Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b71602d-4af6-3935-8f08-94af57c72348.roa
File:                     8b71602d-4af6-3935-8f08-94af57c72348.roa (raw, json)
Hash identifier:          qQq3i8/aby7F1FYVerVQSTHCi5puQMXqT/hLC3kAuyY=
Subject key identifier:   DC:55:B1:56:3F:A8:EC:3B:47:DD:5C:57:EC:F7:BC:C1:1D:CA:9D:E4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849C79F7E58ABE46D9589455600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b71602d-4af6-3935-8f08-94af57c72348.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.249.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:7e:58:ab:e4:6d:95:89:45:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=df85ebeb-9be5-461e-aaeb-48a8b779e68b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:aa:b3:1b:f8:1a:08:0a:a8:d3:01:75:4f:94:
                    ee:49:f7:e8:59:0a:e9:a8:72:6b:30:dc:25:c5:ba:
                    1f:a3:36:83:87:ca:89:f1:dd:0d:4b:b5:97:ad:0d:
                    a2:c9:41:66:6d:9f:18:9d:dc:56:3f:51:86:1b:93:
                    e6:f6:7b:ff:8d:9f:dd:b7:9f:21:43:0e:f8:07:73:
                    36:fe:7f:24:cd:e7:7d:f3:f3:f8:d8:79:92:8a:23:
                    dc:be:66:46:aa:13:df:b9:46:e1:6e:6b:5b:f7:ce:
                    25:f6:1a:3b:b7:65:3d:0c:01:bb:ad:9a:e6:3f:1f:
                    8a:fd:0e:54:c4:82:d0:80:67:c6:b3:d8:f4:0d:63:
                    82:9e:0d:32:a3:a8:33:2f:f5:6a:6f:77:4a:44:79:
                    e3:6c:c2:82:a8:6d:c3:0f:51:48:98:86:46:e3:24:
                    aa:91:44:b8:db:47:fd:cd:d4:52:7f:f4:4f:8d:43:
                    bd:dc:15:92:12:35:a7:95:34:35:3d:dc:68:32:95:
                    09:c6:bd:7c:04:71:11:74:bf:1e:62:4d:a1:99:a4:
                    ff:e9:73:8c:90:d8:9f:85:42:83:ef:0a:05:9b:e4:
                    5f:28:d2:9a:72:e3:db:4e:3f:4f:f4:9c:69:14:20:
                    a7:cb:ba:9d:00:82:e7:38:64:aa:dc:f6:43:ba:26:
                    ce:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:55:B1:56:3F:A8:EC:3B:47:DD:5C:57:EC:F7:BC:C1:1D:CA:9D:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b71602d-4af6-3935-8f08-94af57c72348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.249.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:cf:9d:a2:bb:3c:02:29:fa:fb:bc:86:d3:44:d2:f6:5e:45:
         4e:2b:c3:6b:1d:b9:e0:33:48:b2:94:0a:5d:d9:6c:f2:6e:de:
         d7:5b:b5:ae:76:57:4f:10:38:c5:eb:18:4a:08:8c:26:7a:6a:
         2f:39:08:cd:cf:43:dc:00:e7:96:a5:51:24:95:de:57:7b:40:
         93:a4:ac:22:5c:40:12:e3:69:28:85:ef:41:2f:5a:2e:c1:a5:
         ef:e4:01:8a:8f:6e:dc:e1:0e:5e:57:bb:1c:1f:1f:b2:79:9b:
         df:9f:41:ad:ef:a8:92:ae:9a:d2:33:72:e9:3f:20:ab:47:4f:
         a3:5a:0e:a9:f9:c5:c5:78:ef:4e:a1:0a:d0:f3:59:88:42:02:
         d3:37:0c:dd:8d:d8:33:31:3e:42:44:aa:cc:3b:fe:ba:96:4f:
         d0:ba:a2:6a:d1:5c:ca:de:f4:80:40:28:38:b7:80:d7:22:7a:
         a2:79:71:11:49:2c:d3:86:10:a4:dc:b4:3c:fb:e7:4c:fa:e2:
         ed:be:c4:98:38:cc:20:ed:61:6f:c3:b1:be:f8:05:30:f5:26:
         5a:f7:b0:46:6d:f4:f5:70:87:c5:1d:68:c0:b5:97:13:3f:bb:
         6e:79:2e:40:20:f6:3a:8e:46:b2:62:23:b1:ed:73:ef:68:3f:
         79:e3:ba:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:54:21 2025 by rpki-client