Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d20d6be8-8295-3b55-9b8a-7cf2cd436496.roa
File:                     d20d6be8-8295-3b55-9b8a-7cf2cd436496.roa (raw, json)
Hash identifier:          wnbW9alXIDfQsMZOqTKwOyHvNaqUvh4I9mf276/PqVI=
Subject key identifier:   91:9B:C9:E2:C1:37:3B:25:55:04:1C:7A:30:8D:8D:2C:84:21:A1:69
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849C79F6D5FBCEFF559E9ADCD80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d20d6be8-8295-3b55-9b8a-7cf2cd436496.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.251.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:6d:5f:bc:ef:f5:59:e9:ad:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=aa96432c-5983-446a-ba54-8a4865283aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1c:5c:b4:58:22:ad:38:09:96:0e:ec:b8:ac:
                    5f:0c:fb:c9:cb:99:7e:d0:2d:d1:db:06:cc:4d:b1:
                    b1:e1:40:a4:3f:6b:ea:ac:e4:ba:48:da:fc:9a:3f:
                    d5:f8:87:3f:50:bf:83:cc:28:3c:be:39:d2:ce:64:
                    c7:4f:4d:0a:e7:0f:c7:d8:18:1b:c9:5f:ce:37:00:
                    1e:89:48:c2:e9:10:ea:64:8a:59:5b:57:c6:81:18:
                    b5:53:10:31:1a:39:f2:26:e6:52:4b:96:aa:6b:26:
                    26:60:cf:16:dc:14:14:c9:95:39:e0:d6:69:53:1d:
                    2e:43:db:5f:36:58:89:a8:22:f5:bd:de:35:a5:0d:
                    7a:6e:cd:d0:9a:52:28:e0:24:9f:d6:42:0a:9e:90:
                    a1:ca:99:73:0f:c6:ef:1e:71:b4:c9:dc:19:de:15:
                    0d:b4:bf:01:ec:62:f0:8a:de:dc:52:88:ad:9a:76:
                    5f:62:c2:38:bd:34:57:8c:90:ba:2c:50:c3:cb:9e:
                    02:f7:7d:3b:f0:8f:38:40:70:02:3d:4a:c1:95:80:
                    26:e7:45:63:b5:17:3a:48:56:98:18:25:91:ac:1a:
                    04:cb:06:af:2a:5f:f0:86:18:d5:bc:43:db:15:ee:
                    61:e4:9c:1d:12:4d:c5:a4:cb:fa:d6:a6:5f:06:6b:
                    e4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9B:C9:E2:C1:37:3B:25:55:04:1C:7A:30:8D:8D:2C:84:21:A1:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d20d6be8-8295-3b55-9b8a-7cf2cd436496.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.251.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:e7:35:23:5d:a7:48:62:d4:a6:a9:5e:b8:02:7d:d2:3b:d1:
         39:07:c4:b1:a4:e8:05:18:44:3c:57:18:fe:88:25:1c:f5:11:
         bc:01:82:99:0d:35:aa:13:da:a5:eb:d5:6b:fa:fd:67:db:51:
         74:15:4e:4b:c4:73:fd:8d:4b:de:3b:22:16:28:bc:e9:d5:96:
         2a:35:65:08:b1:82:7d:1f:9b:07:e1:6e:85:8a:c6:3c:d4:e3:
         69:f7:19:cd:84:b2:1f:ad:21:8e:a7:c7:5b:97:e9:3e:c9:bf:
         c9:f0:a7:45:61:c0:be:74:0d:ce:3b:51:84:ec:99:ec:1a:9b:
         10:57:b0:bd:11:c8:92:75:7c:6b:f4:4e:59:8c:58:08:8b:b8:
         93:23:f1:fe:fe:71:e6:2a:e9:79:e0:2f:d4:8b:ac:05:48:c1:
         5d:43:d9:7e:e1:3e:41:ae:81:31:d6:de:40:e9:9c:0d:a9:35:
         ef:c3:d6:1e:11:71:86:bb:5c:8c:f5:6b:44:7f:ec:09:35:48:
         74:90:98:01:23:3c:64:12:d7:fb:fc:e6:69:9e:0c:af:e5:e1:
         69:fa:ce:5f:9b:c9:77:cd:81:34:11:65:82:96:8c:ab:3a:01:
         2d:e2:dc:c8:55:e5:d1:ae:c6:f2:0e:a3:c1:8e:b3:2e:0b:8d:
         88:86:6a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:14:57 2025 by rpki-client