Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca44ce28-8c2b-3299-8543-1befb7911dac.roa
File:                     ca44ce28-8c2b-3299-8543-1befb7911dac.roa (raw, json)
Hash identifier:          P+4ZAMOcMU2/AHF10tIwpbihPvZ/L3cD6N0f5JpS9Gc=
Subject key identifier:   D5:64:3F:8F:A2:56:57:88:0E:EA:8A:9A:C5:51:7D:D6:13:59:E9:B1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849A089E1D98725EA3A3D4060C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca44ce28-8c2b-3299-8543-1befb7911dac.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.218.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:e1:d9:87:25:ea:3a:3d:40:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=4b207708-469a-40a4-989d-ed151096077c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:09:3e:98:b9:5b:7b:cc:64:23:54:de:1f:
                    cb:c6:54:6a:01:e2:25:2d:ad:7e:60:32:8f:19:ca:
                    15:c8:38:f5:38:d5:b5:b6:86:06:00:a5:fb:20:90:
                    88:8c:8f:01:a8:75:51:f7:79:2d:d3:8b:b7:0b:9c:
                    c9:11:4d:cd:b2:a8:3d:b1:f1:a7:83:4a:d5:39:b0:
                    8b:07:db:ba:65:d8:a1:9f:13:26:17:e7:90:56:ec:
                    e0:fa:08:a0:a0:92:2c:e4:ef:ce:c3:86:6d:d7:b8:
                    c1:c6:c9:47:ba:95:f0:53:82:f7:18:86:3e:48:af:
                    00:18:62:5d:b1:81:fc:fc:43:82:11:bd:91:35:6e:
                    b0:3e:bf:0b:57:83:94:71:34:f0:a1:bd:53:c8:2c:
                    98:df:ee:db:71:4e:be:9d:c0:ef:6a:9c:e4:46:46:
                    5f:59:4d:43:d7:f5:97:7f:cf:ce:61:e6:22:eb:54:
                    06:1f:d3:6b:01:f0:3c:28:50:19:03:b7:4b:fc:07:
                    6e:ea:a7:d8:ef:cf:15:2b:da:81:cc:8f:40:6c:2e:
                    d5:da:37:69:b6:a6:e0:21:65:99:8d:72:cf:83:61:
                    5a:31:cd:83:d2:c1:52:f2:65:df:4d:c9:8d:d1:0e:
                    7a:3e:17:00:c4:aa:bd:bb:9b:d8:a0:55:90:25:0d:
                    d9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:64:3F:8F:A2:56:57:88:0E:EA:8A:9A:C5:51:7D:D6:13:59:E9:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca44ce28-8c2b-3299-8543-1befb7911dac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.218.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:24:c6:12:ef:52:b3:b0:de:2d:fb:55:fc:c3:c3:c1:fd:8b:
         3c:78:33:70:31:c5:bc:e5:09:df:f3:7a:39:1c:dc:09:31:a1:
         4c:79:cb:f5:3a:d2:48:14:09:d4:7e:24:f5:fb:5c:4d:ab:d6:
         f4:f4:4e:f8:a6:83:86:78:d0:aa:3f:8a:33:83:b9:22:0e:80:
         f8:8f:47:bd:bb:6e:07:f9:31:80:e2:f6:75:15:d2:7a:c8:28:
         07:cb:eb:91:bd:25:39:3c:fa:da:ca:56:83:cb:81:7b:84:f5:
         c9:28:fd:74:b9:9c:3b:ef:19:cf:9a:bf:35:99:28:a2:4a:85:
         b1:a4:a0:04:d3:92:77:4b:4f:39:6e:49:c6:4c:cb:76:ef:d8:
         27:9c:f1:37:59:a2:df:ce:bb:7f:5a:01:d9:4d:9f:4f:6c:d6:
         b1:5f:c1:c7:94:67:4e:26:16:8b:34:8e:34:f2:6e:d1:b9:f9:
         84:b4:08:82:12:4c:63:4f:5f:fb:48:5a:db:0d:d4:a1:ad:a3:
         de:01:95:7e:ff:8f:de:39:8a:f2:19:0f:e9:e2:a2:ae:70:94:
         55:89:12:4c:79:6d:1a:e3:cd:75:70:62:b3:1d:1c:17:e1:47:
         31:2d:99:ed:f2:54:d0:bd:f7:02:76:a9:28:76:99:ef:c8:76:
         16:29:7e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:15:28 2025 by rpki-client