Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a96c1692-47e3-384d-8737-aad738cc437b.roa
File:                     a96c1692-47e3-384d-8737-aad738cc437b.roa (raw, json)
Hash identifier:          GHVueBRFCyMvmWufvrEs7Nb9LeMaPPgJLFjsUfmOYwg=
Subject key identifier:   4C:21:38:22:87:8F:EE:2F:4D:27:3B:21:DB:CA:56:5F:E9:80:78:0A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849C79F6FE4498456DBC1A5AF40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a96c1692-47e3-384d-8737-aad738cc437b.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.226.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:6f:e4:49:84:56:db:c1:a5:af:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=db36cb94-3eec-41e6-8648-57450869fda5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:65:9c:d1:a9:15:e0:6e:04:0b:dc:d8:31:79:
                    d9:ec:16:77:7d:ca:e6:d1:b8:e2:e2:ff:0f:45:1f:
                    1e:6b:eb:93:a7:27:3d:fe:61:20:db:9c:d2:93:8b:
                    99:69:b9:25:26:a2:9a:87:f0:9c:32:11:c5:db:6e:
                    15:fa:0c:f6:f2:e3:81:f7:99:ff:cc:91:ef:73:4c:
                    de:d9:56:c4:85:3d:b6:d3:ee:cf:d5:87:e8:52:e8:
                    27:0a:4a:10:26:89:ca:cc:ce:79:88:45:fb:b2:4e:
                    37:d4:a2:98:68:b9:0a:a9:86:f1:a7:12:c9:f1:76:
                    22:3d:c8:1e:7e:86:f6:c5:db:48:5c:1b:f5:60:7b:
                    72:11:e5:f4:f1:ad:b7:58:dc:dd:9f:af:f1:54:eb:
                    61:a7:07:7c:71:03:ff:c2:77:4a:7e:54:cc:ce:4d:
                    5d:6e:21:7f:2d:01:6f:71:30:13:96:e7:9f:2f:b3:
                    cf:dd:c0:36:02:7d:85:e6:7f:51:50:43:3a:53:79:
                    f8:c6:e7:8b:dd:ba:47:19:db:dd:69:ff:15:b9:28:
                    37:fd:7b:84:2a:d2:d7:f5:d3:bd:6d:4a:72:5b:b7:
                    60:91:6f:74:58:c2:0e:48:52:13:71:05:ee:5a:86:
                    50:a8:c2:65:a8:a7:8d:0d:ed:07:5c:a5:a7:b5:ec:
                    ea:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:21:38:22:87:8F:EE:2F:4D:27:3B:21:DB:CA:56:5F:E9:80:78:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a96c1692-47e3-384d-8737-aad738cc437b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.226.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:7e:71:25:82:bd:25:0f:be:b6:11:f0:bd:9d:96:8e:35:fd:
         aa:0d:93:db:86:7c:6b:57:24:d1:5e:26:26:fd:1b:0c:13:c9:
         3f:12:c2:20:f4:d4:19:66:14:fc:44:51:73:6b:88:ae:cb:e6:
         86:67:fd:03:e9:15:0e:45:18:e8:b4:10:60:cf:a8:b3:31:83:
         b1:85:e2:3e:fb:2f:7a:28:fb:c1:47:75:83:6a:4a:11:e5:e8:
         14:72:96:8b:49:81:97:13:70:4f:63:7d:71:f8:15:18:88:6f:
         5e:e6:a3:a2:af:b1:92:ef:c7:00:ae:5f:f2:1c:9e:6a:b3:de:
         23:43:d6:1d:6a:6c:49:4d:c8:10:0b:84:bb:44:ba:e5:2a:a8:
         8d:3e:de:27:fc:91:c9:72:9f:26:2f:2a:bf:c4:bd:e3:4c:e0:
         b2:98:34:64:fc:20:bb:0d:28:18:e7:b2:99:b9:d6:37:b8:98:
         19:61:32:5a:5f:dd:9e:56:61:18:8b:3c:23:9d:f8:70:c4:f8:
         ee:0c:b6:c7:2b:81:07:49:18:9d:b7:ea:18:11:9d:6d:11:ff:
         a4:06:5d:6a:cd:2a:a6:7d:09:2b:97:d7:af:be:b2:b2:8c:bf:
         7d:9f:a4:75:5d:b9:0f:7e:91:1f:3e:a0:82:ce:3c:d6:92:da:
         30:84:90:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:18:51 2025 by rpki-client