Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbe2af2f-3ed5-30b7-8c4f-d45703526c0d.roa
File:                     bbe2af2f-3ed5-30b7-8c4f-d45703526c0d.roa (raw, json)
Hash identifier:          d9so/htYbCvADqiGlkwCjD8jfXrWhHW0maTMBpg3X18=
Subject key identifier:   25:27:F4:15:38:EC:B3:6D:8E:07:22:4C:31:E8:41:69:F2:55:69:21
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849CE9A744BE56B014EBA800500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbe2af2f-3ed5-30b7-8c4f-d45703526c0d.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     6167
IP address blocks:        174.42.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:74:4b:e5:6b:01:4e:ba:80:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=3ee78fc9-f3ee-4422-8e89-3b8c82e44f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1d:13:d7:a9:d3:ad:10:d7:5d:f5:4e:fc:47:
                    67:d3:99:64:a7:63:03:29:6e:7d:08:4b:fe:d7:10:
                    22:64:42:ca:c9:21:41:68:13:8a:d9:aa:e9:87:5d:
                    80:3d:c0:21:f0:83:fa:d2:c1:b7:4f:2c:1b:2f:3a:
                    28:ac:71:d9:a5:f5:28:83:da:84:7b:fb:28:3b:f1:
                    96:6f:aa:39:3f:00:db:21:d5:71:4a:a8:59:3d:f8:
                    05:8c:48:f4:e5:29:03:94:11:3f:95:b7:8c:f6:08:
                    1a:8f:df:9e:ca:03:4d:cf:f5:03:2e:2b:4f:23:e7:
                    56:9a:e5:08:f6:50:31:eb:63:43:3d:89:de:5a:78:
                    fa:0a:ad:3e:b3:00:1a:a7:06:55:e6:ae:dd:36:2f:
                    55:fc:f9:d4:1d:da:d0:cd:4c:83:56:35:5f:40:5f:
                    80:66:97:1b:e3:17:eb:e0:38:90:11:1b:15:97:67:
                    55:3c:70:8a:f4:60:cd:bd:c8:72:9f:9f:23:4f:e7:
                    9b:ce:d8:23:8e:e3:b9:15:48:8f:33:1c:59:19:9d:
                    80:86:b9:58:d1:84:56:7a:a9:b9:76:2b:03:de:31:
                    90:53:32:0c:62:b2:f7:2d:1a:aa:06:5d:15:7d:2f:
                    6a:74:3d:35:85:2d:1c:fc:2d:2a:95:d2:92:84:2e:
                    44:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:27:F4:15:38:EC:B3:6D:8E:07:22:4C:31:E8:41:69:F2:55:69:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbe2af2f-3ed5-30b7-8c4f-d45703526c0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.42.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:cd:0e:ac:88:63:c1:14:15:47:08:1d:fe:9d:8e:d2:54:59:
         22:41:b5:a0:ab:a8:8e:23:3a:6c:e8:87:ba:cb:b4:19:48:8a:
         f5:d8:1d:e9:f3:85:56:ca:ab:96:4b:78:1f:fc:ca:07:20:1f:
         e7:6b:e4:44:6a:e1:f8:b9:50:c9:94:e2:e4:9c:42:d6:ff:bd:
         16:54:99:00:f7:8b:d3:5a:6d:73:2d:03:4b:7e:f1:87:b7:67:
         9e:8e:69:60:a1:25:10:28:eb:d7:90:84:b6:bc:50:bd:7a:f0:
         0b:37:58:35:e7:0e:30:13:be:e8:dd:f1:5d:ea:e8:fa:02:5c:
         e2:ef:ba:38:c7:fa:4e:9b:bf:bf:db:2f:2b:30:f5:cb:d1:64:
         7b:95:5c:bf:21:54:ba:d8:98:11:e5:97:f1:71:1f:3e:4d:e4:
         9f:92:15:2e:31:6c:1c:6e:87:21:8b:d4:0c:e6:2f:75:bc:4a:
         fa:06:af:21:53:47:b6:3d:61:b6:e3:fb:9d:6f:74:3f:03:77:
         91:49:9e:42:eb:ed:28:20:9f:5d:7c:10:97:72:47:51:4e:b6:
         c5:90:8c:13:4b:e9:34:23:13:80:b5:21:41:70:16:7c:5f:5d:
         0b:2d:24:93:3e:38:57:c1:26:33:9f:0a:f2:18:24:d7:5a:e3:
         f7:69:33:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:13:18 2025 by rpki-client