Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d8b679d-c9b2-38db-93c3-d51a521b9acf.roa
File:                     8d8b679d-c9b2-38db-93c3-d51a521b9acf.roa (raw, json)
Hash identifier:          Xr9E57VoL111j+UGqp+6Yqoe4yMUVBgVVYw1MVjuMqs=
Subject key identifier:   EC:D2:E1:0B:12:0A:E3:77:68:CA:62:FA:E1:CE:46:20:44:24:5B:D2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849CE9A7F259950382773D40940
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d8b679d-c9b2-38db-93c3-d51a521b9acf.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     6167
IP address blocks:        174.42.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:7f:25:99:50:38:27:73:d4:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=7eff2ecd-2fa7-4d26-a772-d9d1c63056b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:46:63:69:a0:0f:5d:5e:f7:82:ed:80:49:0e:
                    c8:26:30:3c:06:a5:33:af:4a:d4:b0:e8:c8:7c:60:
                    92:75:e8:cf:8e:3c:13:37:31:01:54:ba:b8:b9:b9:
                    34:0a:57:d5:23:ac:56:eb:f6:83:cc:cf:9d:86:e8:
                    e1:39:da:50:a5:d8:14:fc:1b:81:66:61:fe:9b:a6:
                    cc:b2:5f:68:0c:c1:b4:b3:e7:b2:6d:f9:4a:3f:8d:
                    3b:e6:9c:57:fb:a5:f5:2b:97:5e:44:04:f8:fb:58:
                    13:b8:42:72:fb:c0:c4:5b:7d:f0:91:e9:35:3d:d8:
                    fb:a2:18:62:f2:25:6b:d7:f7:08:8a:4f:1f:f5:5c:
                    c1:cf:2d:58:24:93:31:db:0a:a9:8b:1a:74:50:29:
                    48:77:2a:0f:df:b5:24:93:f1:fb:da:f2:bc:b6:3f:
                    bf:a0:b2:5b:74:c5:a5:a3:dd:b7:80:92:05:78:8b:
                    c6:c3:72:ee:29:af:01:8e:ef:98:b6:7f:3a:e6:fc:
                    3f:8a:3f:6b:cc:7a:13:75:33:7d:1e:a2:d7:eb:60:
                    d7:e0:e2:b0:f5:5c:cf:26:34:a5:29:c8:4a:32:e0:
                    50:b5:a0:d0:05:0c:98:87:88:21:c7:92:15:78:da:
                    f0:90:33:3f:79:41:6e:12:4e:c1:10:c8:97:19:6c:
                    fc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D2:E1:0B:12:0A:E3:77:68:CA:62:FA:E1:CE:46:20:44:24:5B:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d8b679d-c9b2-38db-93c3-d51a521b9acf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.42.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:05:91:b8:61:fb:79:27:9b:48:1e:1b:50:b1:d0:4e:e1:06:
         8b:b6:1c:a7:0d:f8:d0:fa:d3:50:06:60:2e:5e:db:7d:cf:25:
         2c:e9:e8:ae:a1:50:79:c5:0d:08:7e:15:19:7f:ca:b2:c2:d4:
         1a:05:b7:04:95:3b:58:5d:08:0b:a0:62:3f:94:24:db:9b:a7:
         85:1d:2a:10:bd:2e:c8:f3:8f:aa:bb:77:6c:0a:a0:3d:21:7d:
         6a:08:4c:8f:1d:34:9d:d1:23:05:d2:fb:28:b9:dc:7f:6a:48:
         1b:08:dd:ed:f2:b2:d3:db:a1:d4:5b:f5:c0:d7:da:72:f0:55:
         2c:41:4d:2c:5d:d1:4e:23:e1:e6:b9:55:10:9f:d0:fc:b8:74:
         8a:0e:9d:85:0d:98:e1:d3:c7:74:63:65:d2:cd:ba:11:b5:fe:
         6d:c3:6a:eb:fb:20:46:12:82:88:2f:24:e3:18:34:5a:07:a0:
         ef:29:17:f6:9c:0c:18:08:86:4b:0c:a1:4f:a2:60:54:06:7c:
         5e:d8:50:f9:be:a0:35:ea:3a:d9:54:57:21:89:2f:3c:ef:e1:
         73:92:9d:c4:23:aa:da:8c:59:25:89:e2:68:9c:a6:f8:96:a9:
         93:eb:a0:b1:57:4e:d6:9f:4d:9e:d9:d9:69:5f:cb:c0:be:8f:
         8d:c4:b5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:05:00 2025 by rpki-client