Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ddb5a3af-0a6c-34f2-bd28-9dac8a542d0b.roa
File:                     ddb5a3af-0a6c-34f2-bd28-9dac8a542d0b.roa (raw, json)
Hash identifier:          A5TeT+1ftODxxNENnQKn1+W9+XudlFhmaHCW0buIHT8=
Subject key identifier:   B8:31:F6:4A:D9:16:93:86:12:85:98:27:9F:C7:55:28:CD:8F:E7:AA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849C79F7526E55B08C448DBB300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ddb5a3af-0a6c-34f2-bd28-9dac8a542d0b.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.236.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:75:26:e5:5b:08:c4:48:db:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=ce0270b5-f642-4f58-93ae-f1bd407b2017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:89:78:d1:ab:f2:47:43:2e:e8:ba:bd:f3:25:
                    dd:34:9f:ca:37:1a:3e:35:ef:7f:13:1a:f0:38:c1:
                    09:05:b4:da:33:3d:5c:68:2d:a3:8b:bf:7f:16:16:
                    a5:19:c7:b2:18:1b:01:5a:79:78:2f:26:05:57:3e:
                    b8:04:e4:27:fe:2a:db:b6:30:19:85:22:d4:59:28:
                    0e:fb:3a:fe:23:59:37:58:51:62:a3:1f:94:f2:9d:
                    60:96:d6:59:c9:3d:04:e6:84:86:01:1b:fa:dc:5e:
                    50:d3:7e:ca:9f:59:a7:cb:ec:7c:e6:2b:49:20:e4:
                    a4:3e:3e:7f:aa:21:a9:fe:08:38:70:d6:4d:47:64:
                    b4:80:1c:2a:52:26:85:54:1d:0c:03:e0:eb:77:eb:
                    36:c6:b2:fe:52:b2:a2:02:7b:22:66:6d:c4:65:13:
                    84:6c:18:ec:47:85:8f:98:c7:16:9f:84:ce:91:98:
                    da:2c:cc:dc:1d:a5:c1:b4:01:e0:24:2d:4c:68:ea:
                    7b:ab:dc:27:82:c7:c4:82:dc:b6:83:0d:33:9c:e3:
                    cc:62:a5:ac:2a:82:33:c6:c4:2d:47:47:a1:2a:8d:
                    c8:72:c0:c9:ae:68:6e:3e:c2:2f:58:2b:35:7e:84:
                    d2:e4:1f:ee:30:27:13:f0:d2:e4:c5:6c:49:0a:5d:
                    90:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:31:F6:4A:D9:16:93:86:12:85:98:27:9F:C7:55:28:CD:8F:E7:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ddb5a3af-0a6c-34f2-bd28-9dac8a542d0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.236.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:a3:bc:97:7e:2b:62:1f:99:6e:22:34:63:10:bb:06:1b:43:
         a8:c1:ba:4e:af:b2:ef:13:b8:14:f3:e7:f4:b5:c4:cc:88:64:
         43:84:f2:fb:fc:38:9d:05:47:2f:2b:27:96:d1:0d:df:94:7a:
         d8:94:c2:99:4d:a2:67:83:46:0b:57:d7:7c:5c:e8:24:a8:fc:
         7c:3e:32:b5:38:77:f6:78:77:4b:a1:37:3c:92:34:6f:26:33:
         73:e2:51:ba:8b:1e:be:5a:33:00:07:54:6d:58:9a:4b:4d:2d:
         c5:5c:eb:8a:c8:83:db:3f:d6:ed:0b:f5:7b:d5:8f:81:8f:e1:
         7a:03:8a:f5:cd:c2:4f:ee:1a:78:a3:93:b2:9d:f4:a4:44:f9:
         df:53:bf:4e:51:80:76:6f:a8:02:23:aa:4d:eb:9b:26:d3:63:
         4f:ff:cb:c9:44:c2:29:cd:c4:f5:78:8c:4f:d0:6e:6c:c4:63:
         64:37:44:b5:88:cb:f2:f6:46:e1:43:09:2e:1a:68:97:f7:73:
         1e:d1:aa:13:27:d2:88:cf:30:0e:80:30:aa:50:5e:4a:f2:5e:
         33:ad:40:f6:ff:39:50:73:0a:b0:0c:c7:a1:e5:17:62:d5:ff:
         da:8e:6e:87:52:dd:88:9a:4e:8d:75:4a:59:a6:1f:37:64:74:
         48:3c:78:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:45:02 2025 by rpki-client