Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f75bf140-96bb-39c6-9751-302d7120307b.roa
File:                     f75bf140-96bb-39c6-9751-302d7120307b.roa (raw, json)
Hash identifier:          2o51Mwd4eYdxcr3LmpfD64RIX+j4QINhkY0qjxEaakQ=
Subject key identifier:   CF:D7:7D:FA:97:08:FF:39:F8:26:14:A0:25:96:91:49:0C:D1:1C:60
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849A089EDBF91A8E966FA528FC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f75bf140-96bb-39c6-9751-302d7120307b.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.213.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:ed:bf:91:a8:e9:66:fa:52:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=a9eab52a-d798-4e13-86ff-24cae9ffae1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8f:fb:cb:6b:80:ec:41:44:1b:a9:68:4f:f9:
                    5f:ea:7d:e0:a3:57:02:8f:cb:3d:88:25:93:8d:91:
                    81:50:ad:2f:6e:6b:6e:83:9f:df:f8:67:bd:98:76:
                    8d:8b:a7:03:aa:38:2f:37:80:0c:5e:b6:9d:bb:84:
                    de:25:17:12:9e:b8:e5:e9:60:f3:64:5a:fe:50:ef:
                    84:78:c7:a6:c2:c6:c5:bb:97:37:7e:ec:26:75:73:
                    c0:f1:90:1a:75:53:00:22:45:bd:53:62:ce:51:59:
                    90:51:59:d4:42:af:e5:4c:9f:fa:e9:56:cb:8e:b8:
                    01:00:6f:7f:6d:97:a7:68:61:0f:55:03:86:df:80:
                    ed:5c:4c:0c:9f:bb:b6:c4:d0:7c:41:3d:c0:8d:f8:
                    94:16:72:bc:c9:2e:3c:19:10:d7:d4:b7:f7:d5:87:
                    73:e3:a0:4f:a0:fb:1e:da:89:25:17:77:d8:fc:04:
                    d2:ca:b9:9b:64:a1:46:02:9f:2f:c9:cf:91:39:55:
                    f1:29:6b:d8:77:d0:4b:67:18:48:05:2e:71:0e:5c:
                    fd:94:f4:4e:ff:19:78:35:4b:6c:a2:f5:53:29:71:
                    1f:6b:c3:49:1c:e8:80:ef:47:46:e9:83:57:28:74:
                    7d:27:d4:d6:86:f1:f4:ce:5d:26:37:1c:5d:c3:f4:
                    23:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D7:7D:FA:97:08:FF:39:F8:26:14:A0:25:96:91:49:0C:D1:1C:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f75bf140-96bb-39c6-9751-302d7120307b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.213.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:1a:f5:f3:93:8a:57:6c:46:55:ae:3a:9b:c7:b7:f4:79:73:
         69:e8:0d:ab:2d:a0:12:ff:b1:82:6d:8c:11:9a:54:60:88:36:
         ed:5c:73:ee:07:81:0f:61:8e:a1:32:ec:f2:d5:28:a6:3f:3f:
         7d:27:2a:9d:cd:41:83:03:80:1b:65:f8:4c:28:89:ca:63:aa:
         8f:f0:14:fe:e0:18:a2:d5:0c:06:67:32:c3:0c:1e:d1:d4:1f:
         21:54:3d:f1:24:dc:fa:2d:9c:8a:16:73:38:74:7e:ed:dd:2b:
         4e:d5:63:e2:15:13:dc:5a:33:50:b2:9a:f1:5e:1f:a8:09:97:
         fd:e9:8e:2c:97:bd:88:84:7d:a7:d3:8a:2f:68:22:da:72:1c:
         72:7a:98:93:cf:ba:0c:96:13:bb:0b:2c:0a:23:f0:47:78:34:
         e0:42:f1:c3:f2:0a:01:70:76:38:c9:d5:bd:44:0d:f5:24:62:
         d9:34:a3:07:8a:1c:cd:aa:56:7f:e2:6b:fd:97:19:46:72:9f:
         46:03:96:2b:6b:f6:17:d3:b6:50:64:1a:7c:01:43:fe:a7:63:
         01:3c:d3:23:21:d3:02:97:9f:f6:cd:bc:34:45:d3:76:f4:dd:
         21:0f:5f:c9:70:a9:dd:d0:33:2c:00:37:77:97:18:87:83:77:
         e6:91:5d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:20:31 2025 by rpki-client