Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/13e63b82-d55a-3829-969d-f66b538b2474.roa
File:                     13e63b82-d55a-3829-969d-f66b538b2474.roa (raw, json)
Hash identifier:          JA6/ZZ/YG8qMk09hcc0BH0zkRnSR/3X+MsRLY3TPrZ4=
Subject key identifier:   EC:0B:BA:65:B5:7C:5D:FB:28:8A:AD:69:72:C6:9C:2C:7D:A3:18:1B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849CE9A72A5093554031FCFA040
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/13e63b82-d55a-3829-969d-f66b538b2474.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     22394
IP address blocks:        174.41.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:72:a5:09:35:54:03:1f:cf:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=e25fdcfb-60d4-4c2e-911f-4cf6408bf057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ae:39:b1:a0:71:4e:d3:e7:e8:65:59:b5:27:
                    ed:3d:de:29:18:28:0f:0e:07:86:56:bf:3d:a6:e3:
                    92:5e:5c:c8:90:c0:7d:9c:66:07:d6:75:a2:51:ab:
                    0c:c6:b7:95:3c:ef:a4:19:2c:6b:8d:5c:d8:c2:0a:
                    f8:d8:ef:4b:e3:39:9a:b8:b2:19:40:e1:ce:85:4f:
                    be:43:b7:f5:d4:09:94:3f:43:9b:cb:b6:60:c6:e3:
                    ed:c2:47:a0:69:20:37:ef:f4:b0:7f:74:c3:20:dc:
                    5b:d3:df:6d:de:74:9e:43:87:2c:42:ec:6c:f8:2b:
                    b6:6f:b5:07:19:0f:42:cb:6a:bf:ea:38:14:b8:47:
                    e7:90:54:f0:d0:36:e0:1a:22:fa:86:d8:0f:20:f4:
                    2a:60:3e:e7:8d:0b:f7:c2:60:bf:86:c8:bb:55:0e:
                    85:2b:c5:8f:b5:6c:87:45:6f:80:15:a4:8d:18:a7:
                    e6:a6:5b:4e:f0:59:d6:04:4f:ac:f3:00:5d:81:83:
                    1f:b7:68:b0:00:88:d5:04:64:fa:00:66:1f:14:9f:
                    7e:12:9e:8c:4e:fb:ee:10:7a:96:6e:66:85:db:90:
                    df:4a:a6:d8:18:8a:71:b4:e2:63:b2:05:a0:88:2f:
                    48:43:1b:86:63:ff:4b:d7:01:9f:d4:39:43:03:3e:
                    f8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0B:BA:65:B5:7C:5D:FB:28:8A:AD:69:72:C6:9C:2C:7D:A3:18:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/13e63b82-d55a-3829-969d-f66b538b2474.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:3b:3c:41:26:fc:66:b4:0f:0c:cc:11:25:64:1a:a5:6e:df:
         ff:49:6d:3c:64:2b:3c:62:a2:80:98:00:a8:d1:7b:1d:8a:84:
         3d:12:56:63:75:64:6a:30:c8:89:cd:7e:43:2d:1f:d3:62:0f:
         c6:b3:19:29:9a:e2:01:54:e5:05:1e:12:5f:f6:6d:10:6a:7e:
         35:6c:d9:67:07:1b:6c:af:43:60:00:6e:3f:cc:d3:12:0f:d0:
         44:d3:ae:fb:13:c4:27:26:05:78:b7:68:5e:fb:34:6e:5a:fa:
         06:8e:02:d6:53:df:c5:98:4e:25:cf:ac:db:20:bc:0a:9f:13:
         bc:3b:7d:47:38:1d:4e:31:93:2c:c3:22:6c:48:5a:0a:63:08:
         41:75:51:e9:79:78:cf:78:ae:0a:37:0c:03:31:23:83:b8:77:
         97:15:72:71:24:a1:20:ca:d1:9d:f7:41:82:2c:b5:a8:6b:67:
         b5:ae:f8:f7:bc:97:13:fd:b0:8e:3d:8d:88:43:37:d1:97:d5:
         e8:34:93:ab:cf:38:b4:00:64:b4:50:00:37:e5:fd:87:6a:33:
         cd:72:e6:59:6a:96:cd:e0:d9:03:ce:9c:88:80:12:65:e4:7e:
         10:56:a0:d8:e5:e7:53:06:3e:a1:bb:e2:a4:d0:e0:13:76:8e:
         6f:a2:2d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:27:12 2025 by rpki-client