Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/42b1b5b9-734d-3472-8ca9-57a187182ff9.roa
File:                     42b1b5b9-734d-3472-8ca9-57a187182ff9.roa (raw, json)
Hash identifier:          h2YJl7vx5CAzcQBuRKsTMQjoVHF4PsgSW7BRKBuNhME=
Subject key identifier:   A5:47:F1:D8:53:E2:3D:DF:D8:13:71:71:CE:CB:AE:A2:FC:CA:BF:41
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848E86679A20D38C23DFE7C08A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/42b1b5b9-734d-3472-8ca9-57a187182ff9.roa
Signing time:             Mon 17 Feb 2025 02:00:38 +0000
ROA not before:           Mon 17 Feb 2025 02:00:38 +0000
ROA not after:            Sun 18 May 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        174.248.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:66:79:a2:0d:38:c2:3d:fe:7c:08:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 17 02:00:38 2025 GMT
            Not After : May 18 01:00:38 2025 GMT
        Subject: CN=78efeef0-7587-4361-9f8b-06fb3199de3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:88:04:c4:e0:3f:62:54:29:52:a5:f3:37:ea:
                    c4:5c:6a:d0:da:6a:39:16:94:14:ee:06:12:6e:96:
                    cc:6c:e8:ed:05:e1:33:b1:c2:7b:f3:e4:30:ce:f9:
                    96:40:35:67:f9:97:09:de:b2:40:0a:52:a9:03:81:
                    79:71:bc:9b:c2:ea:05:aa:78:44:6c:62:f7:29:ea:
                    7f:ab:77:a8:dd:81:19:51:02:b5:d5:5b:88:3d:9b:
                    20:e3:1c:65:dd:d9:d5:37:04:27:84:82:3f:88:6f:
                    26:6a:ea:6a:89:3b:83:49:39:d5:db:14:7b:f6:6a:
                    b4:87:93:75:af:3a:8f:76:d9:e9:47:1e:96:31:46:
                    73:b4:d6:df:f4:44:4e:2c:d8:73:17:64:eb:42:9f:
                    ba:8a:c1:db:7a:5d:9b:90:be:68:a4:20:15:cf:6d:
                    07:84:8f:c6:a9:19:44:b1:d5:c7:83:31:5e:78:82:
                    78:6f:be:0d:69:c7:fe:2f:06:1d:41:54:03:b1:64:
                    6d:8e:81:f2:66:2d:f7:0a:b0:bb:2e:70:af:74:0c:
                    f6:bd:51:47:70:ae:85:c1:cc:8a:6a:26:ec:8c:19:
                    95:3c:3b:e1:c7:c5:bd:b5:14:16:eb:d7:4e:9d:66:
                    fb:75:13:67:6e:50:c7:90:23:bd:bb:b5:96:b9:27:
                    a3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:47:F1:D8:53:E2:3D:DF:D8:13:71:71:CE:CB:AE:A2:FC:CA:BF:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/42b1b5b9-734d-3472-8ca9-57a187182ff9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.248.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:37:41:ce:78:a8:34:dc:c2:d0:75:1c:08:ce:ce:05:85:a3:
         51:32:e3:ad:b3:5c:c1:b0:87:81:20:ac:1c:1b:01:fa:a5:0a:
         15:13:60:7b:34:f2:c3:83:a7:eb:33:8f:8c:2f:a8:fa:34:0f:
         b8:47:c3:87:84:30:78:68:27:8b:c7:e2:8b:a9:16:ab:60:9d:
         37:f6:e1:7d:fb:97:d6:88:f5:ca:63:16:43:e6:b1:bf:b2:a8:
         23:a0:dc:f8:41:13:5c:b4:f7:12:c0:bb:8c:5d:9a:fc:0f:69:
         56:ad:5e:2a:6c:e7:82:59:b9:58:84:c9:6b:de:ab:9a:65:4c:
         9d:f8:28:9b:0b:e2:64:ff:9e:47:ac:6c:36:31:be:e9:fb:74:
         1c:77:c5:06:f7:b6:09:6c:a3:58:d1:f7:6b:86:e0:5d:8d:a1:
         82:61:20:5a:58:5e:01:da:8c:e1:f4:2a:8e:16:8a:20:96:36:
         d4:9c:e0:b3:31:41:2e:89:dd:a7:65:39:df:df:b3:a7:6c:4d:
         e2:16:a5:e2:f1:78:54:5d:6c:d4:45:7c:e1:e1:67:6e:f3:6a:
         a1:fc:5f:1f:73:34:50:a3:f5:63:21:58:1c:f5:74:28:2b:25:
         b3:95:98:7d:01:e8:40:ed:f4:bd:b3:87:99:d7:cd:b6:fa:8c:
         db:87:39:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:41:49 2025 by rpki-client