Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67a49580-9049-3a8a-9d15-8cebbb7e9659.roa
File:                     67a49580-9049-3a8a-9d15-8cebbb7e9659.roa (raw, json)
Hash identifier:          pTXiF0ofGz2mZUwfoU83JJYq3yUP9nJGl1ezfVylAHw=
Subject key identifier:   5F:3B:98:18:0F:8A:A7:A4:CE:C2:3B:9B:4C:57:C5:99:73:AA:F4:89
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849B9A9FB5E44B96B6E4D881710
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67a49580-9049-3a8a-9d15-8cebbb7e9659.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     3855
IP address blocks:        199.172.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:a9:fb:5e:44:b9:6b:6e:4d:88:17:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=e55f3091-d245-4af9-ad14-fda79ca45e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:07:2c:5d:36:6a:93:96:75:75:35:ae:2e:59:
                    ae:99:42:3f:ff:22:28:7b:a9:9b:5b:3b:36:98:1b:
                    be:0f:a0:06:9c:bf:f2:7d:c6:ce:63:f6:c5:17:25:
                    cb:02:e9:9f:2a:bc:10:24:93:34:e4:1a:a6:f7:a5:
                    61:62:44:63:d4:41:4c:2a:a5:14:3b:7e:6d:4e:63:
                    b7:c0:e7:e1:bc:ee:40:6d:2a:f1:75:98:22:6d:72:
                    ec:55:7c:a7:b5:66:1f:e9:66:30:49:b6:5d:4e:74:
                    9c:d2:9d:a2:4a:9c:1f:9b:3b:4b:93:0a:3b:01:14:
                    98:ec:35:3c:62:bf:75:95:2b:0a:50:9e:b3:2a:1d:
                    dc:12:9e:db:bf:af:1a:c4:f7:fc:2a:ca:c1:b6:7c:
                    69:56:42:b9:34:cc:c3:12:35:16:7a:bc:77:98:80:
                    0e:d4:9e:6b:e8:bb:f8:70:0f:e9:d2:b0:25:ef:e4:
                    00:ad:71:23:9e:02:c4:3e:3f:26:fa:47:96:e5:6a:
                    c2:5d:7a:5f:5d:4a:3a:05:4b:1a:80:53:4e:8a:2b:
                    9f:2a:56:e6:ea:fd:cb:d8:65:93:1f:e8:b5:e9:ee:
                    4e:d4:cc:eb:91:45:72:91:da:87:b8:ff:cc:10:e1:
                    57:99:c8:9a:73:49:e5:34:e0:d8:7f:6a:bc:9c:56:
                    0e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3B:98:18:0F:8A:A7:A4:CE:C2:3B:9B:4C:57:C5:99:73:AA:F4:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67a49580-9049-3a8a-9d15-8cebbb7e9659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.172.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:c8:56:02:ec:9d:b7:98:17:09:96:5c:35:77:ab:b0:59:1b:
         c0:73:fe:34:12:10:e5:dd:6f:2b:32:8e:e2:e8:38:df:53:b3:
         47:3a:b0:c0:b6:fe:39:05:5e:05:d8:f5:ec:1d:bb:41:7a:94:
         59:66:9f:5a:63:97:f0:6e:7f:77:e8:44:6f:d3:36:eb:38:ce:
         3b:08:a3:1f:fd:71:37:66:f1:8e:c7:e4:c2:18:33:0c:6d:35:
         53:fc:f2:89:16:17:8e:ef:dd:da:5e:d2:ce:8c:cc:13:b9:39:
         d1:fc:90:03:5a:23:eb:cd:cc:f0:ee:42:c6:91:22:2f:00:76:
         09:db:5d:e4:02:78:9f:0c:6e:4b:77:39:57:62:e9:90:7f:8c:
         e3:ed:11:2e:17:0e:77:a2:6c:c3:1c:6c:2a:93:d9:61:eb:39:
         43:b3:e4:25:25:be:55:bf:99:93:92:bc:59:87:ee:19:c6:91:
         55:af:82:71:62:e2:c5:c9:d6:ad:c1:56:71:e7:96:3e:c1:33:
         d1:13:e7:f8:40:27:3e:96:23:c2:20:35:62:96:2f:78:fc:52:
         7f:f0:1d:86:ea:f2:57:85:e3:c1:7e:6d:f0:98:5b:50:bc:ac:
         49:58:86:17:63:38:6d:72:10:f3:c3:d2:1a:ac:00:d6:2d:e6:
         16:85:35:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:36:35 2025 by rpki-client