Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a4c0bc4-ffd5-3c42-90ad-9ef3c399dc6a.roa
File:                     5a4c0bc4-ffd5-3c42-90ad-9ef3c399dc6a.roa (raw, json)
Hash identifier:          OAeOVWubNaixzUp5nImY5U+MZluDWXoFyACYABlvRZk=
Subject key identifier:   83:C0:6E:96:EE:2D:49:66:F1:E1:BA:89:23:93:FD:AC:A9:7C:92:74
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A126D43AE8B16252E3A9E4D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a4c0bc4-ffd5-3c42-90ad-9ef3c399dc6a.roa
Signing time:             Tue 03 Jun 2025 20:05:28 +0000
ROA not before:           Tue 03 Jun 2025 20:05:28 +0000
ROA not after:            Mon 01 Sep 2025 20:05:28 +0000
asID:                     6167
IP address blocks:        174.252.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:12:6d:43:ae:8b:16:25:2e:3a:9e:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  3 20:05:28 2025 GMT
            Not After : Sep  1 20:05:28 2025 GMT
        Subject: CN=e08e6f70-f7e5-41b9-a114-e6878599ceda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7a:a1:b1:7a:34:21:3d:be:d5:fb:10:e7:c6:
                    a8:e9:8b:a4:cc:51:23:53:19:da:72:06:e2:31:d5:
                    f7:ca:b9:e4:07:5b:96:71:79:33:78:d4:31:a6:0d:
                    16:65:69:c4:2c:b2:6f:eb:20:f3:c0:33:39:9f:a8:
                    84:42:8c:2a:1e:1b:5d:41:91:71:79:c0:8b:41:b8:
                    74:b0:f2:d5:f9:be:33:1b:46:f5:72:b5:6c:42:14:
                    13:12:18:30:bc:21:06:77:f5:db:40:00:76:7d:86:
                    35:e7:20:ac:e8:60:3e:a1:53:45:76:a0:be:15:93:
                    12:f5:79:79:f6:2b:9c:61:61:84:c8:53:b6:71:b6:
                    6f:e3:2b:6e:b9:bd:70:f2:bb:4b:40:fe:e1:f7:b6:
                    ee:b7:df:12:f8:57:57:e5:c1:06:6d:ef:fb:8b:65:
                    cd:7f:fc:47:91:ce:6d:72:65:b8:f3:ae:74:41:88:
                    18:62:fd:4a:e5:38:6b:e8:99:d3:1b:62:f0:fa:68:
                    cd:1f:4f:e4:4a:5d:8c:07:39:e6:23:c6:36:1f:3a:
                    c9:ff:ab:23:17:a8:41:c7:d2:2b:67:61:71:20:81:
                    3b:f7:0e:03:65:0c:1b:56:aa:7c:44:c3:1e:ef:e0:
                    6a:a2:30:71:77:9f:c7:69:85:56:23:0d:25:85:1d:
                    de:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C0:6E:96:EE:2D:49:66:F1:E1:BA:89:23:93:FD:AC:A9:7C:92:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a4c0bc4-ffd5-3c42-90ad-9ef3c399dc6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.252.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:ce:c3:b9:ba:b0:d1:87:26:33:8a:80:61:fa:41:fb:9e:22:
         82:c6:b7:4a:62:05:19:19:9f:06:8a:d2:34:0f:3a:31:f7:bf:
         5d:db:ec:cf:5a:fb:06:77:e0:7d:fe:6d:c5:2f:53:30:a1:de:
         87:f4:4c:9b:94:0f:78:70:95:39:8c:81:ca:f0:29:3c:9d:41:
         83:dd:b9:ae:48:a0:bd:c9:14:c5:1b:3a:9b:58:cf:17:ef:8b:
         da:17:53:d3:f0:57:20:70:47:bf:ec:07:cc:7f:64:16:85:7a:
         21:22:7a:67:df:6b:ec:62:e7:6a:39:ca:c8:e0:14:bd:72:c4:
         4b:49:0b:7f:01:db:8b:2c:cc:07:75:1b:33:02:ae:c1:b8:51:
         4e:b3:7f:27:13:8e:c6:04:b7:bf:66:8a:46:1b:cb:88:76:97:
         c9:95:49:b4:a5:b5:b0:47:92:45:b5:d8:7e:a2:ed:b5:9f:91:
         1f:eb:12:0d:e4:eb:6b:50:74:0d:99:80:b1:74:a7:de:b7:22:
         84:18:cc:0d:29:27:9f:47:3f:81:90:ec:6f:58:59:64:de:ce:
         9b:cd:a6:a1:52:6f:78:a3:1d:7d:6e:72:15:55:4b:06:d8:18:
         87:32:1d:40:62:6d:b3:81:c7:d6:91:bf:ab:7f:15:e2:16:4a:
         73:11:9c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:48:54 2025 by rpki-client