Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2799b84-4bff-3dab-a347-4d33bf4a7be0.roa
File:                     f2799b84-4bff-3dab-a347-4d33bf4a7be0.roa (raw, json)
Hash identifier:          pyBi7HWGpfs+njelavLWyzBjYJ0BYnFUPaQcH04/SX0=
Subject key identifier:   F6:8D:2B:A8:2C:5A:4F:F1:1E:F5:81:98:93:94:51:EC:44:B0:D4:3D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A39747E27E7E5B10E517F8AE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2799b84-4bff-3dab-a347-4d33bf4a7be0.roa
Signing time:             Tue 17 Jun 2025 19:36:33 +0000
ROA not before:           Tue 17 Jun 2025 19:36:33 +0000
ROA not after:            Mon 15 Sep 2025 19:36:33 +0000
asID:                     6167
IP address blocks:        174.232.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:39:74:7e:27:e7:e5:b1:0e:51:7f:8a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 17 19:36:33 2025 GMT
            Not After : Sep 15 19:36:33 2025 GMT
        Subject: CN=b115ee7a-a288-4b02-8cbf-49b4bbf71e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e5:00:93:a7:fc:99:1f:44:68:59:86:91:af:
                    2c:aa:87:a0:bb:18:e5:37:10:ad:da:c3:32:ac:95:
                    4d:25:94:5f:82:0e:94:ca:7e:5d:fd:5e:4e:fa:c2:
                    ca:ca:e4:43:d3:03:55:20:34:8b:79:e4:8f:2b:6b:
                    ef:e4:1b:c4:ac:ab:69:78:f3:06:b3:4e:1b:e5:9d:
                    29:68:e1:37:0e:8d:29:a0:7b:f9:87:64:7d:ff:38:
                    18:35:a5:fa:cd:27:de:30:a5:30:dd:d0:2a:fc:2e:
                    34:91:36:39:11:59:e1:7a:e6:ec:c8:5a:26:7e:c2:
                    69:99:8c:6b:31:98:b9:26:b5:51:06:0f:77:5f:72:
                    e9:41:eb:ce:1e:36:34:45:5f:ef:bd:3a:96:03:93:
                    75:fe:74:66:97:29:64:93:b5:fc:59:25:32:54:4c:
                    ab:f1:78:96:b7:e7:a6:84:a7:fc:ee:eb:1a:9d:d9:
                    d9:ee:ba:c7:2c:cb:cd:3d:19:23:be:17:9f:6f:ce:
                    91:53:98:76:bb:e8:74:de:16:b1:03:47:ea:31:de:
                    23:98:a6:dd:88:d1:12:5a:2f:f1:3c:0a:04:e3:ae:
                    ee:b5:71:16:18:ba:ac:d9:0a:05:39:06:26:22:4e:
                    63:88:8e:46:94:82:8f:4a:02:e2:c2:9b:15:5e:be:
                    aa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8D:2B:A8:2C:5A:4F:F1:1E:F5:81:98:93:94:51:EC:44:B0:D4:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2799b84-4bff-3dab-a347-4d33bf4a7be0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.232.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:96:82:07:9e:79:4c:4a:95:24:31:a3:33:af:08:b5:b8:4c:
         b4:f3:71:87:1d:40:fe:49:e3:79:c6:3a:3b:3b:b4:dc:dd:04:
         ad:bd:9a:1e:a9:36:1d:02:02:8a:95:ff:69:1b:0c:97:c6:9b:
         04:70:d3:32:7a:36:36:03:2e:7c:4b:d4:74:10:d2:d9:c1:2a:
         ae:42:2a:04:8b:52:48:d8:90:2f:e4:82:5e:27:fc:5f:7a:92:
         8d:6a:f5:85:25:e2:88:9a:f0:20:be:e9:9f:f3:2b:2c:cd:20:
         00:44:70:e9:a3:1f:2e:78:65:99:9e:a6:dc:5a:2a:26:51:d7:
         c5:b4:1f:26:34:c0:99:2d:50:8f:ed:d5:f4:69:92:db:08:7b:
         0c:e1:89:6b:cf:bc:74:76:15:c2:ec:7f:49:b2:70:7e:cb:d0:
         0c:bb:3c:42:c4:32:5f:0b:41:33:d9:d7:b7:90:85:26:fa:f9:
         ce:81:75:3a:bd:33:04:69:13:c8:35:53:07:a6:6f:c1:83:f9:
         4c:3e:e4:88:21:fa:c9:47:77:a6:4b:1e:dc:96:fc:f9:aa:66:
         6d:09:5c:1c:47:43:71:90:fc:b3:c0:d5:23:9e:63:96:c9:17:
         d5:ea:45:16:2f:20:41:87:97:1f:29:35:ca:d7:63:80:96:05:
         e9:59:2c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:44:00 2025 by rpki-client