Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18ee75ad-e87b-3fd8-a2c1-e04e1e8e7552.roa
File:                     18ee75ad-e87b-3fd8-a2c1-e04e1e8e7552.roa (raw, json)
Hash identifier:          XBx5UcZBvOaVGuER5DNyLQ8qO9E6bNydlBVzqHsQlho=
Subject key identifier:   C7:AF:C4:7B:F8:4A:5D:A8:DE:04:AC:37:F5:0F:81:21:47:10:22:5C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849A089DE7E50DACBFBA0D45100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18ee75ad-e87b-3fd8-a2c1-e04e1e8e7552.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.213.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:de:7e:50:da:cb:fb:a0:d4:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=82baa444-11d1-4263-8a62-14b2578ce315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:3e:4d:60:fd:91:04:dd:2a:92:a9:ee:72:07:
                    67:67:ae:c0:c7:4b:c0:94:76:06:f5:60:09:5d:6e:
                    db:80:2d:82:de:a8:78:d2:59:f1:83:ac:4b:8a:dd:
                    a6:2d:8f:5e:27:50:6b:f4:27:95:89:3d:2d:12:ad:
                    eb:44:b0:ba:44:80:b1:a9:9f:82:23:15:01:93:46:
                    d0:a2:49:9c:24:76:99:47:c3:42:d7:9c:cc:d2:6f:
                    f6:1c:5c:37:e1:7c:55:22:69:2e:ee:3c:fe:95:24:
                    c7:4e:34:47:1c:4f:1f:9e:0b:c4:32:20:f0:85:df:
                    c0:20:a8:36:74:01:d0:cd:4d:70:48:6c:80:c6:1e:
                    e9:27:71:6b:28:d6:05:20:d0:b7:08:89:e9:63:4b:
                    31:da:39:b4:f9:79:5f:21:95:d8:bc:cd:fc:d8:ee:
                    b0:d1:e8:b6:11:09:d9:40:d5:4a:e8:af:eb:14:55:
                    ec:2e:11:88:e6:5a:ed:88:fc:5e:1a:07:4f:3c:4b:
                    b5:98:55:1b:e9:78:34:7f:5f:67:11:45:64:43:9a:
                    e7:89:58:dd:37:fd:1c:5a:4b:0f:46:ab:5a:66:d2:
                    2c:d0:ed:50:b8:50:4b:98:ce:b2:25:d8:fb:85:69:
                    7d:3a:09:44:0d:f6:d5:e8:ee:9f:1c:ec:ba:56:77:
                    53:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:AF:C4:7B:F8:4A:5D:A8:DE:04:AC:37:F5:0F:81:21:47:10:22:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18ee75ad-e87b-3fd8-a2c1-e04e1e8e7552.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.213.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:6b:53:96:91:ac:e0:90:2a:1b:26:77:72:4a:46:fe:2c:9d:
         05:bc:bb:1b:8d:b5:f5:39:bc:ff:c4:c2:40:80:89:dc:c7:50:
         36:19:86:c1:22:75:34:02:e7:d9:09:fa:ff:df:29:18:c4:97:
         41:44:1c:46:32:0c:90:7d:21:3d:94:c4:9e:e1:ea:29:f6:00:
         2f:aa:7e:94:c2:28:84:a8:64:c7:51:24:97:74:c4:5e:f5:36:
         bd:80:b3:07:94:c0:c9:c8:79:c8:c2:45:28:3b:ab:e6:51:57:
         da:7e:e7:28:fe:44:7f:f7:f3:18:e7:48:e1:45:59:67:a4:f7:
         84:49:b0:34:0e:09:f7:de:b6:0c:9b:62:d6:8e:03:03:14:64:
         45:18:c3:06:a0:a6:1f:d9:94:ea:53:51:45:db:14:25:d2:e0:
         e1:b5:e1:c2:3e:98:e1:0f:0e:0f:ae:36:aa:0b:ff:27:d0:ee:
         28:a5:6f:74:12:8c:5e:1a:f4:d4:01:d0:c7:11:c8:5e:3e:49:
         ff:67:f4:19:02:14:49:09:b1:fd:e9:5e:db:cc:93:37:de:b2:
         d9:5d:b0:5c:44:77:13:02:26:63:76:31:fe:5f:ba:5f:c9:0d:
         94:09:dc:74:d8:42:09:ac:3e:43:f3:57:b8:aa:e2:01:c1:28:
         ca:8a:31:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:47:21 2025 by rpki-client