Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/93afdb6b-fbd3-368d-88b4-4534d08cd13d.roa
File:                     93afdb6b-fbd3-368d-88b4-4534d08cd13d.roa (raw, json)
Hash identifier:          gdQE10i9bNvMixzOMZOsOr4kMFstHIS9VeMst0F/i/0=
Subject key identifier:   E2:ED:95:A8:01:90:A6:9D:B1:A9:51:4A:F5:13:76:46:B3:72:1F:6B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849A089E520B0AE78B1F365DBC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/93afdb6b-fbd3-368d-88b4-4534d08cd13d.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.219.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:e5:20:b0:ae:78:b1:f3:65:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=7975647f-2354-4642-9e2e-984ae8143ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f2:97:ef:25:30:20:7f:0c:07:5e:48:ce:ce:
                    1d:75:e0:9e:1a:8f:43:91:77:56:ea:5c:88:96:66:
                    5c:78:06:ca:6f:84:9e:43:93:08:f2:58:a7:55:40:
                    a9:98:ef:f6:ca:4a:03:bd:05:c7:43:21:dd:d2:16:
                    9f:1a:ae:e3:5e:08:47:56:fe:03:b4:48:ec:af:5d:
                    18:2f:20:5c:98:24:05:0f:4a:54:d1:bc:e5:96:b8:
                    0e:19:32:ae:5d:ef:e7:d6:05:ac:be:05:32:b3:a8:
                    46:22:9a:e6:36:0e:ce:46:69:44:0e:68:d3:3a:de:
                    2e:43:52:3c:81:2d:67:be:cf:74:86:46:80:97:a9:
                    a3:e9:65:64:c9:7c:91:d8:59:02:3d:ce:a7:c2:fe:
                    b9:0b:d4:71:1b:5f:61:af:c7:69:3c:b3:80:5f:5f:
                    e3:f5:e4:87:15:41:29:54:de:fc:f1:5a:88:fd:42:
                    27:bf:ea:5c:3f:1d:20:4d:36:40:f2:cf:2f:71:dc:
                    80:7c:11:44:90:5f:81:2a:be:52:8f:91:8e:92:40:
                    6d:78:ca:ad:c2:50:3d:6d:d8:fe:01:39:23:ce:15:
                    bf:87:f1:80:1b:80:ab:08:2d:29:5c:e9:ea:2e:ad:
                    b9:d8:c6:a3:fb:4d:09:23:5c:04:5c:40:80:3f:03:
                    8f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:ED:95:A8:01:90:A6:9D:B1:A9:51:4A:F5:13:76:46:B3:72:1F:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/93afdb6b-fbd3-368d-88b4-4534d08cd13d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.219.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:06:f4:45:72:63:7d:d2:2e:77:0d:cb:2c:02:4d:5e:5b:69:
         a0:99:15:37:49:1c:36:57:a3:fb:51:2b:a3:ac:c7:29:83:c9:
         f3:da:e2:db:a6:c4:94:a3:c1:74:d7:8f:7b:a0:fb:44:45:e5:
         9c:d2:13:41:1c:95:72:9e:3f:9f:c4:70:b2:0f:00:f2:39:7c:
         68:7c:bd:55:91:be:39:2e:51:a1:22:fd:74:e3:40:f4:c1:81:
         48:fd:bc:93:87:6a:d5:67:7b:1a:a0:95:85:f8:ab:10:38:63:
         f4:7f:bc:1e:34:88:d6:0c:c9:02:7a:ec:2a:e0:99:95:f7:72:
         bf:30:19:f7:8b:8a:4d:db:74:9f:0a:c7:4c:f8:ba:a2:a9:ce:
         4c:9e:65:e3:0c:65:f9:29:5b:78:e1:70:0f:d9:9a:ec:ac:8c:
         93:4a:7f:21:6b:cd:58:7a:e8:e9:8e:c3:db:d2:d8:93:69:34:
         44:62:ea:08:84:dc:bd:85:df:bd:0b:8e:86:79:da:26:bd:d1:
         94:67:30:f4:50:a3:dd:a4:40:f2:7c:a8:12:ee:e8:79:ef:78:
         13:f1:2b:c6:1b:7b:20:35:fc:ee:77:09:c8:ba:b5:14:51:31:
         12:55:ac:33:75:e5:fd:06:21:87:61:7d:9d:ce:d8:e3:4f:f5:
         9d:92:ee:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:47:38 2025 by rpki-client