Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/80ad0758-4cf7-34df-a66c-da87126c8a96.roa
File:                     80ad0758-4cf7-34df-a66c-da87126c8a96.roa (raw, json)
Hash identifier:          7PCDnBseko4Apmazv9zfBPmkpixTm1MGf0sUbsrSqrc=
Subject key identifier:   E0:FF:1F:2C:D6:9C:04:07:94:A9:1D:3A:E1:4C:CE:0D:0D:A8:D0:03
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848C150DB1C1B66D392F501B940
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/80ad0758-4cf7-34df-a66c-da87126c8a96.roa
Signing time:             Mon 03 Feb 2025 02:00:39 +0000
ROA not before:           Mon 03 Feb 2025 02:00:39 +0000
ROA not after:            Sun 04 May 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        174.208.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:50:db:1c:1b:66:d3:92:f5:01:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb  3 02:00:39 2025 GMT
            Not After : May  4 01:00:39 2025 GMT
        Subject: CN=31757720-e60c-40c6-9530-12342ec219bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:87:0d:d8:f3:b2:cb:46:c3:68:d3:05:bf:4f:
                    ab:95:f5:07:50:97:50:11:8c:b2:85:f1:4a:73:f1:
                    7c:43:6c:13:f9:79:6c:42:60:05:7d:a7:88:b9:6b:
                    52:31:00:fe:8f:a7:07:a6:8a:e5:ba:a9:62:07:f3:
                    57:48:70:a0:08:27:99:95:ab:a2:eb:bc:da:3c:cd:
                    f9:cf:62:05:dc:16:b2:8b:7a:9e:eb:0c:eb:02:fd:
                    b2:e9:9b:5f:eb:7a:95:da:2e:d1:7e:17:79:0c:80:
                    c0:7f:ea:b7:02:dd:4b:0c:14:82:e7:4b:4a:bf:89:
                    f1:87:7b:c9:1e:9b:67:17:57:5d:2b:ce:d1:a8:bf:
                    58:76:2e:13:1f:69:ea:86:30:29:8b:d6:7d:85:86:
                    7c:33:92:cc:de:ed:a9:3b:fe:a1:bf:ae:9d:00:b1:
                    ca:fc:5a:37:d5:a3:0a:5e:04:6f:b9:02:c7:8e:1f:
                    f7:45:c4:07:e3:c0:ea:51:2c:85:bd:8d:55:7a:0a:
                    bf:f4:e8:bd:40:c9:29:b3:c9:13:c6:86:b0:c5:6f:
                    09:73:80:31:c8:28:2a:3b:1a:33:be:e9:9c:69:f5:
                    cf:39:0b:ff:55:61:4b:a5:55:3b:48:6a:6a:b0:8f:
                    6d:39:4a:50:83:86:ed:74:3e:91:4b:9f:5c:60:48:
                    eb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FF:1F:2C:D6:9C:04:07:94:A9:1D:3A:E1:4C:CE:0D:0D:A8:D0:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/80ad0758-4cf7-34df-a66c-da87126c8a96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.208.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:8b:1d:af:64:57:ee:a3:a1:b0:14:ce:e7:78:30:c7:ec:72:
         e0:4c:71:53:79:0f:35:9e:3d:f9:06:21:f4:4d:99:83:9c:ba:
         12:2f:5b:70:2a:b9:90:a1:f4:a4:9f:97:27:19:a4:d9:ea:d0:
         8b:a8:25:5f:00:b9:63:2d:18:cc:5b:23:cb:15:c9:2d:b6:13:
         c0:a9:5a:c5:56:8a:5a:eb:4c:19:40:09:87:3f:dc:62:c6:65:
         0c:7e:ce:9f:6c:c5:6a:b7:72:40:bf:65:54:5e:8a:6e:f8:f8:
         3d:ac:08:83:ab:fb:19:f8:1f:82:9f:1b:43:06:bd:76:4d:98:
         07:d2:62:01:b6:bb:41:4f:0c:38:9d:cf:af:61:47:96:ce:35:
         17:f4:96:2d:d9:c6:91:cd:85:f9:96:db:0f:0c:e4:fb:55:54:
         67:33:6c:66:1a:e2:85:f3:06:bb:b6:cd:45:b6:7a:4e:84:28:
         73:85:f6:2a:7e:70:a6:80:aa:27:80:d2:85:d5:f2:f7:3e:8f:
         26:b3:7e:ed:6a:54:90:27:e7:1c:22:2a:dc:13:62:3c:27:f2:
         83:78:a5:2b:a1:56:06:92:51:05:6e:1b:d2:63:14:ae:d4:b5:
         74:89:04:1a:29:6a:11:83:1c:a5:85:67:cc:38:2f:04:a2:98:
         b2:4e:49:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:16 2025 by rpki-client