Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9f6f9df3-29c0-3486-94cf-21cb42e1e720.roa
File:                     9f6f9df3-29c0-3486-94cf-21cb42e1e720.roa (raw, json)
Hash identifier:          lo7sLCPLkVBUjzfhbQCnC2aIZ40PCUNIiGnonKdKW3A=
Subject key identifier:   D5:85:AF:4C:66:C8:23:FD:6D:4B:59:13:E4:87:57:78:26:5A:05:90
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849C79F6923895A3F813B559080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9f6f9df3-29c0-3486-94cf-21cb42e1e720.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.229.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:69:23:89:5a:3f:81:3b:55:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=a4e8f95d-61fb-4fdd-b682-c1a5a6f5a7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e6:f2:3f:8f:04:9f:00:6f:e8:b3:8a:42:69:
                    5c:de:b2:1e:5b:05:5e:f9:e0:13:36:60:83:15:c5:
                    06:54:fa:ad:4f:19:a6:36:df:12:8b:fd:c0:0e:62:
                    37:c7:14:c1:29:20:3d:e5:de:50:22:ef:59:8b:6a:
                    34:8c:07:64:3f:29:d8:70:7c:24:3f:e4:ca:3c:76:
                    6e:51:9c:f1:63:93:a2:1c:d4:c3:28:ce:ce:66:75:
                    7b:1f:b3:4a:39:47:93:92:45:fa:16:c4:2b:71:3b:
                    97:35:df:99:e6:91:c9:22:00:86:03:29:ef:d7:8f:
                    c2:90:e8:15:f0:c0:d4:86:17:42:6e:3d:69:bf:2c:
                    a5:96:72:83:eb:fe:ed:8e:df:3d:c7:c7:76:6c:18:
                    ee:b9:34:29:49:1e:51:87:d5:9f:9f:5f:0d:9f:d2:
                    a5:70:97:81:a3:e9:90:b4:c7:8d:65:8c:36:78:7c:
                    d4:bd:a5:cb:e2:e5:91:e0:e0:3b:80:67:eb:fc:c4:
                    d1:80:69:55:e8:48:51:33:fc:da:6c:eb:58:54:b5:
                    1c:d4:1d:0b:31:3c:fe:8d:df:07:62:63:fc:b7:39:
                    de:5f:b4:77:c5:4e:f8:05:cd:49:1d:3b:77:a7:3e:
                    9e:a9:7b:d7:19:d0:4a:ca:9f:e7:33:32:45:42:21:
                    4d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:85:AF:4C:66:C8:23:FD:6D:4B:59:13:E4:87:57:78:26:5A:05:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9f6f9df3-29c0-3486-94cf-21cb42e1e720.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.229.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:36:38:1c:c7:b8:5c:d2:1b:0e:ec:ca:c9:a9:34:9d:b1:44:
         95:66:38:e4:7e:0b:bc:3d:6e:02:ac:31:96:b3:f4:17:8d:14:
         ab:d8:2e:b4:70:ef:e5:b6:bf:fb:bd:d3:2f:43:ff:13:c4:34:
         a1:b6:35:6a:99:30:8f:5d:45:f8:46:7c:17:88:c1:15:e7:3b:
         cd:1a:c0:90:19:ae:7c:7c:89:94:06:7c:46:1b:54:13:3d:2a:
         82:1d:a2:10:13:84:95:21:14:79:a6:6d:62:5b:91:90:fa:e7:
         5b:ec:9f:a6:16:4f:50:31:07:c4:f2:19:0b:27:9a:1b:0d:9c:
         61:c3:f8:f7:f3:33:e1:b6:1c:c4:c1:26:55:83:6f:61:cf:fc:
         c8:8d:81:68:05:c6:0f:4c:43:1c:df:31:bd:67:dc:31:69:bd:
         c2:0a:0a:72:f3:34:bd:c9:8e:cd:1a:65:0c:09:98:5f:8a:69:
         83:68:c3:9a:da:09:3e:74:f8:38:0a:0c:4d:7f:30:a5:4c:d3:
         1f:7f:8c:02:ad:06:bd:38:68:2b:b1:44:99:04:17:3d:2c:bd:
         d8:18:79:0e:be:e4:0b:8b:df:86:b4:42:5b:2b:8b:9d:f1:c5:
         63:4b:e9:5d:75:75:32:16:76:45:66:b2:3c:f3:d8:28:d1:7d:
         af:0a:c6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:14:51 2025 by rpki-client