Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2645697-db8f-3588-acac-63f2e2e4c528.roa
File:                     e2645697-db8f-3588-acac-63f2e2e4c528.roa (raw, json)
Hash identifier:          G2WgHntZh2qDduONwwWcwPBlQ4iuT2v2e3mDAzoDr/g=
Subject key identifier:   04:C2:01:A7:D9:51:ED:66:A9:FC:B9:09:82:5B:A6:AF:CA:6A:50:D2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849A089DC6D379491ED954A6580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2645697-db8f-3588-acac-63f2e2e4c528.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.207.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:dc:6d:37:94:91:ed:95:4a:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=d992bfb7-46d4-4086-8ebc-216932b00055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:87:ee:f7:4e:c8:ca:84:79:2a:00:95:d5:45:
                    f0:04:ad:cd:30:5c:6b:aa:29:84:08:f6:61:90:25:
                    db:f9:a2:8b:af:71:26:19:ad:16:aa:f3:c0:7b:6b:
                    ed:cf:88:e5:a0:92:20:e2:18:3a:fa:16:72:8d:14:
                    94:e4:b3:cd:72:8a:ce:ec:2d:d3:c8:55:d2:8b:c7:
                    f4:aa:35:60:8b:08:03:a8:c0:80:5c:fd:3e:8a:86:
                    55:6c:76:f2:c6:c4:f1:dc:a6:e2:18:f5:a8:a9:cf:
                    47:dc:b8:97:bb:16:cf:1a:3e:78:ab:dc:a3:41:2b:
                    ab:4d:59:12:a8:72:97:1d:78:cd:23:07:a8:01:75:
                    39:20:24:b7:dd:1f:90:8c:98:46:31:2e:47:b5:5a:
                    a1:81:40:7b:9e:13:79:93:46:ef:0b:8e:32:9f:c9:
                    b1:b0:bb:15:be:8d:16:cc:8a:df:d2:6f:b9:1a:68:
                    ea:3a:e4:ea:9f:14:7e:3d:d1:cf:1d:84:31:19:bb:
                    32:2e:c1:3a:c0:ec:77:39:bc:80:88:c1:20:00:90:
                    f1:cf:ff:8d:3f:4f:9b:3a:14:c4:a8:a7:88:d3:34:
                    f1:ec:8d:9f:ff:9c:22:53:2e:a7:35:7b:5b:1d:a9:
                    a9:aa:fd:ba:1f:88:bb:58:4b:e4:fc:b4:8a:ab:c3:
                    eb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C2:01:A7:D9:51:ED:66:A9:FC:B9:09:82:5B:A6:AF:CA:6A:50:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2645697-db8f-3588-acac-63f2e2e4c528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.207.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:e3:38:3e:10:ed:06:cc:52:4d:8c:41:be:17:15:6f:3c:d2:
         3c:99:2d:21:54:f0:28:f7:e0:ff:18:ab:fb:e4:7c:44:ab:a0:
         b6:38:73:3a:04:6c:7b:55:fd:ac:e9:4a:fc:cf:d1:1c:e1:47:
         e3:84:09:cf:6c:f3:cd:5a:1c:fc:fa:30:99:8f:14:98:a3:98:
         e3:d1:76:d8:bb:06:24:8a:aa:d0:af:3f:43:f0:d1:d6:33:3e:
         b6:01:6c:52:cd:f5:65:89:b5:a6:ac:ec:c1:96:25:5c:cd:9c:
         82:86:17:2e:b8:a6:99:e6:5d:1d:b8:55:92:c5:8a:93:ef:50:
         65:f9:b3:a1:58:45:6a:50:a0:7d:b6:9d:23:0a:29:32:c7:7e:
         60:58:e2:02:eb:ed:e8:5e:be:68:42:e1:9f:83:09:3b:3d:cb:
         25:94:58:78:df:92:e6:da:79:76:12:54:82:b9:77:30:8b:4a:
         9e:2e:b1:c9:9b:ae:8d:d3:62:52:4d:c5:bf:f1:e4:21:9d:22:
         95:c5:95:91:18:79:38:6a:dc:95:a0:59:d6:d5:09:06:75:47:
         18:3f:03:d8:de:9e:81:99:00:48:3b:4f:1b:5b:be:ac:9c:3b:
         1a:2f:45:41:14:17:3b:08:b6:ba:db:ae:99:f5:14:32:b5:3a:
         0a:61:7e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:49:16 2025 by rpki-client