Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d9255a8-1df7-3ad2-b59a-e77ce003e62c.roa
File:                     8d9255a8-1df7-3ad2-b59a-e77ce003e62c.roa (raw, json)
Hash identifier:          MiP0J9Fs03yVkWY14vhRCOyo+KOYToxGwTR+nv6tlr8=
Subject key identifier:   0C:FC:E8:15:8F:DF:E6:F3:5A:A3:0E:D9:54:A1:76:D8:81:6F:20:40
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849A089DE9ED5603DD2CD908000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d9255a8-1df7-3ad2-b59a-e77ce003e62c.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.213.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:de:9e:d5:60:3d:d2:cd:90:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=dd735fec-9835-4861-a31a-9be3e488171e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c1:0d:b9:e7:c0:eb:6a:12:47:e8:2d:d1:db:
                    09:ad:a0:94:79:a4:42:fb:3b:b8:d3:89:74:7e:dc:
                    31:3e:7c:e3:59:6a:5f:8b:b9:cf:ba:f4:5a:69:a7:
                    c1:1e:8a:18:71:d7:1e:13:cb:1b:2e:8a:18:c4:0e:
                    3d:1e:26:67:8f:7d:a1:8b:0a:2e:09:50:d0:6a:19:
                    0f:b7:b7:59:19:32:03:cf:89:58:81:5f:cb:ce:c6:
                    1c:d9:25:cd:15:6e:7a:6e:e1:82:d7:11:99:ee:15:
                    03:23:f4:78:0d:90:a6:30:b9:80:6f:a9:c1:14:61:
                    d6:5c:0c:81:34:1d:72:33:e0:da:c6:81:3c:17:ca:
                    6a:d3:6a:16:f8:b4:dd:9f:0d:c2:b1:d0:69:84:3c:
                    56:02:4f:f7:f2:3b:3f:a8:d0:da:df:d1:df:69:88:
                    49:b4:22:f9:96:7f:02:6b:67:94:ce:ea:45:a9:ca:
                    c6:10:c5:23:45:bb:1b:6e:ae:aa:61:f6:4c:f5:11:
                    ce:04:34:6f:0d:b8:4d:d6:df:2a:ca:c5:6f:0b:45:
                    78:76:0d:de:6a:7e:f5:b8:92:a0:23:db:58:e1:09:
                    0b:ba:02:7c:87:c2:c0:b8:9a:c1:6b:4c:94:87:0f:
                    dd:29:ed:3c:3a:ad:f8:34:78:e5:f4:b9:95:73:a7:
                    f4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FC:E8:15:8F:DF:E6:F3:5A:A3:0E:D9:54:A1:76:D8:81:6F:20:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d9255a8-1df7-3ad2-b59a-e77ce003e62c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.213.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:bc:af:e0:6f:50:b2:d2:19:bf:df:e9:38:81:d4:fc:c0:ce:
         fe:76:ff:fb:9e:a3:7a:2c:c2:d6:11:1f:79:10:cf:85:50:f6:
         ed:36:fe:7d:da:59:da:4c:e5:ce:ce:3f:bc:01:dc:0b:ef:2f:
         b8:dc:4d:85:33:88:20:25:38:b7:17:5e:21:9b:6e:1e:7b:da:
         3e:f8:90:99:8d:9f:dc:f5:ac:8c:8e:f1:a1:8e:29:fc:12:1e:
         fe:5c:d0:bf:eb:68:a4:a3:28:5c:f1:6f:77:55:c4:42:34:af:
         9f:52:78:ed:18:d7:58:30:cf:4b:2c:55:f8:15:7a:d5:88:c9:
         89:2c:16:38:de:4b:b9:27:c2:f4:fd:34:24:f6:c0:87:e4:17:
         52:55:02:2e:62:69:8f:b6:fe:2e:cc:12:2a:65:df:ab:dc:6c:
         16:7f:b7:0f:01:77:99:98:27:8f:df:2c:88:d7:ba:31:3e:07:
         d4:e8:20:a7:84:f0:0c:46:99:e2:48:b0:54:8f:52:63:b6:41:
         ae:f8:dc:15:11:eb:cb:82:4d:be:63:7d:e0:91:f0:49:ea:02:
         b6:66:6b:6d:f1:13:7c:7e:94:9b:a3:0e:23:bc:eb:c8:39:a2:
         7e:14:68:58:e8:9b:1c:e0:8e:a9:e6:61:d3:38:35:54:b3:fc:
         b2:8b:e0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:00:48 2025 by rpki-client