Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1afca3f-ecf7-313a-80d8-2b7fef6bd2d0.roa
File:                     e1afca3f-ecf7-313a-80d8-2b7fef6bd2d0.roa (raw, json)
Hash identifier:          klKQVKseqKxKkNrs5weItUB1+3n04q3CcQDPDOjwN7o=
Subject key identifier:   FE:FB:44:C3:C4:5B:0A:5A:A7:C2:9A:1F:4D:14:94:9B:80:2B:DF:04
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849A089EB83AE6900F43ED76C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1afca3f-ecf7-313a-80d8-2b7fef6bd2d0.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.197.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:eb:83:ae:69:00:f4:3e:d7:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=f67eaa31-776b-4adb-a83d-7efe0cc31c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ae:39:44:bb:f5:d9:7a:00:8c:bd:0c:d2:65:
                    5e:fc:98:16:fe:a7:6f:3e:09:5d:ce:3c:e2:da:f6:
                    b0:f8:67:37:d2:97:50:a6:4c:52:6a:55:06:d3:03:
                    d8:5c:ae:91:66:7f:c5:d5:e8:ea:0e:e6:4a:3c:39:
                    74:e4:50:94:dd:07:12:61:42:29:16:97:37:4e:d8:
                    5e:97:23:6b:91:35:5d:d2:7a:80:f8:96:a7:94:64:
                    b1:a3:c8:01:f5:9c:af:23:ff:8f:6d:db:12:f7:5c:
                    62:bb:df:23:4e:c2:79:72:fc:d2:69:81:83:25:7a:
                    32:6b:72:40:02:6e:8a:0f:f2:eb:ee:49:dc:d9:b2:
                    ea:d1:55:d3:76:60:d2:a9:5e:52:32:32:a0:8b:d2:
                    94:a1:80:c8:1a:f2:01:7f:67:4c:50:96:c7:cb:c8:
                    ee:71:ab:08:67:c4:c7:f1:fc:9c:8e:99:bc:05:2b:
                    ce:c2:ae:30:90:08:12:1c:69:ce:5d:4b:61:8a:6b:
                    e3:93:4e:ad:0c:4e:cc:e9:f9:48:a1:a4:aa:9a:2d:
                    0b:40:44:60:52:f1:77:3c:ad:01:e3:94:cd:12:db:
                    39:fe:26:1a:9f:99:4b:13:f1:f1:59:d4:c5:13:93:
                    fd:cb:07:b0:5f:78:d7:04:c5:ad:9d:e5:dc:4f:42:
                    06:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FB:44:C3:C4:5B:0A:5A:A7:C2:9A:1F:4D:14:94:9B:80:2B:DF:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1afca3f-ecf7-313a-80d8-2b7fef6bd2d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.197.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:27:4e:fe:52:e2:c9:21:a3:b8:8e:f3:94:4e:1d:45:1e:2a:
         eb:5e:60:57:5c:5d:cd:61:87:13:84:dc:23:32:21:8e:9e:b1:
         2a:ba:0b:3c:f3:e0:63:78:99:dd:09:d5:bd:59:ff:9c:75:d0:
         dc:12:ea:d4:3e:1b:cd:51:a8:fe:32:dc:f8:82:3b:64:44:36:
         ff:42:e7:23:c1:e9:cc:9a:7e:ae:cb:b8:83:3b:c3:00:98:67:
         83:64:cf:bc:a5:c4:b7:20:2e:45:a9:88:56:3a:cc:38:52:da:
         a8:aa:24:be:ea:a5:9b:66:cb:9f:32:8a:26:9c:da:f9:e2:73:
         02:8b:10:8a:fd:f0:de:2b:90:45:51:f7:c2:46:45:6c:c3:8a:
         3e:de:3d:1f:f1:3e:b3:2f:24:57:16:64:14:52:91:b9:ca:13:
         da:af:19:2b:b0:d0:b6:56:11:72:55:f7:05:02:70:e5:7c:21:
         6e:8f:40:19:fc:9b:df:18:4b:71:c1:e7:3b:4f:8a:b8:96:5d:
         e2:f8:ee:d1:c7:57:42:05:4e:ed:c7:e4:bc:24:cd:00:ec:01:
         b7:89:84:f9:91:6a:19:6d:1f:76:54:4d:f1:70:79:c3:98:94:
         9f:0b:fb:7a:1d:9d:2b:e9:bd:0d:a0:f4:ba:45:cb:a7:23:2b:
         2d:81:79:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:08:44 2025 by rpki-client