Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3adf2910-9047-3f74-8e31-49a22f8f8264.roa
File:                     3adf2910-9047-3f74-8e31-49a22f8f8264.roa (raw, json)
Hash identifier:          Z3BHvd+g8zEJj7UX9kceTfORyFg1+8Xtpz5/mATEu+k=
Subject key identifier:   96:35:DF:95:13:52:E8:C4:AE:F5:45:1E:FF:84:A5:6F:85:B6:54:70
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848C150EB9E57D9B606314FD580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3adf2910-9047-3f74-8e31-49a22f8f8264.roa
Signing time:             Mon 03 Feb 2025 02:00:39 +0000
ROA not before:           Mon 03 Feb 2025 02:00:39 +0000
ROA not after:            Sun 04 May 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        174.213.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:50:eb:9e:57:d9:b6:06:31:4f:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb  3 02:00:39 2025 GMT
            Not After : May  4 01:00:39 2025 GMT
        Subject: CN=f112e842-c3b1-496c-9a89-adc2eb04d2c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:10:a7:f7:f7:c4:d4:13:40:c7:d0:51:26:98:
                    57:25:37:2f:ec:d3:ef:3e:f0:8e:04:79:5d:03:8a:
                    2c:d0:c4:e4:9c:4d:70:1e:25:61:c1:3c:75:14:f0:
                    37:da:90:72:a7:d8:9a:f1:a4:2b:57:cd:05:3f:ce:
                    a4:b4:f3:a9:12:fd:dd:be:97:9b:92:d0:74:23:66:
                    89:dc:6d:78:dd:0d:1c:b7:e7:fd:68:5a:9a:ed:9b:
                    2c:d6:e2:ac:73:67:e7:f4:e5:01:c0:69:45:c9:27:
                    ef:49:1f:01:dc:36:96:b4:9f:e3:99:ba:ec:03:3d:
                    2b:5c:77:0f:12:fb:82:e9:41:64:42:96:21:d8:73:
                    77:79:98:27:92:2f:cf:18:b1:4a:71:31:b2:00:53:
                    ef:39:30:d1:d5:d5:b8:20:80:67:af:aa:37:1f:c6:
                    10:67:6b:2c:bc:9d:ef:af:5c:6c:1d:9a:29:f3:f4:
                    ff:86:c1:d7:f6:59:9e:63:25:9f:45:e8:08:a1:74:
                    e6:3d:8b:11:2f:84:21:af:ec:a4:2a:f5:07:a8:5c:
                    90:48:08:10:39:e1:83:39:21:c3:86:71:e8:43:e0:
                    e7:71:47:9e:5f:23:46:d4:52:57:77:e0:fe:ea:ad:
                    d4:8f:d6:94:44:d1:b7:1a:41:73:bc:42:c6:2e:5e:
                    b6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:35:DF:95:13:52:E8:C4:AE:F5:45:1E:FF:84:A5:6F:85:B6:54:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3adf2910-9047-3f74-8e31-49a22f8f8264.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.213.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:c8:81:15:32:e8:70:f5:f4:95:33:73:9c:aa:15:93:d9:8e:
         67:d7:6b:19:c6:aa:ce:4a:e9:c3:2f:e9:39:16:ea:99:82:b3:
         81:71:b6:cb:91:6d:b8:c2:05:ea:d2:f6:58:3a:4b:0f:f1:b9:
         83:81:97:34:89:0f:7d:0c:83:12:ac:dd:e0:4b:58:06:6d:82:
         03:5f:b0:a6:f5:2b:9b:35:96:2c:3c:4c:eb:75:fc:a6:f3:62:
         62:08:f4:4c:54:e2:ee:d0:4b:6f:98:d7:55:d6:e8:f2:f8:0b:
         03:83:f4:c8:27:d1:dd:27:ef:8f:a9:b3:48:bf:55:87:c4:58:
         44:68:c3:a7:1c:33:e9:2f:7f:d6:af:dd:b6:27:c8:98:f7:dc:
         f0:89:1b:c3:ce:15:59:e1:a6:56:55:a1:8b:36:e5:83:f0:0d:
         53:ae:49:c9:e7:3f:7c:7d:66:3f:96:e4:c0:50:44:fe:ca:25:
         7a:9f:ec:53:fe:d5:20:4b:c0:54:44:13:65:ec:68:7a:6a:f1:
         09:e5:e2:f9:29:3d:03:60:75:ee:3b:67:20:5b:03:5b:10:57:
         4a:e5:b5:e5:13:1e:99:8e:b4:a9:93:c1:b3:5f:8a:b3:87:92:
         c3:7a:97:6b:2b:e8:a3:be:af:4b:83:48:97:66:f8:d4:07:35:
         78:85:80:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:10:30 2025 by rpki-client