Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/783b09c2-6dfd-34f5-8397-c800782902c0.roa
File:                     783b09c2-6dfd-34f5-8397-c800782902c0.roa (raw, json)
Hash identifier:          LXh6BlYlFC2G8QC7E4Zh85AQjlsxYke+3rWWLWj+qNY=
Subject key identifier:   FD:5E:27:5C:14:E0:C0:CD:1C:EB:88:A3:A0:98:B3:5C:B0:F3:E7:71
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849C79F778EB62DBD42535BFE00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/783b09c2-6dfd-34f5-8397-c800782902c0.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.240.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:77:8e:b6:2d:bd:42:53:5b:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=26341c82-0538-49eb-9cbb-41326f0deae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:22:08:cf:b3:3e:d4:b3:b4:62:83:cf:65:7b:
                    4d:0f:bc:da:c7:81:92:f6:5d:38:24:86:62:84:29:
                    d7:8a:32:20:c2:29:31:4a:f9:0a:61:66:b7:c9:4f:
                    26:1d:7e:12:98:8b:86:79:2b:43:67:a5:49:0d:4b:
                    5a:6e:3c:30:3b:ec:bf:91:d9:92:5e:3b:06:d1:31:
                    6f:92:92:1c:3a:52:65:ab:3f:1b:51:4e:19:55:7b:
                    61:86:aa:25:6c:8d:27:2b:d9:a8:99:dd:7c:46:a4:
                    82:99:65:cf:1b:a9:d2:ac:8f:dd:be:4e:b1:1b:a4:
                    c2:cb:38:84:0b:df:5e:4b:f2:32:d7:c1:d1:f5:0d:
                    65:e3:d6:2b:7e:4f:44:3e:f7:f2:e2:f1:38:bd:e5:
                    7a:3b:63:74:2f:ef:27:d9:00:b2:a1:0d:66:8b:22:
                    cf:65:1d:ec:9e:59:41:fd:73:56:5f:dc:93:68:c3:
                    15:04:14:30:a8:45:21:7e:07:9a:aa:ae:fa:d9:db:
                    5d:f5:2e:dd:b2:2d:d5:95:9f:80:c9:5e:4a:8a:08:
                    6e:51:8b:5b:2f:83:96:16:98:38:c6:50:19:7a:ed:
                    be:e9:61:74:09:ba:c0:da:3b:5c:7c:73:e3:0d:bf:
                    60:52:f4:7e:1e:a1:9e:81:5e:fd:ee:6c:eb:73:21:
                    cf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5E:27:5C:14:E0:C0:CD:1C:EB:88:A3:A0:98:B3:5C:B0:F3:E7:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/783b09c2-6dfd-34f5-8397-c800782902c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.240.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:e2:8e:c0:88:0c:75:d8:9c:75:d7:52:88:c4:e7:3e:70:b5:
         2e:1c:d6:2c:77:9c:4b:f5:c8:06:52:6f:99:77:7a:b7:28:e1:
         8f:ec:1c:5b:f9:b2:7a:a9:72:0f:b0:56:b6:d3:4f:04:dd:84:
         f3:8a:5b:2a:3e:a4:11:ec:72:c0:51:12:b8:cb:98:4d:96:5e:
         89:b5:ef:c2:43:57:71:45:f4:49:e5:bd:1d:70:89:25:fd:dc:
         95:ba:0d:c5:6d:45:c7:23:5f:49:9e:7b:1a:03:fa:36:0e:d3:
         04:fe:17:77:5d:b4:f9:23:79:c5:3d:08:78:9f:67:39:cf:91:
         87:f0:79:a0:d5:11:ac:21:0f:3b:87:84:88:6c:d8:3e:ab:26:
         9e:52:b8:be:3d:32:bc:91:ff:fd:51:90:ff:94:9d:09:1d:2a:
         6e:12:c2:3e:63:2d:01:70:36:7b:c3:09:56:e7:34:05:99:30:
         52:0d:8a:fa:c6:1d:92:0a:e1:19:7c:f9:30:a5:d1:69:e9:47:
         2e:13:a5:54:fe:b5:11:7d:71:f1:48:02:7d:b2:cb:bf:5c:73:
         d3:fd:94:36:f7:e0:32:1a:f4:9d:f6:2c:c3:5b:c0:64:61:9a:
         aa:90:16:a3:b8:35:95:5e:1a:37:9a:fc:bc:16:b6:cd:6b:ea:
         d9:f9:37:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:35:31 2025 by rpki-client