Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b559110b-5d04-3e56-a4ff-131551edc642.roa
File:                     b559110b-5d04-3e56-a4ff-131551edc642.roa (raw, json)
Hash identifier:          FwXc4hAbUCm/qXswaGvYdYgBdwzEnuMGAqKpj+4lFA0=
Subject key identifier:   68:68:16:22:14:F9:6D:7E:CE:22:A0:34:DB:FE:46:3C:DD:ED:06:BE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849C79F7ABE0A56C52E00DEC400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b559110b-5d04-3e56-a4ff-131551edc642.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.244.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:7a:be:0a:56:c5:2e:00:de:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=7f773f57-791e-4d72-9ae3-39ddb18af56c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0a:34:93:6e:d8:b5:e9:dc:86:3b:6b:4c:5f:
                    f0:61:df:0c:91:aa:33:de:f2:63:eb:9c:38:ed:48:
                    75:ef:b7:b0:30:48:55:d0:5f:db:e0:83:3e:ae:1c:
                    ff:13:c3:f2:5d:ba:a1:44:f4:99:75:ba:bf:97:f1:
                    31:53:e6:6c:25:05:3e:61:60:fd:ee:ea:e2:59:2a:
                    5e:bb:ed:f4:49:56:c7:ad:b9:97:11:3d:85:b8:3e:
                    fb:aa:b7:b8:2a:42:d3:f6:c9:f1:78:62:32:a1:76:
                    29:b7:5e:f8:09:09:71:1f:2f:19:04:f6:1a:32:e8:
                    9b:33:66:a7:ff:27:c8:da:a0:3d:49:f7:10:2e:f4:
                    db:03:a2:45:ce:49:19:0b:cd:c5:9e:37:6d:37:a6:
                    f2:5b:3f:e4:41:10:13:f9:a3:41:1d:cc:a2:62:e7:
                    7d:78:93:f5:59:ee:a7:e0:e5:96:65:9e:5c:62:5b:
                    e5:ef:ef:87:22:44:0b:89:3c:1f:56:7d:99:10:4b:
                    ab:61:86:8e:1f:df:20:7a:d0:d8:bb:86:4b:82:3b:
                    b9:18:e1:ab:33:93:48:93:71:f2:45:3e:7b:8e:76:
                    f5:0a:92:d1:a7:bc:38:ef:ce:14:83:51:17:d6:79:
                    b8:06:4b:a5:0f:66:4a:ec:ee:46:95:0a:8e:1e:cd:
                    83:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:68:16:22:14:F9:6D:7E:CE:22:A0:34:DB:FE:46:3C:DD:ED:06:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b559110b-5d04-3e56-a4ff-131551edc642.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.244.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:99:c7:b3:bf:1d:0c:96:ad:f2:3c:3a:2e:09:66:8a:84:62:
         ec:ff:30:6e:43:65:15:1d:ce:5c:06:bb:8a:0c:2c:49:40:c0:
         62:ba:5b:75:12:74:20:3e:72:0b:52:38:f8:77:f6:6d:8f:34:
         2b:b7:4c:0d:b7:c8:a3:8f:74:da:36:43:22:e3:45:c8:8f:f2:
         9a:a5:83:b0:d1:2b:88:47:9b:22:2f:95:c4:e4:2b:75:4d:41:
         27:d0:75:1f:76:eb:eb:a6:45:93:c0:53:2a:e2:67:da:0b:40:
         a1:a2:5b:53:b9:d8:80:b9:e9:12:cb:b4:46:90:88:43:4f:86:
         00:0f:80:11:2b:62:25:af:fc:71:53:69:3d:f7:8f:bd:6c:d7:
         15:43:dc:f0:d6:9e:0a:06:9c:af:6a:e2:5d:42:07:b1:d6:ad:
         0c:00:ca:f8:46:ca:6b:9b:29:87:44:15:2d:ae:3a:7d:93:3d:
         55:0d:0e:98:05:ac:42:6a:5c:0a:39:9c:88:87:0e:1f:76:22:
         f0:43:5f:e0:14:83:ef:59:be:8e:d4:76:4b:c1:46:61:61:bd:
         6b:78:01:74:3a:2a:5d:7f:b0:da:d2:bb:4c:44:79:a1:33:a3:
         3a:41:66:06:f8:b8:88:10:c1:0c:23:02:31:ad:f1:d9:6f:4a:
         1a:89:37:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:25:00 2025 by rpki-client