Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5fba1f51-abfb-39f0-915b-ff304be322c4.roa
File:                     5fba1f51-abfb-39f0-915b-ff304be322c4.roa (raw, json)
Hash identifier:          0+hvPLvUe3rrxuOACoUwHB96UpRQk8AlJeumbhC7XIY=
Subject key identifier:   F4:48:65:63:71:38:33:F3:51:FD:E1:BC:9B:C4:5A:D7:3F:88:C3:DB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849A089E0FF9AA951677BE8BAC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5fba1f51-abfb-39f0-915b-ff304be322c4.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.216.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:e0:ff:9a:a9:51:67:7b:e8:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=435f1d4e-f13d-48b2-b693-e1b7f098a98c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:02:b9:29:d8:42:92:25:17:5a:4c:28:aa:b4:
                    7e:f2:49:29:6a:f0:42:ed:15:c3:91:fa:7d:b8:e8:
                    e2:89:da:cc:f1:d7:b8:37:db:b2:e2:f7:df:ee:7a:
                    45:db:02:2f:e2:01:46:5e:e4:b1:2d:68:8d:80:24:
                    fd:05:fe:ee:82:aa:53:4d:94:e0:d3:4d:8d:4d:82:
                    d6:ae:07:f6:ed:1a:e1:91:6a:56:e6:00:c9:0a:50:
                    87:7e:48:34:e6:b9:24:74:21:84:01:05:df:c3:98:
                    6e:34:2f:ae:6e:6b:d3:c9:a1:81:c7:ce:6f:18:86:
                    3f:a5:54:45:06:a2:82:e7:db:a3:77:5c:62:38:02:
                    c4:95:6f:f3:69:cf:c6:f5:cb:39:ca:ce:f0:8d:4a:
                    bb:a3:dc:56:7f:a2:af:e2:3d:aa:46:e9:17:40:c8:
                    42:e5:7f:45:99:b4:e1:82:81:3b:b1:85:09:b2:22:
                    76:79:e2:6d:c3:8f:48:d1:88:bf:d6:75:42:4b:d3:
                    54:50:c8:38:46:e8:09:f8:2e:7c:8c:6e:40:b3:49:
                    e6:8b:15:4b:b7:81:bb:42:44:4b:23:35:22:63:73:
                    e7:54:cf:a2:87:0c:f1:ca:f2:d3:fd:52:1b:fb:9a:
                    7a:db:8a:53:c7:c3:15:de:64:a7:22:2f:23:09:13:
                    58:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:48:65:63:71:38:33:F3:51:FD:E1:BC:9B:C4:5A:D7:3F:88:C3:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5fba1f51-abfb-39f0-915b-ff304be322c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.216.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:89:48:a7:ff:7d:53:e8:76:89:8a:3f:d5:03:6c:91:96:af:
         6a:87:e5:bd:28:02:a7:a1:12:b4:07:2f:f3:50:98:fc:4a:62:
         59:cf:02:c4:53:84:28:6b:80:21:8c:84:82:0f:cc:9d:c8:d8:
         49:78:7c:e3:c4:03:52:d4:b7:1a:c1:2b:8c:61:53:33:06:80:
         f9:e3:a7:9f:36:64:b6:25:ad:8b:56:15:a4:63:32:18:37:8e:
         dc:45:dc:85:38:3c:41:70:37:c9:54:0b:9a:7a:a4:91:8e:61:
         da:ac:c8:77:02:dc:11:90:54:cf:d5:4f:2c:0b:a9:26:db:d7:
         e0:da:09:ca:04:f8:1a:b6:e9:bb:13:02:d4:40:6e:65:43:ac:
         cd:bf:d2:3d:56:79:27:64:01:17:d2:29:a5:26:1e:06:20:86:
         21:34:a8:a4:36:10:84:61:a3:a3:ff:a6:69:2b:78:7b:e4:10:
         d9:c3:7a:bd:b1:f8:bc:af:24:61:7c:17:ce:5d:a1:e9:be:bf:
         65:82:e4:41:42:a6:f2:41:3a:b4:ac:5a:14:5d:90:f9:58:b8:
         84:6c:ed:82:88:a9:d3:02:48:5e:c0:06:a4:27:8d:e4:4f:1b:
         e6:45:24:4b:0b:76:61:2d:b2:5d:e7:b4:b7:de:c4:1c:a7:9d:
         75:da:76:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:34:00 2025 by rpki-client