Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/668844c2-25c7-3f97-9873-cfa3a0d3e0d8.roa
File:                     668844c2-25c7-3f97-9873-cfa3a0d3e0d8.roa (raw, json)
Hash identifier:          cOStD0DnK6NMkWoHgK+i8HsSmpl7/s44GC3U9ECrq+U=
Subject key identifier:   71:00:E6:0E:C7:48:79:5D:28:B3:FB:C8:7A:06:FA:63:6D:6E:38:E1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848E8666507F7C05D594ABB4FC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/668844c2-25c7-3f97-9873-cfa3a0d3e0d8.roa
Signing time:             Mon 17 Feb 2025 02:00:38 +0000
ROA not before:           Mon 17 Feb 2025 02:00:38 +0000
ROA not after:            Sun 18 May 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        174.229.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:66:65:07:f7:c0:5d:59:4a:bb:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 17 02:00:38 2025 GMT
            Not After : May 18 01:00:38 2025 GMT
        Subject: CN=e05aff03-8642-432d-a86d-0bfc88c9290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b9:b1:55:c1:55:b6:9e:84:5f:99:40:15:28:
                    46:d1:23:2f:56:30:94:0e:50:51:dc:c5:4a:ba:31:
                    fa:6d:70:5c:17:5a:1d:31:f7:eb:10:a5:88:e2:35:
                    e4:35:da:18:8f:92:c3:65:00:63:09:bb:c6:7a:c0:
                    cf:b4:c6:de:fc:26:74:72:87:06:dd:22:35:e6:70:
                    94:ef:0b:66:02:96:91:c5:57:92:87:66:24:87:4e:
                    6e:bf:28:f6:ae:85:5b:04:5a:ad:5d:27:75:cc:a7:
                    42:ff:e1:8f:33:22:48:10:47:08:3b:59:dd:2d:a7:
                    21:36:b3:f5:26:11:5d:b5:4d:c3:86:1d:a6:c9:c4:
                    ce:47:c1:9b:02:a9:7f:1d:ff:03:2a:6a:b7:2c:d1:
                    54:53:50:1e:c9:30:50:24:3b:4f:3e:af:c3:85:63:
                    f3:70:36:34:80:16:97:42:af:a7:0c:54:8c:58:c3:
                    ca:4b:cd:63:49:30:f9:17:48:e8:df:71:93:a6:99:
                    9b:e7:bd:36:bb:5b:1f:f8:ba:a4:e8:67:ff:8d:18:
                    b7:77:d5:58:da:c6:82:ba:6d:12:7c:4f:0c:e0:f9:
                    ac:9e:ec:20:02:fc:5b:95:fe:ea:1e:1a:03:9d:3e:
                    17:42:62:e0:09:9f:9c:1c:1d:f0:92:93:4b:32:8b:
                    bf:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:00:E6:0E:C7:48:79:5D:28:B3:FB:C8:7A:06:FA:63:6D:6E:38:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/668844c2-25c7-3f97-9873-cfa3a0d3e0d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.229.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:82:b8:26:9b:30:6e:7e:18:6c:72:f5:05:c1:10:7a:1e:9b:
         ef:d2:31:83:5a:34:bd:9e:dd:9d:16:cb:9e:6b:54:7f:9e:19:
         c6:97:12:d0:01:b8:04:c6:68:29:c4:e0:2b:32:6b:f7:ac:d2:
         27:00:5e:c9:03:dc:83:aa:9c:57:97:bb:be:d8:93:c9:73:81:
         0a:12:6c:14:e5:b4:d0:36:8b:98:f4:c5:02:01:50:e1:fb:fd:
         40:4f:2a:5b:ac:76:7a:a5:90:77:9b:8e:7f:89:b7:39:62:3b:
         84:8a:e1:d0:e9:60:cc:79:e1:56:17:f1:cc:3f:26:fe:5b:2e:
         a8:13:a8:c8:e4:97:00:58:f1:53:00:54:2a:c5:9f:27:75:1c:
         41:36:90:9e:d0:a3:91:0e:8f:de:82:69:bc:8b:3b:da:15:f8:
         78:0d:0d:eb:3a:c3:88:88:cb:33:41:c9:23:1a:bc:85:15:13:
         ce:31:9e:f2:bd:a3:66:c7:95:b1:45:48:0f:2e:99:b0:90:ca:
         93:75:f4:86:d3:3b:28:47:19:5e:60:0f:a1:bd:e1:c9:1c:45:
         ba:ca:71:7e:0e:98:b9:5d:e7:58:91:ce:bf:8c:1a:96:65:a2:
         83:c9:b4:50:15:31:ee:66:44:33:c2:b9:af:aa:b3:e4:81:ba:
         7d:28:b6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:39:06 2025 by rpki-client