Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af4b5053-3e08-371f-b9c9-f74b497556c5.roa
File:                     af4b5053-3e08-371f-b9c9-f74b497556c5.roa (raw, json)
Hash identifier:          LcTZvpzO+tbYGTXAuKcBs3l54Zs6m7JBXKpdyZM85l8=
Subject key identifier:   07:3F:97:2C:75:96:66:36:88:B0:AF:D9:FC:FF:5F:1F:6C:9C:59:75
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849CE9A7F3E085A95C30E0F5480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af4b5053-3e08-371f-b9c9-f74b497556c5.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     6167
IP address blocks:        174.42.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:7f:3e:08:5a:95:c3:0e:0f:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=6fce769b-cd11-4f64-aa6a-c39e1f0b9eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e6:ec:9c:b2:0f:77:9a:4d:81:0f:29:6f:1a:
                    51:8d:61:4b:70:80:19:8a:34:5e:05:5f:b2:9e:f5:
                    b6:08:60:78:a7:4c:4a:be:96:24:59:f5:60:09:cd:
                    20:34:08:08:ca:f4:5d:c5:e7:90:48:00:f5:62:f3:
                    75:05:25:5b:7a:c5:bb:f9:b5:ac:bc:33:50:fb:89:
                    63:bd:45:db:89:54:8e:38:48:5b:e9:4f:f6:80:84:
                    b0:56:f4:db:0b:c2:df:5d:d7:e2:08:51:79:8d:17:
                    19:37:79:fd:f6:a8:d8:a2:bd:ea:80:84:cb:0e:99:
                    5a:c7:2e:8e:da:5c:ec:85:02:58:fb:72:05:de:4e:
                    1e:98:69:0f:ed:a2:7f:ce:02:06:80:1c:e2:ec:30:
                    f9:d6:16:a3:52:ce:e9:63:10:2d:a8:40:b2:df:9f:
                    b0:70:2a:46:ea:9c:10:14:af:d2:46:df:a4:d1:1c:
                    38:c7:4f:f7:a6:3a:7d:1e:07:d8:bc:0a:e2:f6:3c:
                    b4:8c:58:df:ca:ca:9b:a8:7a:8e:0c:f4:cc:7e:6e:
                    1e:70:6b:f9:87:83:82:dd:8b:81:6b:b9:a2:1e:68:
                    3d:31:67:30:24:f1:91:e0:7a:81:d6:0a:f3:6d:67:
                    96:95:5a:92:af:d0:18:68:f4:a6:b7:e4:02:93:5a:
                    30:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3F:97:2C:75:96:66:36:88:B0:AF:D9:FC:FF:5F:1F:6C:9C:59:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af4b5053-3e08-371f-b9c9-f74b497556c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.42.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:e1:e4:be:9e:a6:1b:85:d0:7a:76:e2:bf:99:70:cd:9b:fa:
         c8:dc:2d:71:b0:4a:59:a8:0d:cc:48:48:68:da:ff:9e:31:5b:
         7d:0b:92:10:56:fd:db:f0:39:b8:79:30:9b:eb:d2:36:8f:56:
         a8:a4:89:d1:f4:96:96:1e:f8:69:50:18:cf:a4:58:c3:17:07:
         c3:b2:4b:16:6e:f6:95:2c:9c:2b:27:f9:28:01:07:60:bc:c4:
         80:a0:1b:43:70:8a:d5:f8:1a:8a:2a:fd:a8:ba:f3:44:6b:1b:
         aa:56:5a:7f:b8:c3:32:12:34:1c:b8:f8:25:44:9f:31:32:df:
         11:d3:88:7f:c7:4d:0a:cd:d9:5c:c2:5f:89:f2:3b:96:4d:7b:
         f4:71:6c:ca:53:21:0b:b8:9c:97:fd:25:e4:df:27:83:ba:3e:
         2b:c5:76:ac:86:49:33:d5:18:56:99:bb:36:14:5e:1b:d6:be:
         d8:ab:94:75:38:22:38:70:b8:a7:52:09:76:59:ff:d2:d2:8a:
         35:9e:93:58:e8:f5:67:2e:80:ca:71:20:17:52:79:14:0d:a1:
         c2:12:64:94:5d:4b:9c:b1:70:b1:a5:35:33:a8:04:d3:38:8a:
         8d:0b:fc:93:52:3b:ea:37:de:0e:63:f8:5d:26:86:4a:b1:8a:
         bb:87:ef:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:14:39 2025 by rpki-client