Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/99ea4362-717d-31d9-a72c-3b3916031197.roa
File:                     99ea4362-717d-31d9-a72c-3b3916031197.roa (raw, json)
Hash identifier:          5ENKih+2lWTsKtZKU8ApBNPYAK0QVSje2iju/Gexd1A=
Subject key identifier:   1D:12:D0:6A:FF:F8:06:15:03:0B:A9:7B:F0:77:D6:4E:2D:B7:A2:21
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849C79F6E084F9965458BDA7530
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/99ea4362-717d-31d9-a72c-3b3916031197.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.252.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:6e:08:4f:99:65:45:8b:da:75:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=569dcda5-e14a-42c9-b207-f1e004c916b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:36:ff:97:68:f4:b4:2a:7f:3e:10:28:3d:c0:
                    e3:44:a4:99:94:10:1c:35:46:03:1c:c8:97:e4:da:
                    56:f7:ef:86:4a:c4:62:38:9c:44:b7:6a:26:30:4b:
                    35:bf:86:8e:a0:68:89:56:cb:4d:59:04:2b:96:05:
                    ae:90:d6:a2:67:11:e3:01:60:63:e8:4c:28:41:6d:
                    69:15:e8:0f:a2:f0:08:fc:c8:6d:d6:66:6d:12:d1:
                    14:19:13:85:eb:a6:a5:14:e1:e7:26:19:17:93:37:
                    00:1e:fb:05:4f:8d:f6:a5:f3:70:83:d3:f7:05:0b:
                    21:17:83:79:97:79:ca:4b:2d:3f:c7:f5:ca:ba:80:
                    d1:44:72:37:64:8f:75:db:88:78:0f:f9:4e:13:b4:
                    c8:84:0a:92:2c:83:54:b0:f1:38:b6:f6:46:d6:36:
                    33:4d:12:ed:57:1b:7e:8f:ed:ab:58:e9:e6:7a:f5:
                    9f:ed:e3:9c:7e:22:37:ce:88:1d:e1:12:e0:cc:89:
                    2d:25:b8:81:8e:37:a9:19:b5:4c:0e:a7:5f:ec:76:
                    bb:ee:20:f3:9e:40:82:7a:29:ef:7b:3f:25:2d:a1:
                    e6:5f:4c:67:3b:4e:44:38:a5:e5:2e:37:12:91:73:
                    9f:8d:8d:89:76:5e:e5:fc:e8:ee:75:8b:99:53:8f:
                    c4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:12:D0:6A:FF:F8:06:15:03:0B:A9:7B:F0:77:D6:4E:2D:B7:A2:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/99ea4362-717d-31d9-a72c-3b3916031197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.252.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:1d:b4:5d:18:4f:26:ec:ad:67:20:25:23:92:5b:26:73:0d:
         72:49:62:9f:f3:8a:cb:37:d2:c6:33:96:65:b8:c8:81:1c:a9:
         b5:77:25:2d:ea:2f:b1:aa:55:54:43:86:0d:40:5a:5a:82:cf:
         f6:ee:22:02:3a:51:ad:df:8f:2c:59:2c:13:9a:e5:7d:09:20:
         42:55:d9:c1:54:27:ff:da:81:22:b4:e9:ba:46:12:1b:64:ef:
         00:9f:a3:17:32:c5:ca:0f:93:0c:07:6f:0e:3e:82:37:ec:92:
         55:75:e7:9d:ba:37:bc:b1:82:07:a2:16:69:9b:e4:a8:d6:80:
         c9:7a:6f:d5:d1:46:88:38:6a:1c:1a:f0:40:04:75:97:c0:56:
         0c:18:46:86:b5:3a:55:d0:68:99:a9:9f:ed:0e:e0:35:8a:72:
         04:2f:72:5e:7a:fb:bb:f6:e6:50:95:a1:5e:c5:64:3e:72:31:
         f0:df:cd:09:13:bf:83:be:e6:cf:40:4a:7d:b7:3f:b3:10:28:
         44:15:43:87:9a:75:88:25:cc:85:c4:50:0f:07:9c:ea:1e:13:
         94:18:3f:d3:f4:8c:08:a0:88:df:ef:53:26:eb:3b:c9:a5:d7:
         0d:ab:c5:09:26:c1:d5:52:10:d4:05:cc:d1:4f:95:5c:fb:4d:
         b9:5e:65:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:09:26 2025 by rpki-client