:e5:ef:22:c4:9b:04:7d:43:40:e5:cb:f4:75:03:
                    d4:40:e7:71:e2:47:bb:03:7b:7c:44:e7:a1:0b:41:
                    e0:b2:4a:43:e6:22:1e:ee:7e:a0:7f:4f:44:23:51:
                    29:ab:6e:9c:e8:b4:48:41:54:a5:df:53:26:cd:e1:
                    4f:d9:88:85:2a:af:b9:0e:15:c0:56:e6:59:7c:d8:
                    4b:97:54:b7:2a:55:49:5c:da:1d:83:66:12:88:f3:
                    49:7d:0f:ac:90:de:ac:0b:7a:0a:80:03:0a:62:5b:
                    73:20:9c:f7:f2:42:07:b0:ae:9f:4a:ce:38:65:bf:
                    be:e3:e1:a8:77:86:aa:73:11:26:93:d8:44:57:53:
                    e5:9e:a3:ca:33:91:db:f9:a7:74:da:f2:ea:08:a2:
                    66:d4:41:52:e0:19:f2:d3:9a:96:77:71:fe:99:5f:
                    44:37:aa:c3:e9:ac:38:9a:b4:92:d4:49:40:05:fb:
                    a6:06:56:10:cb:41:b6:d4:d4:d0:ea:1a:e5:1f:f2:
                    9b:dc:c2:b6:fe:65:e1:d2:ec:35:56:8a:d9:6e:d6:
                    a9:1c:86:38:71:79:d5:d9:38:3b:ea:83:4b:17:df:
                    75:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:77:50:8D:A4:CA:02:C0:40:50:8B:F7:47:A4:58:BF:74:B3:6A:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52532e5c-6799-3897-9bdf-f9d53ca2c1c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.224.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:e1:e6:fe:62:46:43:2c:81:5f:4b:50:f5:04:ac:cd:19:ee:
         c3:48:24:78:07:12:ab:57:a8:45:d9:49:37:de:98:e2:4b:74:
         89:aa:4f:d7:ac:ae:de:e0:bf:b7:ab:c1:c9:46:e3:05:1c:85:
         10:9e:a4:44:a8:91:e6:cc:c9:83:dc:36:cc:38:05:43:6b:c7:
         35:c6:be:75:cb:f4:c0:e0:b7:07:a8:85:06:09:13:99:6e:2d:
         8b:d0:0c:da:82:46:c3:50:d0:af:ef:02:00:98:9a:e5:8f:56:
         8f:bd:61:03:88:5f:78:3a:ce:23:f1:3a:7e:1a:3c:73:ab:e2:
         07:03:10:43:2d:e6:65:0f:7c:4a:e9:2a:f3:e8:5b:70:9c:1e:
         54:65:d3:46:69:2b:a7:87:36:03:60:c2:7e:32:be:24:cb:47:
         d1:88:ee:2f:3a:36:38:af:5c:c2:4f:b0:7c:17:9e:c8:94:1c:
         be:a7:2e:86:c4:21:79:b2:a4:62:fb:31:c4:53:86:7f:ed:c9:
         72:e4:a5:bc:db:65:64:5d:0f:d8:cd:d9:c6:39:b2:2a:34:a0:
         96:96:6d:34:54:d2:db:2b:46:4e:3f:6a:04:c4:17:26:d4:7f:
         16:81:56:72:c9:6a:3f:d6:c5:d8:de:8e:06:c0:34:45:b3:71:
         19:cb:0b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:58:45 2025 by rpki-client