Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8a6ac0a-090b-3051-9e0c-3c15b89ead18.roa
File:                     a8a6ac0a-090b-3051-9e0c-3c15b89ead18.roa (raw, json)
Hash identifier:          /9bZtRgWiJDojlvNako8YCA+4vZ5qYS/i7BReXHkcjc=
Subject key identifier:   5E:56:9E:90:C7:47:18:99:4A:99:ED:B7:2B:1C:25:F5:A6:F1:1B:E2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849A089EFFA715EF1D452116E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8a6ac0a-090b-3051-9e0c-3c15b89ead18.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.224.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:ef:fa:71:5e:f1:d4:52:11:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=8e7865be-1021-4680-bed6-35690056c08f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:51:a0:e9:e8:d8:7e:f0:42:01:1a:fb:f7:f9:
                    8e:2d:bc:bb:cd:37:b7:a1:65:0d:0f:65:f7:f2:8a:
                    c2:10:3a:da:bb:e5:cf:a4:2b:d3:dc:fc:a8:52:ab:
                    34:31:9b:ed:ec:f3:1e:5e:8a:75:e3:56:dd:9d:78:
                    f0:99:34:7c:98:0f:48:d5:f9:bc:85:c9:da:bb:b8:
                    52:5f:02:2b:2f:ea:14:f2:17:4d:45:d1:bb:95:bc:
                    a8:12:59:8d:5a:e9:ec:20:f3:69:b7:37:30:c3:ba:
                    a0:3f:a8:7c:6d:38:7b:3a:46:e2:e8:b4:1c:ca:85:
                    ff:af:a7:68:fd:05:8a:9a:68:c8:2b:d5:a2:1c:96:
                    b2:aa:18:fa:79:99:7c:fa:8e:9f:da:32:e0:c0:37:
                    53:ce:e0:1f:73:d3:ea:3b:36:59:62:4e:70:08:d6:
                    65:db:33:da:dc:1a:9e:ed:b2:e7:91:0e:c6:d8:25:
                    d3:f9:a5:1b:e4:2d:16:4f:d7:05:6a:03:a8:26:84:
                    77:27:ee:cf:fe:16:01:56:3e:31:15:b8:49:2c:a5:
                    1a:8c:56:9c:07:b1:27:e1:b0:14:bc:d7:d1:00:e2:
                    cb:19:1b:bb:10:d0:bb:ec:61:38:3c:90:37:7a:c9:
                    21:ec:7e:61:91:07:17:2b:15:c8:56:cf:05:22:75:
                    bd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:56:9E:90:C7:47:18:99:4A:99:ED:B7:2B:1C:25:F5:A6:F1:1B:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8a6ac0a-090b-3051-9e0c-3c15b89ead18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.224.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:b2:47:7c:79:42:15:c8:6f:a2:d0:c9:36:46:de:d2:21:44:
         d7:0f:d6:43:b6:59:45:ae:78:11:20:dd:c8:5b:58:18:2e:57:
         63:92:e3:0f:9e:60:2b:af:09:47:bc:78:a7:22:bc:e8:bb:b1:
         e6:0d:2a:83:e4:13:79:79:d3:40:ae:ad:24:6a:ec:33:67:69:
         3f:9a:d6:81:03:2d:e0:c1:1f:85:a0:5f:11:19:80:f7:4b:fe:
         f2:3a:f2:b2:1d:81:f1:dc:dd:00:6e:93:eb:e0:13:4d:fb:eb:
         71:6c:c5:d7:8c:a5:36:83:2a:9d:43:9a:69:ba:a5:bf:15:5d:
         57:ed:3c:e4:8d:ab:d9:47:7f:fc:4a:8d:e6:0e:ac:06:db:39:
         5b:75:e3:f8:a1:40:16:b9:a0:8a:ae:a9:5c:08:94:30:a2:15:
         c9:f5:90:79:9d:69:43:09:9c:d8:c5:92:34:08:eb:38:e3:79:
         d9:3b:4c:39:65:91:0a:76:7e:be:f9:6c:dd:9a:3f:ee:e8:51:
         ef:72:de:20:8f:f2:0b:20:90:bf:95:85:e7:6f:11:b2:6e:90:
         fa:97:56:14:3c:2b:43:64:70:bc:5d:68:bf:a6:9c:83:11:17:
         f9:c2:c3:05:c3:80:17:a9:59:77:be:88:2a:db:12:ed:ee:0b:
         61:ee:4d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:25:33 2025 by rpki-client