Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6010b20f-cf41-38db-9cbf-e96d77df2f07.roa
File:                     6010b20f-cf41-38db-9cbf-e96d77df2f07.roa (raw, json)
Hash identifier:          err9VyHsrioXvlfOegKKX7Cs664R5RDqUP3y+Tmboag=
Subject key identifier:   A0:B1:22:E6:98:40:DA:25:BA:C4:A0:A7:63:CE:65:83:BF:AA:80:2C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A00DAE32B949A476C7D449480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6010b20f-cf41-38db-9cbf-e96d77df2f07.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     22394
IP address blocks:        199.74.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:e3:2b:94:9a:47:6c:7d:44:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=b24f79ac-fe48-4775-a57b-a1a0c075a1b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:83:54:9e:b2:40:89:44:9b:ad:a0:b2:72:71:
                    48:36:c1:b9:87:76:56:7b:a6:a2:ac:a6:b4:b0:1b:
                    50:8e:0f:80:5c:65:88:06:9a:c2:f6:4f:c5:cd:44:
                    28:40:e6:a4:90:03:6b:03:10:dc:18:61:d4:b2:ec:
                    40:62:2a:41:7b:d8:8e:19:19:cb:d6:42:f1:4b:93:
                    36:72:ba:13:9e:91:5d:cb:6e:59:df:7c:d8:4a:cc:
                    eb:01:e5:64:ec:f5:4b:2a:64:a1:21:3d:44:af:26:
                    20:03:1d:a1:ac:bc:dc:0d:87:2e:00:cf:04:25:cf:
                    30:b9:80:2e:85:71:2a:52:2a:5f:16:9e:db:06:8b:
                    2b:38:8b:e7:c2:d6:5c:4c:fd:12:e9:3f:24:ef:3a:
                    f6:3b:66:6c:a2:77:cb:9c:77:45:77:98:e2:bb:07:
                    2c:95:b8:45:1d:b6:3a:e7:a2:6b:59:8d:89:83:23:
                    7f:47:33:0d:9c:68:04:48:c6:20:2e:a5:91:5e:86:
                    f3:8e:f3:4d:26:ae:8f:c6:ec:6a:33:bd:b9:00:24:
                    e9:ab:11:c0:e0:1a:73:d1:ff:ac:fe:f2:1f:d4:0d:
                    6e:ed:1f:85:37:32:6a:30:ee:77:12:89:3b:7f:2c:
                    80:f3:38:42:af:39:55:f8:d9:76:28:12:10:6e:a5:
                    26:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B1:22:E6:98:40:DA:25:BA:C4:A0:A7:63:CE:65:83:BF:AA:80:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6010b20f-cf41-38db-9cbf-e96d77df2f07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.74.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:40:36:5e:8e:f0:b3:6c:53:26:a7:61:44:c1:bb:2a:2d:82:
         78:93:de:33:b0:a2:fb:36:d1:ce:5f:2c:78:eb:61:be:74:70:
         c6:35:7e:55:eb:d8:ab:83:54:85:a8:7e:d0:6e:59:d5:56:24:
         a7:61:6a:8d:9b:fe:c8:a9:ac:aa:f7:d3:c4:d9:17:c2:2c:75:
         88:1f:17:fa:fc:42:40:b5:f4:0a:61:54:93:ed:95:c7:8e:50:
         da:15:de:71:d8:04:56:a3:16:bb:34:ec:db:eb:c2:9e:b7:9c:
         fe:fb:de:2f:8b:c5:38:dd:df:a6:61:d7:04:ee:63:fb:12:06:
         d1:b9:ff:86:14:8d:44:1d:3b:e3:ad:69:80:0e:b9:ac:14:69:
         6a:a9:b3:c8:f6:71:d7:57:b4:16:a7:e1:28:7e:f1:8f:54:dc:
         52:71:70:85:d5:20:f1:e3:b3:d3:88:6c:3d:0c:51:8c:72:1d:
         d5:0e:fe:6d:02:ce:03:37:ac:d9:58:d1:e2:52:05:c8:f3:89:
         b7:21:75:1f:46:be:f7:08:01:5f:b2:c1:31:68:11:c2:c9:3c:
         b3:e1:ef:15:b3:b3:03:3c:6c:9e:04:87:29:bf:da:34:57:3c:
         68:91:be:46:ab:2d:5b:4b:e6:23:2b:18:ec:b7:a6:4b:4f:8d:
         47:18:58:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:33:16 2025 by rpki-client