Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3419ba6c-0f82-38ec-9e54-036464ac2036.roa
File:                     3419ba6c-0f82-38ec-9e54-036464ac2036.roa (raw, json)
Hash identifier:          AG59XJpPSd1O0WG7DXapY+F70+E7368LKJp63+X+I5c=
Subject key identifier:   08:40:EF:66:15:E2:0B:60:72:EF:39:B6:F1:EB:12:21:60:63:2A:05
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848C150ED27ED31C82F2F2E3C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3419ba6c-0f82-38ec-9e54-036464ac2036.roa
Signing time:             Mon 03 Feb 2025 02:00:39 +0000
ROA not before:           Mon 03 Feb 2025 02:00:39 +0000
ROA not after:            Sun 04 May 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        174.224.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:50:ed:27:ed:31:c8:2f:2f:2e:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb  3 02:00:39 2025 GMT
            Not After : May  4 01:00:39 2025 GMT
        Subject: CN=5d54f944-d3e5-49a7-8fa6-a1e368ad34ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:18:01:49:95:6b:f4:dd:5d:96:ff:e5:db:47:
                    62:b8:82:2c:93:e4:97:83:e6:f3:bb:cf:b7:4c:df:
                    64:b9:aa:d6:cb:a2:83:4d:89:75:89:48:09:78:9e:
                    ee:5e:7c:5a:dd:32:94:32:2d:14:82:28:46:ea:d0:
                    fd:88:b2:1b:29:12:92:f8:89:25:74:b4:74:8b:8f:
                    0f:dc:e8:52:c4:b4:70:91:18:b4:0f:0d:c5:55:34:
                    1e:a1:ab:35:90:f9:e8:21:91:fd:1e:7d:7c:7d:86:
                    b0:3d:7f:0a:0e:5e:ed:a8:4d:d3:26:3c:fc:3c:0b:
                    96:de:6f:f3:12:a9:06:7f:e6:ce:2a:16:72:0e:21:
                    0b:29:15:c2:1a:7e:36:40:a6:a0:62:90:35:cb:28:
                    06:b6:6b:4c:a2:8a:7f:8b:08:f2:59:07:cb:51:bd:
                    57:50:79:e7:2f:81:87:27:4f:e9:e8:e6:6f:4c:4c:
                    2f:17:40:e2:a0:f1:f1:fb:c4:a0:ed:43:2b:b7:5a:
                    22:2e:fb:5c:6c:ee:74:d7:4f:01:d9:8e:c5:68:57:
                    e7:70:68:42:f8:bc:6a:80:86:cd:87:5d:ba:b9:b1:
                    5e:4c:54:a6:ea:f6:0a:01:81:45:2d:1c:f1:1a:d5:
                    6f:e3:dd:11:24:d4:fa:95:71:90:61:7c:8c:24:b1:
                    54:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:40:EF:66:15:E2:0B:60:72:EF:39:B6:F1:EB:12:21:60:63:2A:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3419ba6c-0f82-38ec-9e54-036464ac2036.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.224.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:1b:7f:39:65:6c:08:65:45:f2:31:6c:70:2a:5e:2e:6f:2b:
         ff:af:b6:33:63:11:1e:8f:5b:6f:63:9a:c2:c2:21:20:f2:47:
         03:95:69:19:e4:ca:c7:a5:e8:13:ce:81:9c:b9:a1:70:8c:82:
         a1:86:76:a0:5e:19:28:4e:2b:43:92:8f:09:00:fb:6c:6d:d6:
         e4:28:0a:d8:1b:4f:ec:6d:3a:a4:39:a9:08:20:c4:42:20:d7:
         46:b7:a5:76:66:8a:21:81:fb:51:cd:43:6c:e2:78:42:ec:2e:
         63:6d:eb:5d:e9:ac:5c:93:c4:9b:73:39:97:9a:84:d0:35:9b:
         bd:4c:df:e9:04:f4:d3:ae:86:d5:15:fe:cc:78:04:6b:5b:9e:
         4c:39:48:45:fd:40:d0:85:7b:b5:20:a8:e8:8a:1c:64:23:ee:
         bb:b8:53:25:d9:f9:ff:0f:2f:1b:d3:58:c6:dd:29:d9:ec:b1:
         c4:10:b9:c9:22:0d:5d:27:9a:3e:71:9b:e2:1d:85:c1:f7:87:
         9f:f0:12:28:2a:91:db:0a:53:5f:48:71:e3:db:28:f8:9c:9f:
         b4:90:c3:cd:04:4a:be:f1:e4:47:2c:d4:1c:2a:0a:9f:91:ff:
         05:d9:2d:7b:b8:ae:b6:5f:7b:4e:ef:89:c0:9a:c1:c0:c0:69:
         5c:09:72:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:51:07 2025 by rpki-client