Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a0e80a3-10d4-3a1e-b4a3-7dc6d10e5257.roa
File:                     0a0e80a3-10d4-3a1e-b4a3-7dc6d10e5257.roa (raw, json)
Hash identifier:          KxOi/fVSjpNkNxPa790MT/yPEqcY8Iq+NdLeB2r5nQY=
Subject key identifier:   CF:AD:DB:3E:89:48:17:F8:E4:2A:BB:AC:B1:EB:98:16:1F:11:5A:17
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848E8666D301D766549E29B6D40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a0e80a3-10d4-3a1e-b4a3-7dc6d10e5257.roa
Signing time:             Mon 17 Feb 2025 02:00:38 +0000
ROA not before:           Mon 17 Feb 2025 02:00:38 +0000
ROA not after:            Sun 18 May 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        174.228.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:66:6d:30:1d:76:65:49:e2:9b:6d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 17 02:00:38 2025 GMT
            Not After : May 18 01:00:38 2025 GMT
        Subject: CN=5f0164dc-0fa8-47ce-8a00-c9684c977135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:df:e3:aa:ae:a7:9e:62:19:8c:0b:42:29:b7:
                    d5:3c:09:c2:8c:e1:6f:82:7f:ad:77:1f:53:6b:5f:
                    72:ac:4d:84:6f:62:63:ce:f7:c4:a4:8c:9d:cc:f1:
                    2e:77:58:3a:3f:3f:68:4f:14:f1:1a:a7:d9:5e:f4:
                    29:6e:2a:de:90:08:95:e4:93:a7:0e:40:10:92:8e:
                    19:56:8c:68:99:1c:98:35:cc:d6:0b:55:d1:65:a8:
                    57:fc:36:ee:3f:dc:db:21:fb:2c:2d:0d:bb:9b:cf:
                    6a:74:73:dc:0c:fd:c7:61:76:97:2f:98:2f:54:58:
                    d4:56:e6:2f:ad:3c:b3:77:de:ca:90:e0:8d:09:87:
                    fc:bc:dc:6a:62:0c:98:2e:1b:1e:0d:c9:54:e9:3e:
                    59:82:e0:94:7b:d9:c7:61:ee:f2:73:c5:e0:e7:41:
                    2e:aa:2b:3b:b5:56:26:c6:94:49:ca:2a:d4:65:d2:
                    07:37:79:8f:93:5b:a9:dd:63:b7:a2:38:a3:27:81:
                    49:fb:55:d5:fd:20:29:9f:7b:e0:e5:a3:a1:9a:89:
                    28:35:a3:b9:90:9c:6c:aa:47:66:59:53:e2:84:f6:
                    39:1b:e0:c4:8a:be:74:da:a9:58:9f:2f:47:8f:bb:
                    5a:46:7b:17:9e:36:d0:13:e5:e5:96:db:8a:32:ba:
                    11:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:AD:DB:3E:89:48:17:F8:E4:2A:BB:AC:B1:EB:98:16:1F:11:5A:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a0e80a3-10d4-3a1e-b4a3-7dc6d10e5257.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.228.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:02:7b:8b:92:79:1f:c6:f2:60:75:1b:3d:45:39:15:ff:d6:
         64:cd:b3:97:80:73:6b:42:8e:8e:5a:d1:42:76:f4:ab:e6:51:
         de:66:16:13:fb:65:10:dd:95:06:a2:97:e2:b9:60:71:6e:53:
         59:e4:f9:71:f4:2e:10:11:76:ee:21:88:16:58:6d:e1:ea:6f:
         c2:c2:d6:d1:1d:98:85:6b:45:47:c5:86:1d:7b:6c:bf:6b:58:
         fd:46:ee:34:5a:65:04:d9:eb:f8:1d:82:9f:90:dd:99:ed:f7:
         ff:c9:85:ac:5f:fb:59:39:d0:8b:c5:ca:d0:c4:fc:38:c7:b6:
         38:50:af:10:55:08:6c:7e:01:b5:af:c9:bb:b9:4e:12:f3:96:
         b6:95:98:c7:6f:13:0e:de:02:b4:51:0d:27:c4:56:74:67:dc:
         ac:39:98:86:20:d9:09:3d:26:fc:ee:85:16:ec:6c:2d:df:b1:
         08:40:46:c7:7f:80:12:a3:2e:dc:9e:92:38:dd:de:9e:9d:98:
         e9:23:43:8f:32:d2:ee:62:54:04:69:ea:f9:d4:43:8a:e3:ac:
         9c:c3:e5:37:0f:f5:0b:08:8f:0e:0e:4a:e9:d7:a6:d3:43:c4:
         0f:d7:40:e3:4e:34:9a:b9:cf:8f:3a:2e:97:af:f1:17:46:c5:
         f0:11:d4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:19:59 2025 by rpki-client