Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f5f54541-662c-3c41-bbf1-347cd376e146.roa
File:                     f5f54541-662c-3c41-bbf1-347cd376e146.roa (raw, json)
Hash identifier:          QtGV8EzBUL2JRd+jxelxXxbfAuhePdgSj/5fsYHAkZc=
Subject key identifier:   9F:2F:B2:B3:E1:12:C3:45:62:12:A1:A6:4C:4C:99:1F:CE:DC:05:33
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849EA8525D31C4EF9F83E1F6580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f5f54541-662c-3c41-bbf1-347cd376e146.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     701
IP address blocks:        74.106.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:25:d3:1c:4e:f9:f8:3e:1f:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=d09334d5-3226-420d-b4f8-8cbcd113a570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8e:cd:c0:5f:4d:96:5a:45:ab:43:fd:8b:cf:
                    4c:24:8e:69:26:39:5d:98:a2:e4:d0:d3:f5:55:74:
                    1f:9b:eb:75:a6:cf:28:25:10:50:db:f5:12:9c:df:
                    49:9b:38:7d:58:39:bb:25:7c:04:b4:41:37:78:d6:
                    4b:c0:22:9b:1d:49:5b:35:07:06:9f:61:8d:7e:d0:
                    1b:2c:98:3c:eb:33:f2:dc:27:a9:d1:39:14:de:5e:
                    93:d6:64:4a:13:20:13:5b:14:98:ab:e5:2f:d5:95:
                    8c:e2:90:08:3e:5e:60:28:05:19:41:20:0d:73:04:
                    2e:0a:4b:15:cc:10:59:3a:97:d3:ec:9d:ab:2f:f4:
                    d8:de:17:93:4f:aa:21:d3:f0:1c:01:28:0d:3b:db:
                    03:b4:1c:fe:b0:f6:4b:92:2d:5c:0b:12:f8:97:23:
                    fe:9c:50:91:ae:5a:83:f7:d8:1d:10:56:78:13:af:
                    85:09:c6:df:f0:73:2a:e9:ba:5c:47:70:8f:bb:35:
                    f0:ba:73:4c:d0:ec:2e:c2:3d:57:cf:c8:5c:f9:6d:
                    44:26:4e:8c:c8:2d:8d:cd:0b:a2:b2:a4:41:3d:66:
                    8e:9e:ec:b7:a5:9c:ee:ca:ec:d2:54:f6:d5:88:9c:
                    34:0c:4e:2d:96:d7:0d:47:7b:d4:f1:3d:7d:d1:38:
                    a0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2F:B2:B3:E1:12:C3:45:62:12:A1:A6:4C:4C:99:1F:CE:DC:05:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f5f54541-662c-3c41-bbf1-347cd376e146.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.106.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:15:4a:d0:98:52:f4:3c:09:71:ff:34:57:6c:0b:7d:9e:83:
         e3:eb:ee:54:e0:83:cd:74:03:02:7d:a7:21:cb:53:8d:6d:d4:
         a0:8d:4b:26:bc:4f:9b:88:0d:ee:42:1d:49:5a:80:6d:05:4b:
         9d:02:87:ea:f7:cf:53:0e:d6:b3:eb:02:18:79:1d:81:d7:dd:
         23:65:0d:9f:a9:97:49:7e:19:d9:ee:dc:9d:8e:e0:2c:5c:4c:
         05:02:d1:00:dc:00:9f:a2:6d:2e:23:d5:e5:e9:57:a7:87:85:
         79:25:60:58:4a:a9:b5:e9:53:f6:01:90:13:68:5c:f9:7e:9e:
         7c:62:85:32:02:af:50:5f:08:c7:a9:2c:ac:05:a4:dc:78:a9:
         0f:f2:2b:65:6e:48:0c:b5:aa:ea:be:be:48:0e:8f:26:bf:73:
         7b:45:c7:71:db:17:4a:84:6e:47:f7:b3:01:74:c9:13:1d:e9:
         74:f9:62:78:86:3f:c5:64:b8:ff:ab:73:08:eb:06:e2:9f:08:
         5a:45:f2:19:b6:a6:d5:49:90:d1:89:26:18:7e:d5:2c:76:5e:
         67:41:51:57:54:65:d0:e6:3f:ec:42:82:02:5f:33:5b:14:39:
         98:a2:80:ca:ca:52:da:de:dd:1c:7a:06:57:2f:dd:0e:78:4e:
         e1:53:17:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:05:12 2025 by rpki-client