Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/16898ba0-f9db-38cf-96f9-1c42cb11f183.roa
File:                     16898ba0-f9db-38cf-96f9-1c42cb11f183.roa (raw, json)
Hash identifier:          6Zr7pF/uu62AeF4/EmZ7oX86F9qj4MLTpsy+nD0qd3A=
Subject key identifier:   6C:98:C1:AA:B2:7E:9B:4B:3A:58:BE:F2:FF:C1:CE:70:ED:7E:45:70
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848E8666B2C0F8ECE4B2F54FCC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/16898ba0-f9db-38cf-96f9-1c42cb11f183.roa
Signing time:             Mon 17 Feb 2025 02:00:38 +0000
ROA not before:           Mon 17 Feb 2025 02:00:38 +0000
ROA not after:            Sun 18 May 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        174.225.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:66:6b:2c:0f:8e:ce:4b:2f:54:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 17 02:00:38 2025 GMT
            Not After : May 18 01:00:38 2025 GMT
        Subject: CN=b61d8fba-8374-4b34-9f5c-6e64b9d05be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:66:a7:41:e0:e4:b6:de:c4:e7:22:83:f8:94:
                    30:e5:d0:33:00:a4:6f:1b:d0:b3:cf:cd:10:d6:86:
                    5d:5b:4b:bc:49:0a:7a:a3:7f:dd:67:b8:47:d0:1f:
                    9e:01:4b:84:7f:14:d5:3b:3d:3f:b7:f6:5c:c6:ae:
                    08:8d:93:44:cc:ba:9b:d8:cd:eb:17:e2:8e:6f:91:
                    8d:2a:b0:02:4a:61:19:5a:b9:11:75:49:34:64:e1:
                    ed:2b:fe:8c:90:df:98:b2:f5:82:b4:64:47:db:44:
                    7e:d9:3c:2d:ef:04:4e:c9:65:d3:1d:28:d2:3c:09:
                    3e:c1:8a:bb:09:58:f6:c0:68:f9:9b:9f:d1:07:9c:
                    db:aa:a5:14:12:cc:01:e9:d4:84:64:81:ca:93:df:
                    ac:77:dd:b6:a3:ae:36:aa:dc:e7:59:39:a4:47:81:
                    e2:3e:f9:ec:49:41:54:39:7e:f4:11:fa:d1:0b:14:
                    60:ab:a8:20:08:de:db:f4:f6:c0:21:2e:0e:a3:3c:
                    0a:82:02:20:43:3f:9a:27:1e:ad:95:a7:d3:27:de:
                    d8:be:6c:98:04:b9:fd:2d:6d:21:47:3d:4a:91:01:
                    bc:77:92:cd:b3:b9:c1:48:01:ec:53:7a:45:44:5b:
                    b2:90:0a:8c:dd:7c:a9:1a:73:2a:d6:38:d9:7a:f8:
                    fc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:98:C1:AA:B2:7E:9B:4B:3A:58:BE:F2:FF:C1:CE:70:ED:7E:45:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/16898ba0-f9db-38cf-96f9-1c42cb11f183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.225.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:2c:1a:0e:0f:93:8b:49:48:1f:2e:4c:54:3b:5f:32:ff:b1:
         01:4e:3a:3c:0b:c5:bc:04:04:ac:10:8d:51:82:06:f7:da:18:
         09:f2:dc:68:8e:0f:99:02:24:22:58:e6:e8:e4:60:48:ed:85:
         40:22:e2:fd:6d:d5:c4:62:ff:64:d2:4a:63:41:d1:cd:65:d7:
         15:52:f8:d8:8d:ff:66:58:ce:45:62:60:4c:95:aa:9a:56:ea:
         27:8e:d3:a7:4b:1c:b6:a1:b4:fc:6f:06:91:51:35:3a:c7:1e:
         47:8b:d9:a7:0c:48:ef:be:f1:c1:e5:84:d0:eb:31:85:3d:dd:
         af:03:28:3b:5b:f2:f1:50:d3:02:7a:7c:75:90:ed:93:de:95:
         29:ea:54:8d:02:2f:76:93:5b:4d:1c:15:e1:79:84:01:25:8f:
         0e:12:49:43:e2:c3:0f:45:ed:31:df:ce:8c:fc:f5:37:c0:0e:
         49:a1:ec:a3:d7:24:93:10:92:b2:d2:54:b9:88:2f:41:84:37:
         25:75:a8:11:f8:8d:7d:ba:30:c0:63:be:c9:ca:f8:26:ed:2a:
         58:54:f0:76:aa:fd:9c:3b:ed:4c:d6:b9:e9:39:46:66:4c:eb:
         2d:8b:6e:b8:ef:76:08:2e:c3:23:62:25:17:dc:54:14:a8:44:
         94:97:eb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:21:21 2025 by rpki-client