Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/498ba564-e64a-39ef-af13-426d6912bf56.roa
File:                     498ba564-e64a-39ef-af13-426d6912bf56.roa (raw, json)
Hash identifier:          HFqMqNJFeruUk2g12YGabfJpMwhziPBfUoWmNtDaelE=
Subject key identifier:   96:BA:26:22:84:01:51:38:18:99:79:60:A0:4D:8C:F0:46:BC:F7:91
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849B631E747CF9F264A5D315100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/498ba564-e64a-39ef-af13-426d6912bf56.roa
Signing time:             Thu 01 May 2025 19:11:30 +0000
ROA not before:           Thu 01 May 2025 19:11:30 +0000
ROA not after:            Wed 30 Jul 2025 19:11:30 +0000
asID:                     6167
IP address blocks:        174.255.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:31:e7:47:cf:9f:26:4a:5d:31:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  1 19:11:30 2025 GMT
            Not After : Jul 30 19:11:30 2025 GMT
        Subject: CN=1ab1f61d-fb41-4140-9d85-85ccd03f61fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7d:d7:da:ea:2a:9c:4e:a8:b1:74:9d:f1:d7:
                    60:94:b8:2f:9b:15:a9:6a:12:26:83:5f:5e:5b:f0:
                    45:91:49:93:ff:c6:21:4c:3d:82:10:05:bb:74:8d:
                    2a:bf:3b:80:98:df:80:94:f4:14:76:31:1f:39:65:
                    2f:55:d6:40:a6:45:b8:21:0c:fe:5a:4e:f6:e9:dc:
                    68:3f:84:c3:2f:a6:f2:bd:8c:13:f4:c4:84:06:f0:
                    da:14:97:e2:db:97:44:06:b3:ab:8f:61:cb:92:90:
                    4c:97:1c:40:b1:59:ee:f5:ab:c3:79:50:61:a2:1c:
                    83:52:54:6a:4d:14:17:e7:03:f0:9a:54:f3:b7:52:
                    a3:b6:b6:70:49:22:d7:8d:6f:c9:1e:17:25:8a:e8:
                    d1:90:8f:be:90:d8:18:18:e7:2f:92:84:6a:04:0a:
                    8f:24:ac:51:2a:37:c5:e8:c7:2c:ab:a3:c8:d2:c2:
                    32:b2:47:ba:26:ac:2c:2f:b3:eb:8b:fc:a0:8e:76:
                    cc:79:d5:ca:1a:b3:a2:0d:23:20:8b:4a:02:70:4d:
                    ac:a2:64:f0:87:7d:b5:96:1c:ff:8a:95:14:79:ef:
                    a2:37:73:a6:62:f8:4e:e7:bd:c9:ea:7f:0d:94:ec:
                    32:5e:bb:83:68:9a:43:cc:f2:40:29:ef:1d:b8:f1:
                    b0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BA:26:22:84:01:51:38:18:99:79:60:A0:4D:8C:F0:46:BC:F7:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/498ba564-e64a-39ef-af13-426d6912bf56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.255.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:3a:c0:2e:79:fe:ba:bd:87:c3:d6:08:bc:ae:3d:75:51:8e:
         c0:63:d1:6d:ab:dd:bb:8c:4e:b9:fa:d3:47:2c:92:a1:7a:74:
         37:8b:09:bd:0d:d4:16:00:4d:9d:bc:bb:36:de:b0:9c:55:9b:
         18:f2:3d:6a:08:21:8c:f8:dc:e1:e7:27:ff:28:76:c8:80:d7:
         4f:12:24:8e:6f:08:ca:cf:f5:41:4b:e6:cd:6a:c8:54:63:ac:
         c4:66:90:a9:79:a3:03:4d:72:3e:b7:58:f6:12:a8:4c:e3:2a:
         32:6d:d2:28:c6:d1:39:58:5a:9c:63:79:ee:d0:7c:13:c2:ad:
         bf:5d:b3:72:a4:2f:ab:7f:95:2c:84:9b:b6:bd:3f:c3:df:a0:
         e9:ec:ff:d8:75:48:b5:3b:c4:01:98:68:15:16:45:cf:47:34:
         0a:c3:4e:3e:10:10:58:f1:56:86:fb:2b:e7:16:0b:88:6c:b5:
         49:2e:09:ad:92:3b:23:6e:f1:81:34:dd:ab:a7:5b:8e:fd:16:
         ac:2b:4f:3f:d6:ab:5d:79:c3:c4:23:e3:9b:a1:6d:0b:2d:45:
         86:26:d5:67:d2:85:fc:cd:a8:5b:e9:4f:e3:42:75:85:8b:0b:
         45:ad:f7:a3:ec:f6:61:c8:d7:6c:41:e9:87:2c:22:d8:76:09:
         5c:e3:cd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:07:19 2025 by rpki-client