Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5dd8b51b-913d-3347-a7e8-4e0e7e239ff2.roa
File:                     5dd8b51b-913d-3347-a7e8-4e0e7e239ff2.roa (raw, json)
Hash identifier:          ZtZY9uMs0Ryc3ujiymDJVSXrgvdWcMB115iPM6fNB/4=
Subject key identifier:   E3:DC:F7:3E:04:9B:C3:CC:8B:20:C6:19:AD:65:8A:CD:6D:21:9D:26
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849C79F769B52CB633EF7CD3700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5dd8b51b-913d-3347-a7e8-4e0e7e239ff2.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.238.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:76:9b:52:cb:63:3e:f7:cd:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=44cf83cd-7515-4e10-83ac-4fb1d86fc62c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:17:29:a2:1d:41:0c:48:a1:8c:1c:04:d5:d4:
                    e2:f2:1a:19:bf:ac:56:11:1f:93:bc:6d:c2:d0:1a:
                    99:84:1f:db:8e:56:79:3e:91:18:9e:49:94:21:6d:
                    a8:8b:a5:44:88:dc:13:67:e8:8a:0d:68:d0:75:37:
                    d5:81:b1:2a:3d:87:8b:9d:8d:80:68:19:c1:0f:13:
                    62:5a:fd:f1:c7:09:10:29:23:7e:36:80:d7:44:c2:
                    91:94:99:1b:1b:3d:85:4e:4b:c9:38:10:34:f7:38:
                    c3:9e:b2:08:f7:23:46:8d:1e:c5:5f:c5:7e:84:d8:
                    15:42:d6:72:1a:a4:a2:08:25:28:e2:54:5d:d2:6f:
                    54:45:0e:b7:5a:2b:ab:d5:5c:11:2b:5f:3a:49:48:
                    c8:7e:94:87:4b:31:d1:9a:9d:20:5a:1c:45:dd:9e:
                    88:6d:11:8b:b6:a8:09:d9:e6:19:0b:50:f4:63:75:
                    82:40:af:ea:de:fc:d1:f7:81:b7:91:cf:58:0f:70:
                    5a:a4:e7:4c:9d:0c:f3:6c:30:4c:8c:1a:0d:93:6c:
                    c2:8e:11:11:3c:75:17:2e:f3:12:ec:44:75:5b:21:
                    19:6d:48:63:ed:c6:e8:0e:52:c9:cf:1d:63:41:a6:
                    38:1c:db:5c:58:a5:85:27:93:2d:45:57:7d:18:1a:
                    54:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DC:F7:3E:04:9B:C3:CC:8B:20:C6:19:AD:65:8A:CD:6D:21:9D:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5dd8b51b-913d-3347-a7e8-4e0e7e239ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.238.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:45:f9:de:cb:7e:c5:3e:c8:8b:cd:7a:2a:24:12:97:51:fa:
         03:78:fb:1d:f5:3c:44:44:1e:94:76:6a:57:81:5b:2b:dc:a7:
         5e:26:4b:aa:28:cb:09:2d:ac:67:46:cc:73:b3:ea:3a:ed:f0:
         df:2b:26:79:06:72:09:9c:a5:f6:e4:7d:2e:18:6a:43:23:e9:
         64:a8:c8:4a:8f:9a:d7:62:69:9e:c6:d9:86:0a:76:b1:c1:69:
         a7:91:29:d3:b4:31:f3:b8:03:31:82:62:e3:7d:73:21:fb:21:
         ee:d0:60:f8:c9:30:78:06:a2:16:12:af:69:46:c2:f9:d7:33:
         f5:76:ee:f6:91:d4:7c:27:d2:1d:f8:ce:66:9d:a6:7c:4c:85:
         1a:d1:cf:26:4c:66:e8:91:3f:3b:3b:cf:5a:be:ef:d4:31:8a:
         cb:01:9a:13:f6:47:ab:27:cc:04:88:b8:a2:06:2b:70:51:0f:
         af:55:47:8d:18:96:43:a4:05:f0:25:25:44:c7:de:41:f3:ae:
         36:34:ba:ad:25:9b:dc:c7:b6:52:46:fb:2b:2b:01:ca:ec:1c:
         c0:5b:47:cf:5b:81:7c:7e:db:4c:8c:eb:62:4e:d4:96:68:39:
         37:33:11:e1:82:d5:02:69:ee:95:14:52:25:1b:c5:05:09:73:
         3c:97:45:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:30:20 2025 by rpki-client