Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a4dbbb5-282e-3b13-874d-c1c4aba6acb4.roa
File:                     5a4dbbb5-282e-3b13-874d-c1c4aba6acb4.roa (raw, json)
Hash identifier:          3ZyViZeelqsshLDMc6LinBMHEmmwIryAMaLg28swfiU=
Subject key identifier:   F9:67:BA:3F:EC:34:8C:14:73:41:89:C8:D6:3D:EF:B4:E5:C5:1D:24
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848C150EAB769CB04201583BB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a4dbbb5-282e-3b13-874d-c1c4aba6acb4.roa
Signing time:             Mon 03 Feb 2025 02:00:39 +0000
ROA not before:           Mon 03 Feb 2025 02:00:39 +0000
ROA not after:            Sun 04 May 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        174.212.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:50:ea:b7:69:cb:04:20:15:83:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb  3 02:00:39 2025 GMT
            Not After : May  4 01:00:39 2025 GMT
        Subject: CN=a6740ab3-9521-4f03-87ea-8f17e3516e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c8:eb:34:0a:6f:90:27:ad:52:2f:69:61:a8:
                    ac:ff:96:d9:2c:b7:37:c0:52:65:fa:ce:8d:df:0f:
                    73:b1:87:16:e5:bc:db:2d:8c:9c:78:50:44:08:d3:
                    79:92:bd:1d:a8:76:94:1c:c0:3e:ea:34:6c:e6:da:
                    2f:fd:19:dc:c5:34:d1:91:ae:2a:65:e3:8e:4f:20:
                    e1:44:e0:d8:cd:8c:78:b2:36:b6:18:1f:71:1d:2c:
                    32:50:f5:57:ab:a1:61:c6:4d:d2:a0:a4:18:b2:70:
                    9e:17:b3:74:7b:3c:42:ee:c1:15:ad:f2:b6:57:b3:
                    dd:c0:57:98:f9:6f:b2:31:36:58:a5:9d:c2:da:fd:
                    61:59:c2:0b:4a:3b:a6:44:38:1b:1e:92:b5:a7:b7:
                    7f:bb:4c:f8:3e:63:06:2e:9d:34:76:0f:85:7e:78:
                    8f:c8:35:07:2b:22:2d:cd:15:84:fb:4d:11:92:4f:
                    96:85:f6:7e:df:d4:cf:d9:f1:fc:f5:7c:e7:ee:5d:
                    34:27:9b:d2:b0:ca:2c:89:73:36:30:55:a9:bd:c5:
                    be:2d:b9:7a:36:ba:67:05:05:c2:28:06:a2:c5:b0:
                    c6:7f:00:93:9c:07:b2:c6:83:ec:52:5d:67:91:93:
                    e0:d2:3f:6d:96:d1:e3:6a:10:96:2e:a4:96:6c:f8:
                    ac:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:67:BA:3F:EC:34:8C:14:73:41:89:C8:D6:3D:EF:B4:E5:C5:1D:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a4dbbb5-282e-3b13-874d-c1c4aba6acb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.212.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:a7:44:89:47:f2:87:3d:4a:ef:0f:9f:2f:a1:b4:e5:43:22:
         6b:6e:17:c1:61:95:68:e6:62:26:57:ea:61:d6:63:a4:39:ac:
         1d:f8:0d:35:7a:08:0b:8d:f2:5e:43:00:1f:81:22:86:3c:a6:
         b0:27:1b:58:d2:a6:d1:d4:c3:b0:87:37:c7:57:61:62:31:47:
         aa:76:30:24:ea:83:0d:48:58:c2:78:25:b0:34:c7:5c:2c:d1:
         11:4e:40:27:0f:c1:d8:a5:9f:6b:f1:3a:e6:12:7e:0f:26:2b:
         53:4c:1e:f3:e2:75:6f:f0:12:27:39:90:ab:58:4f:ff:a2:5d:
         1f:5b:92:1f:3c:86:7a:9c:01:32:70:86:a8:6d:b8:51:0d:43:
         98:76:5d:8c:82:b5:cf:9d:8b:b9:c6:1c:9d:82:6b:0c:e9:c7:
         24:7d:c2:9f:1d:fb:f9:4d:42:d1:ca:64:35:ee:fa:82:a3:32:
         db:96:37:be:2b:f7:8d:c5:5d:c9:d6:48:86:51:11:5d:82:f9:
         05:ba:b0:e8:bb:1c:e6:ad:6e:c9:a2:1a:30:4f:c2:d4:0a:98:
         4a:cf:c8:be:58:99:19:0c:a9:c9:d3:a0:73:f3:c3:c8:b9:80:
         7a:76:a3:28:d9:e5:8d:ab:61:39:69:38:27:9b:c7:90:7b:e2:
         4d:1a:a9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:17:38 2025 by rpki-client