Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e22b76c1-c236-3bbf-85c5-e3ccbd15cf0d.roa
File:                     e22b76c1-c236-3bbf-85c5-e3ccbd15cf0d.roa (raw, json)
Hash identifier:          acfW/ESwwNdBv6bXfceY2YDkU0Rs4Mr812wPlMXI3/M=
Subject key identifier:   CE:46:D3:E2:9F:14:7B:13:1E:90:7E:FD:34:40:8E:F1:04:7E:DE:45
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849C79F74C295C27074AFF42940
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e22b76c1-c236-3bbf-85c5-e3ccbd15cf0d.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.235.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:74:c2:95:c2:70:74:af:f4:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=d1ad1eff-06ef-43a6-9859-be273029ac98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d3:2b:12:fc:16:e9:d7:e7:9b:0c:98:bd:a9:
                    03:4b:ce:e5:f4:22:ff:76:31:86:dd:91:39:81:0b:
                    fb:d8:5e:68:e5:39:e5:87:cf:a4:e8:66:ad:54:5a:
                    de:90:af:01:44:c7:80:4b:70:e1:51:8b:bd:54:7a:
                    47:57:b7:e6:53:88:3d:d9:5e:62:d2:df:b6:f7:3d:
                    d3:e7:12:90:ef:a2:19:31:61:9c:05:17:54:e5:15:
                    c4:c3:d6:73:99:b7:6d:08:b4:4c:5f:4e:26:c3:99:
                    a6:3f:bc:9c:83:4a:f1:d2:a0:15:ca:5c:50:80:2a:
                    a1:8f:ac:bb:b9:9b:73:9c:60:b3:7d:92:3a:7c:67:
                    79:b3:f2:67:38:ad:f3:57:8e:00:11:57:50:8e:87:
                    02:36:d7:2f:54:4c:f3:3a:c3:c0:9e:fc:06:f2:7c:
                    45:40:e4:3b:94:5d:c7:2f:f0:45:e7:ba:6c:65:23:
                    16:cb:00:64:ce:9b:9f:d0:de:ad:08:7b:08:e1:ca:
                    66:cc:8d:46:7d:33:14:9c:dd:97:31:6c:b1:d1:29:
                    87:dc:18:5a:71:c4:c0:6e:dd:22:f7:9d:86:8e:96:
                    96:dd:e3:f7:06:61:77:39:ea:30:29:6b:cd:ad:9d:
                    9f:5c:5a:96:d4:99:ac:62:7d:21:03:b0:f2:71:57:
                    c3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:46:D3:E2:9F:14:7B:13:1E:90:7E:FD:34:40:8E:F1:04:7E:DE:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e22b76c1-c236-3bbf-85c5-e3ccbd15cf0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.235.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:a8:27:e9:d4:72:e1:13:6c:42:7b:e0:63:32:ee:c8:1b:c1:
         3c:67:c5:95:6d:22:f0:ca:5f:09:76:b9:bb:48:34:af:57:1a:
         5f:89:e0:98:87:b3:fb:80:f2:42:af:39:a5:b7:d3:70:d2:ce:
         6c:bd:1b:2a:45:88:39:46:6a:17:4d:5f:3c:56:06:04:4c:ca:
         7e:56:ec:12:8d:02:ef:ab:f2:c9:9e:44:de:a7:80:da:a3:a3:
         3b:b7:7a:cc:c2:bc:a8:7d:22:51:96:ad:8f:cf:66:32:ac:17:
         fa:fb:48:3c:a8:4e:79:28:74:f6:ff:aa:74:4e:79:7e:c2:c3:
         39:f3:1c:03:66:bc:7e:1a:a3:d2:7a:29:bc:7c:13:d4:c6:69:
         a0:a9:a6:16:f8:9f:7b:58:af:95:a5:2d:ac:c6:18:f5:50:a0:
         ce:6d:73:6f:08:a1:f9:44:34:ac:8d:19:00:39:37:3c:c3:86:
         11:95:65:f2:90:47:f3:64:65:f5:db:dd:79:17:6e:45:f9:7a:
         85:3a:4c:11:db:21:3e:28:c4:45:49:c4:9b:e5:64:93:c7:a1:
         9b:4e:9d:42:69:ab:1d:15:61:46:79:b3:40:36:76:4b:04:24:
         47:2f:8a:d1:99:2c:ae:40:f7:5e:3b:9c:ef:eb:d2:42:92:c3:
         86:1c:ac:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:25:24 2025 by rpki-client