Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/06678aea-69e2-33a7-a0d2-04432ccce437.roa
File:                     06678aea-69e2-33a7-a0d2-04432ccce437.roa (raw, json)
Hash identifier:          xVHBdE+EQgjrhCX0biF9siMidp3d/qw246Iz3qt7npo=
Subject key identifier:   B2:0D:3F:31:E5:46:4D:58:6C:9E:F1:91:AC:18:E7:D3:AA:0E:51:7F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849CE9A7E3ADF1B1347EB4A43C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/06678aea-69e2-33a7-a0d2-04432ccce437.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     22394
IP address blocks:        174.41.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:7e:3a:df:1b:13:47:eb:4a:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=d239bce2-8223-4c69-9abd-d3fbd5312eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0e:2c:60:ee:17:24:e0:26:20:fe:11:cd:9c:
                    1b:30:42:47:4b:a7:06:30:11:65:31:c5:e6:41:5c:
                    51:e4:b6:ad:43:11:d0:4e:0d:aa:eb:ef:ba:48:19:
                    ef:20:66:77:64:c0:bb:10:de:c8:66:25:3f:2d:a9:
                    d0:68:cf:6a:9f:e5:9e:7f:06:c5:69:19:7b:9a:16:
                    f7:9d:bc:95:f7:cb:be:47:4e:8e:e1:ab:24:9d:e3:
                    b8:c0:da:da:28:98:78:94:bf:be:8f:02:eb:94:64:
                    d1:90:3b:c8:a9:76:70:db:6a:67:29:2e:9d:7e:b9:
                    6c:2a:36:1f:02:40:53:47:07:46:84:1c:b7:11:55:
                    d9:2d:60:9a:05:c8:48:fa:eb:0d:d0:77:99:d5:74:
                    90:b4:a1:19:99:2f:88:05:f3:e9:15:b5:b7:df:1e:
                    ae:89:6b:75:af:94:c9:fe:68:ae:78:cb:46:d5:b5:
                    d6:fc:1f:e6:d5:4f:ee:14:b0:cc:7a:8d:96:ed:af:
                    0b:f8:90:f5:d6:ce:ca:c8:75:24:18:78:93:c3:db:
                    58:8d:58:2f:2c:80:f8:d6:8a:2b:e7:bb:4f:3a:67:
                    29:66:0f:ea:dc:47:56:55:3f:99:b9:e0:8c:55:fa:
                    ab:5b:c7:60:5b:36:8e:a0:d6:13:5b:82:30:d2:88:
                    9f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0D:3F:31:E5:46:4D:58:6C:9E:F1:91:AC:18:E7:D3:AA:0E:51:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/06678aea-69e2-33a7-a0d2-04432ccce437.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:15:fc:96:78:33:98:a5:18:6e:5f:9d:b7:d1:18:43:7a:30:
         32:ce:20:0b:fe:2a:45:be:57:17:c1:1d:92:12:ee:c6:7b:ce:
         26:ce:8b:f1:57:32:84:8a:95:21:61:78:82:9b:e5:fb:c2:d9:
         48:25:83:61:2d:e6:a0:d1:00:04:63:fc:61:64:81:1a:95:46:
         86:ea:28:ac:5e:7a:bd:cc:ab:dd:f0:ee:d9:24:f1:16:a3:e6:
         50:67:2b:cb:69:67:41:e3:96:64:6a:b4:fc:c7:1b:12:5a:4c:
         63:53:5f:c8:43:d1:c0:64:1f:0f:b8:98:8f:dc:c6:68:f3:41:
         e0:a3:6f:b4:56:82:a3:1a:ef:c7:9e:ab:43:30:29:62:f9:22:
         e4:1a:8f:a0:fa:32:43:a9:c8:da:5e:c0:82:0d:4d:08:6a:b6:
         90:6f:5e:42:91:61:d6:3f:ad:d5:59:d7:0d:8a:8c:41:38:2c:
         0c:ac:96:4f:01:60:e0:30:e9:f9:18:c6:c6:22:2f:b4:eb:5c:
         bf:d9:4d:86:5a:14:30:35:74:2a:15:67:65:b7:01:d4:43:dd:
         8c:5c:a8:b7:4c:0f:d6:e8:76:01:c1:18:f4:27:11:58:b4:dd:
         76:90:35:fc:66:ca:63:4b:0a:26:cc:19:66:b1:1d:7d:99:b0:
         1b:7f:a9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:29:07 2025 by rpki-client