Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60e3eed3-1d1c-39e6-883f-cd7c8ecd01e4.roa
File:                     60e3eed3-1d1c-39e6-883f-cd7c8ecd01e4.roa (raw, json)
Hash identifier:          QAZjZt31sY7/6rQBeNppWom/2Oi2zPcDaVuz9BWaf2I=
Subject key identifier:   F0:9D:D6:58:C5:F2:68:99:E9:7E:61:71:8B:EC:9F:2C:17:2C:FD:63
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849A089D7D087247266DA82B780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60e3eed3-1d1c-39e6-883f-cd7c8ecd01e4.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.199.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:d7:d0:87:24:72:66:da:82:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=687829fa-5a10-4f83-9e2f-7dba331ff01a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:40:1f:dc:f9:56:05:4b:7d:c7:9f:a2:d8:21:
                    bb:6c:6f:59:bc:ef:90:87:2d:fb:ae:c3:2e:63:95:
                    da:43:3d:36:ee:56:47:3f:fe:38:1b:df:af:19:69:
                    a4:5a:56:7b:30:1c:b3:4d:06:79:2a:be:a1:50:2c:
                    a8:3f:5c:ff:01:87:22:1e:c8:85:c6:9d:97:15:8f:
                    c7:7a:26:9b:fb:5e:8c:30:04:cc:34:fc:52:65:0f:
                    19:03:72:53:28:3f:e0:de:cf:f1:cb:fc:17:ba:9b:
                    b4:ce:5b:9e:63:d0:86:8a:c7:b7:19:4d:c8:36:d7:
                    26:55:3f:3e:2f:8b:4a:6d:66:88:45:f4:9b:4b:14:
                    e2:1b:47:29:c8:bf:24:d4:0a:39:23:bc:8b:cd:94:
                    31:8c:e5:15:57:2f:fd:f4:ec:5b:38:33:98:4c:80:
                    ef:a6:fd:ff:80:91:de:4b:26:8e:03:c0:51:18:d7:
                    12:89:44:f5:08:37:60:cb:94:ac:81:99:de:a9:22:
                    03:a0:54:a4:fb:70:50:79:47:8e:87:b8:22:b5:09:
                    db:d7:18:03:ac:4d:c2:90:b7:ad:af:42:a9:65:1b:
                    1c:a6:1f:e5:17:7a:9a:09:b0:7e:0b:50:b3:67:ee:
                    af:b4:79:98:e5:82:af:26:95:81:79:a2:41:59:66:
                    14:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9D:D6:58:C5:F2:68:99:E9:7E:61:71:8B:EC:9F:2C:17:2C:FD:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60e3eed3-1d1c-39e6-883f-cd7c8ecd01e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.199.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:c1:4a:ea:1c:6d:09:28:52:65:df:d8:4a:70:0f:1f:5e:17:
         66:87:75:50:f9:99:ec:d8:4f:10:1f:2a:f1:1f:47:12:e6:16:
         6b:a1:17:24:fa:b3:7e:9f:07:17:d1:ef:80:3b:57:be:1a:3a:
         4b:5c:5f:b2:35:b6:07:95:f6:6a:17:06:25:d5:64:3a:ae:e3:
         47:01:af:d9:8b:f6:ae:42:e3:43:62:eb:c2:20:ae:e9:af:60:
         b5:95:3b:20:7a:99:66:aa:1d:c1:92:0a:ba:ff:39:60:d4:83:
         2b:69:d4:ae:8f:ef:a9:01:63:97:f5:8d:a7:fd:ba:6a:15:be:
         05:44:d3:d2:65:27:45:f6:c5:dc:3b:75:bf:6a:6d:5e:51:d7:
         a8:97:27:cf:32:2a:b4:2d:f4:d3:30:c8:29:af:5c:86:1c:d7:
         f8:d5:ba:1c:53:fd:dc:6d:4a:a0:3d:6b:db:7d:a8:56:05:3e:
         b8:fc:e3:7d:6b:ba:92:da:a1:cb:7d:57:3a:b7:79:25:01:2b:
         b7:53:68:a3:36:cb:44:3a:af:10:85:16:08:1f:f8:73:3a:31:
         13:b4:0b:00:55:eb:a6:43:22:ff:2b:ae:19:be:a5:20:f9:e2:
         01:b7:4d:b9:24:6c:5b:3e:24:6a:56:5f:22:2b:ae:22:7f:b9:
         35:74:d8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:38:52 2025 by rpki-client