Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e9d94be-b98f-3f7c-a940-b4b9aee43e54.roa
File:                     9e9d94be-b98f-3f7c-a940-b4b9aee43e54.roa (raw, json)
Hash identifier:          KLkZc7cGtHvWWRlXEXm38oJdhWUWVK+sG0kBPWlvC9A=
Subject key identifier:   85:0F:FC:24:B3:6C:4B:C1:6B:4A:5A:1E:7B:5F:DF:A3:D5:91:8F:B7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849A089ED95D617A750E1C0D4E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e9d94be-b98f-3f7c-a940-b4b9aee43e54.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.213.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:ed:95:d6:17:a7:50:e1:c0:d4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=d7a76b40-d29d-49f0-b925-2e601a36221a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:61:bd:16:c5:58:e4:9b:b0:a4:ea:f5:ea:52:
                    b7:3e:82:5c:33:66:7a:4e:3d:40:8b:d0:27:43:e5:
                    b3:2a:73:b7:d1:83:c4:a8:9f:73:10:72:6a:50:0d:
                    c1:33:d0:49:a3:23:18:e0:3b:64:7a:92:5b:e8:46:
                    f0:50:d6:7e:0c:ff:02:a2:52:a2:ce:0c:43:86:8a:
                    10:70:7a:b5:d7:f1:b4:92:1b:3e:bd:1a:b1:f9:eb:
                    ca:aa:8e:f1:87:f6:e3:3f:9a:24:57:dd:90:38:ae:
                    e4:f0:0c:ef:ed:06:25:c7:25:41:34:94:ee:1f:cf:
                    33:62:ee:e5:37:f4:76:24:24:0b:a3:3e:13:6d:5c:
                    07:b8:2d:e8:d4:53:d3:d5:81:be:e9:0a:07:b4:7e:
                    12:e5:2a:9e:4e:1d:8b:85:9c:1f:1b:13:56:8f:eb:
                    b1:62:1d:cb:cb:fd:e0:57:0e:5e:34:70:6f:c9:dc:
                    7f:89:6d:17:f1:7a:86:85:d6:00:40:17:f8:57:bf:
                    c3:bf:4c:63:2f:d7:e6:7f:40:70:44:bb:3e:47:69:
                    b1:af:b7:e4:fd:11:da:bc:c5:3b:59:1d:5f:da:ef:
                    15:35:84:5c:c0:2e:3e:be:e1:fb:57:1f:d6:33:ac:
                    af:32:09:74:08:62:f8:3d:d1:93:81:71:91:51:ed:
                    bc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:0F:FC:24:B3:6C:4B:C1:6B:4A:5A:1E:7B:5F:DF:A3:D5:91:8F:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e9d94be-b98f-3f7c-a940-b4b9aee43e54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.213.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:2e:a1:d8:fb:aa:45:08:b1:0e:c7:43:cc:e4:0c:88:80:fb:
         90:d9:54:51:94:6d:23:87:b7:06:80:6f:78:47:5b:24:2d:1e:
         a4:dd:25:5f:5c:31:8b:15:f4:e7:bc:48:69:16:27:a7:cb:1c:
         83:80:04:b5:ce:89:2f:0e:21:79:ec:3d:06:27:d1:5a:c2:26:
         d5:f3:a9:55:c8:7b:f6:67:77:75:d6:24:b8:b2:d5:58:82:7a:
         95:0d:36:30:06:ac:f8:f8:6a:d7:c8:d0:02:b0:3b:4e:4d:ae:
         e7:5b:ac:09:9f:24:0f:82:ef:4b:3f:4c:ad:18:8a:59:5a:d6:
         12:8e:95:f2:83:62:1b:e9:ab:39:d1:74:58:e4:0d:ab:38:c6:
         ea:a4:18:50:bc:3d:c9:10:27:e0:31:2f:3a:ff:3a:65:f6:1a:
         8e:2d:a5:a2:69:d8:dc:d4:f3:99:11:df:ea:f3:4d:0b:43:75:
         ee:37:ce:e9:55:02:c4:57:1b:c9:38:af:f6:37:10:0e:7f:49:
         b4:23:ee:be:53:64:75:77:32:fe:16:b5:0b:b5:75:fe:2f:ff:
         05:21:cf:38:b8:c5:5f:8f:54:18:1f:b1:8b:d2:4c:66:67:0c:
         ef:cb:ff:5d:cf:70:87:67:0c:64:3d:4e:79:4d:6b:2d:76:4f:
         de:f5:f9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 02:26:00 2025 by rpki-client