Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/957cd758-4b69-3c15-bb85-f38f0f46357d.roa
File:                     957cd758-4b69-3c15-bb85-f38f0f46357d.roa (raw, json)
Hash identifier:          ZST4e6WJXjHTzHMkOmJ91DBfip8beRh/zt7rAP3gS0M=
Subject key identifier:   09:82:57:40:10:D6:F1:21:76:EC:53:38:BB:F7:41:F8:85:0D:33:2C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849C79F795F45D01ED19BEAFAE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/957cd758-4b69-3c15-bb85-f38f0f46357d.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.241.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:79:5f:45:d0:1e:d1:9b:ea:fa:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=e9c1d23b-76bf-4ddc-94fa-d529d0d3c26e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1e:73:98:d0:ea:c8:88:42:0d:34:77:d4:cd:
                    94:f1:4b:6e:a3:d7:23:39:a9:79:a7:ed:46:1c:2f:
                    45:74:cb:48:b5:33:d6:d5:cc:3b:d4:93:59:fd:af:
                    66:1f:72:72:77:53:6d:52:52:f1:7f:7e:fe:34:78:
                    a8:6d:df:df:fe:35:16:f4:3f:04:e8:5a:f6:49:5d:
                    8a:1a:27:7d:6e:18:2b:52:8d:63:2f:c6:87:79:7c:
                    ed:a5:34:e3:51:23:05:03:92:c7:cc:d7:33:ac:2b:
                    ab:3d:87:3e:95:af:63:2c:a9:50:b0:31:37:6f:58:
                    cc:21:3d:b1:bb:5d:76:a6:8f:0d:f2:03:da:bd:e0:
                    11:5e:4a:b8:6a:3e:76:ed:7a:49:a8:a9:5b:78:6d:
                    61:96:6d:2a:f9:8f:76:98:30:e2:19:c5:c2:bb:df:
                    19:72:65:4f:7c:5e:b7:11:53:0d:f0:68:a6:74:8c:
                    81:14:d2:4e:5f:3f:36:c1:b3:bc:d8:16:ce:be:0e:
                    b2:ca:93:ca:11:81:7d:2d:b6:b8:00:88:64:27:4d:
                    bf:f6:18:6e:f0:e8:86:34:fa:26:56:7b:08:5e:76:
                    6b:27:b0:59:58:91:54:cf:b1:27:07:71:d4:63:68:
                    2b:1f:ef:8b:85:67:7f:5c:fa:01:1a:7e:af:07:0e:
                    60:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:82:57:40:10:D6:F1:21:76:EC:53:38:BB:F7:41:F8:85:0D:33:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/957cd758-4b69-3c15-bb85-f38f0f46357d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.241.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:89:52:de:6e:1f:59:78:b2:96:39:d4:74:d1:fe:ef:e6:71:
         21:93:2a:db:2e:45:49:b0:6f:bd:a1:10:7f:02:4a:41:a7:69:
         6f:e2:a6:66:95:91:06:ef:9f:ac:e4:18:14:8f:42:35:e7:27:
         14:59:55:9a:e5:cd:4f:82:25:2c:7d:27:c2:03:f6:45:0c:e8:
         51:0d:a1:ea:fb:9a:a2:56:f1:64:aa:bc:a1:26:ff:b5:a5:43:
         26:a9:f1:de:3b:8f:e4:dc:6b:e0:27:03:3c:48:a4:5f:a2:f2:
         41:f0:4d:b7:5f:fe:f9:67:52:3f:67:c2:02:00:b4:73:4c:75:
         96:4a:ed:7b:c6:06:77:3d:82:49:a9:1e:59:2a:6f:16:18:b9:
         b7:b8:85:34:41:51:67:74:ca:8c:79:c6:cb:8b:5b:99:55:4d:
         46:e0:d7:63:c1:a4:26:50:8f:35:5e:45:ce:cd:fe:fa:6a:e0:
         3a:3e:0b:df:cc:fe:cc:fa:6d:a2:52:3e:ae:9a:35:1d:bc:c9:
         77:b0:8e:75:c2:84:d4:af:d3:44:fd:f0:7c:58:7a:14:a6:91:
         63:56:3b:a2:a9:bf:09:5e:d3:09:60:01:3f:3b:a1:74:51:b7:
         51:39:5b:4d:fc:d1:b3:cc:21:04:fc:5f:d2:c1:80:1f:9e:5c:
         23:60:8b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:16:19 2025 by rpki-client