Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6ae6e8d1-dcd6-35f6-bd26-d340ded5be13.roa
File:                     6ae6e8d1-dcd6-35f6-bd26-d340ded5be13.roa (raw, json)
Hash identifier:          mJTt1nkEow9/XWJFW5GhqwsqzmBTrRFjzwdIiNWASR8=
Subject key identifier:   AC:C7:95:7B:90:E6:A6:0E:DD:92:EF:DA:F4:96:9D:4A:53:0D:F9:08
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848CF463733638B755311871500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6ae6e8d1-dcd6-35f6-bd26-d340ded5be13.roa
Signing time:             Sat 08 Feb 2025 02:00:38 +0000
ROA not before:           Sat 08 Feb 2025 02:00:38 +0000
ROA not after:            Fri 09 May 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        174.233.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cf:46:37:33:63:8b:75:53:11:87:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb  8 02:00:38 2025 GMT
            Not After : May  9 01:00:38 2025 GMT
        Subject: CN=b195b776-d8c8-466c-8c34-a339e543856d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8f:eb:cd:f2:c8:57:a7:7a:be:e9:b5:5f:d7:
                    8d:50:6e:64:8b:49:c9:4e:0e:4d:72:70:b7:ef:cf:
                    ca:1b:9b:31:26:ca:c5:07:bc:14:d7:87:f1:f3:7a:
                    01:87:81:05:d3:92:24:eb:24:ec:10:f5:b8:00:24:
                    8f:51:e5:5a:07:c7:ec:08:bd:ba:25:02:c7:09:11:
                    11:2e:d2:3c:69:36:2e:8d:4e:96:5b:ab:28:51:87:
                    3c:f7:e5:82:e8:e1:a3:95:1d:c1:32:31:bc:97:4b:
                    1a:1f:8b:2d:69:12:20:37:44:03:d1:28:d9:57:fc:
                    f4:03:b2:7d:5d:2c:fc:7a:d8:b4:ec:94:30:34:3d:
                    21:5c:f7:53:30:99:c8:89:bb:bc:4b:31:1b:f2:ed:
                    a8:37:69:4c:d4:0a:93:6f:95:90:aa:cb:59:5f:7b:
                    38:68:bd:2d:6b:65:a2:40:b4:e7:88:13:f8:aa:f4:
                    54:4c:d6:59:e2:f3:86:85:75:cf:79:93:5c:00:6c:
                    d6:ee:4d:da:77:0c:0d:a7:64:8a:ea:2a:23:bc:b4:
                    0f:5a:19:ea:a7:53:7e:dc:3a:2e:61:24:4d:c1:e4:
                    20:87:38:31:f2:6d:56:71:d1:69:88:cc:f5:3b:12:
                    9a:2c:7e:a3:6a:3c:07:50:8b:f6:7e:e3:97:dc:8c:
                    11:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C7:95:7B:90:E6:A6:0E:DD:92:EF:DA:F4:96:9D:4A:53:0D:F9:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6ae6e8d1-dcd6-35f6-bd26-d340ded5be13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.233.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:46:53:02:a0:83:e4:07:b1:8a:e9:99:42:82:03:e5:4e:f6:
         46:14:cd:8d:fc:33:bb:7a:30:0a:54:de:b7:fe:aa:4a:b5:ae:
         65:26:93:83:d7:b8:6e:56:ce:f9:b2:5e:de:26:3f:c8:c1:6a:
         c7:a4:9b:f5:0e:88:f4:cd:b5:fe:30:94:f9:af:65:ba:8b:bc:
         a0:d6:66:95:3f:22:30:e4:e5:fb:ef:fa:f2:e2:27:37:b2:cb:
         b1:8a:85:c5:6d:40:45:7d:85:b3:17:53:d9:b9:13:7f:3d:db:
         aa:9f:f7:a1:2c:6f:55:e9:d6:e0:c3:32:d8:b2:0b:57:3c:84:
         20:0c:62:07:d1:11:c9:a4:37:f8:22:c4:7a:1d:91:2a:79:68:
         4d:f5:65:e1:f7:f7:1d:d8:d3:af:8f:13:64:cf:b7:51:16:63:
         7f:e9:81:ca:c5:33:34:bb:95:04:90:35:cf:b3:08:50:a0:0a:
         ef:97:4f:84:1c:55:93:af:9c:a7:6a:5a:77:8e:74:bf:4c:34:
         19:95:a5:00:0a:60:24:a2:82:c1:2f:fa:9c:d3:bc:f9:8c:92:
         bd:35:02:2f:31:5d:dd:e8:a2:1a:c6:c0:08:c0:51:8e:f0:a5:
         ca:63:d6:97:ef:97:44:da:53:e5:72:2f:c0:e9:c1:c8:cb:bc:
         1e:f9:10:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:30:57 2025 by rpki-client