Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/53c7574e-3944-3aae-8a4f-2f730f4e89fd.roa
File:                     53c7574e-3944-3aae-8a4f-2f730f4e89fd.roa (raw, json)
Hash identifier:          yP6ZmtuyBk6s7KprGYiVLVMbgCdwgzueQ49u3cUUXmI=
Subject key identifier:   65:72:41:C6:35:AE:C8:10:D5:83:7C:D1:35:AB:9A:0C:E0:C7:D2:28
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849A089DC8F5CF7ED484C59ED00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/53c7574e-3944-3aae-8a4f-2f730f4e89fd.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.207.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:dc:8f:5c:f7:ed:48:4c:59:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=96b59a72-a09a-4899-90fd-0c73222f6692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2b:43:7f:60:e7:98:37:b3:7c:70:c3:46:f7:
                    da:5e:42:f3:13:22:11:e5:02:f8:78:67:0c:ac:a3:
                    40:3d:53:89:a1:2d:63:b9:87:0a:01:12:ee:d4:0c:
                    da:c3:76:f1:5b:77:b8:01:6a:96:5b:39:0f:0c:eb:
                    c9:61:fe:44:3c:e2:61:6b:78:1f:ed:13:c1:e4:6a:
                    ee:9b:12:83:27:60:d7:d8:75:2b:da:0c:2f:b7:7d:
                    17:83:18:dc:9f:1f:92:48:55:15:77:de:bb:79:fc:
                    78:e6:f0:c7:9d:62:b5:ab:73:7f:c0:52:6f:6c:22:
                    d0:68:c2:30:7f:9c:3b:2f:db:c0:20:1e:d1:9d:c5:
                    a5:af:82:c1:c5:e2:f9:bf:34:eb:ed:2e:b9:33:f3:
                    9b:43:f9:75:ae:7d:a5:18:6c:a1:86:78:10:53:fb:
                    b2:d0:ba:1d:05:f7:57:c4:27:9f:ff:cf:15:2d:2d:
                    fe:63:9b:07:20:42:6a:ef:b6:a1:d5:51:4b:29:c2:
                    6e:0e:79:cc:a8:00:ef:6e:bf:99:f9:34:ae:b6:c9:
                    eb:3e:a5:b3:ff:e7:4c:79:cd:66:a9:da:f8:8e:78:
                    0e:7e:99:92:1b:7c:aa:84:19:f2:e8:bb:91:8a:5b:
                    e3:4a:f7:64:85:2c:48:ea:0c:a6:91:7a:d3:a8:84:
                    b1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:72:41:C6:35:AE:C8:10:D5:83:7C:D1:35:AB:9A:0C:E0:C7:D2:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/53c7574e-3944-3aae-8a4f-2f730f4e89fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.207.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:26:fa:44:16:da:25:94:df:30:3f:24:fb:cd:52:92:26:6c:
         47:17:ba:48:36:e6:b2:e1:e5:37:d4:dc:a3:46:db:cf:52:e1:
         dd:ec:a0:d5:02:49:0a:66:7a:17:9b:2f:13:35:99:e1:00:8c:
         cf:04:ea:ff:8a:2b:30:5f:62:05:1f:a5:83:68:b4:93:36:84:
         0f:a7:26:2c:52:49:dc:15:2e:7c:fd:0d:ac:88:d4:fe:c0:fa:
         78:22:e1:4a:32:7d:7c:c5:0d:00:0a:66:ca:f9:25:51:30:93:
         3a:a6:98:86:b0:97:79:f3:69:51:70:f0:db:e0:fc:79:a9:98:
         44:bc:07:cc:b2:c9:a4:98:a5:49:ee:f9:00:84:5f:89:0c:48:
         dd:55:e3:58:3a:63:8c:99:b8:27:de:af:55:8c:11:1f:02:e5:
         09:01:3e:73:64:df:d1:f2:ad:08:e8:19:04:37:13:4a:5e:0d:
         aa:4c:bc:40:dd:a4:93:8a:66:90:5f:d9:1f:e8:ba:7f:47:4e:
         12:e6:58:d7:b5:24:b3:40:01:55:2f:1b:25:7b:3e:cb:49:e1:
         be:1b:91:17:cc:04:59:6e:88:9e:7c:35:92:4c:50:3e:6b:a5:
         c2:2a:84:af:9d:b9:49:7c:77:a1:c9:5a:7d:fe:fc:b7:2e:bb:
         47:db:c4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:04:05 2025 by rpki-client