Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ef4290d-3e2b-37bc-a8ea-1620aaa9532d.roa
File:                     8ef4290d-3e2b-37bc-a8ea-1620aaa9532d.roa (raw, json)
Hash identifier:          ch15q6J01emVxsDhyXmTaQj9WErnSjbq0QIqSfUSZsM=
Subject key identifier:   59:4B:22:12:63:8C:44:2C:D6:D9:40:FE:DD:D1:D9:DE:6D:2A:D2:3F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849648465592768A7234D05E580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ef4290d-3e2b-37bc-a8ea-1620aaa9532d.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        75.229.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:65:59:27:68:a7:23:4d:05:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=ba96fa61-64ff-40fb-b5fb-f63e25799846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:aa:b7:49:c1:fd:dd:15:48:4f:9a:8d:58:a2:
                    1c:1e:e1:14:f0:ec:8f:af:9c:f4:62:20:63:70:e2:
                    68:a3:90:b6:e8:a8:78:37:02:c3:1e:51:83:be:d2:
                    b8:c2:69:34:93:4c:b7:88:48:6d:bf:56:c9:3f:d3:
                    5e:00:02:f3:a9:aa:0f:77:2b:68:57:53:7b:d4:0c:
                    b9:ab:98:f4:12:df:7f:53:83:ca:fe:24:00:0a:53:
                    86:3a:0d:53:c7:2a:45:cb:56:43:4a:74:67:72:c5:
                    97:8a:c0:89:16:61:35:ef:5a:f7:a3:32:99:2f:6f:
                    58:e1:09:ed:7f:4e:96:3f:01:ea:cf:b4:8a:7e:ff:
                    16:93:9e:76:ba:fd:ac:7c:99:ac:30:8a:1e:04:6d:
                    b8:05:75:27:8a:cf:5c:dd:86:fb:ed:f5:c8:c3:3a:
                    07:70:df:48:0e:31:96:4f:5e:e4:1d:02:e0:81:1d:
                    ea:4a:5b:cb:8a:f4:c0:3f:3b:6d:d5:ab:75:70:e4:
                    e9:9b:4b:3c:b4:4b:f4:66:58:ed:59:83:d9:e2:56:
                    2a:d9:dd:1c:58:a0:25:0e:10:60:71:1b:a7:f6:37:
                    6c:ec:14:43:bf:96:a3:e8:de:54:de:04:65:95:c1:
                    39:f7:0f:6d:bd:fc:d5:08:f9:ac:f1:46:60:0a:2d:
                    0f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4B:22:12:63:8C:44:2C:D6:D9:40:FE:DD:D1:D9:DE:6D:2A:D2:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ef4290d-3e2b-37bc-a8ea-1620aaa9532d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.229.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:06:d4:d9:2d:3c:a6:a5:87:14:6e:16:66:12:91:d8:df:39:
         ed:c0:63:b3:0f:fb:94:e6:93:0a:36:bd:2b:78:2f:8c:3c:ca:
         c3:83:f4:de:b3:48:5f:69:45:46:46:c7:13:40:2b:31:d3:fd:
         ea:00:c0:a6:77:05:20:be:5a:92:ca:65:30:df:74:49:62:61:
         78:9c:be:ab:4a:19:f6:81:8e:0b:17:20:7e:aa:62:62:f4:94:
         0c:e2:ef:e8:00:eb:05:89:9c:4e:4e:2b:9b:7e:15:60:bb:ef:
         1f:22:e6:4d:38:7f:ca:a9:7c:14:16:cd:b1:fb:1d:1c:68:de:
         c0:98:f5:de:ae:44:0d:fb:70:e5:b2:02:6b:de:2c:6e:a6:2e:
         60:a7:4a:49:5f:21:44:96:d7:d3:1f:d0:cd:71:b7:68:22:57:
         e6:b9:a2:c2:32:66:5e:5e:3d:bd:ab:4a:25:a5:88:56:fe:85:
         e3:1e:ae:a7:bc:34:ca:21:f0:f4:40:66:07:99:29:c0:3a:64:
         67:c5:f6:ba:5e:90:cc:2c:7e:3d:6f:af:78:81:86:dc:6a:ef:
         f7:fe:8c:33:7c:ea:43:23:c2:10:5a:60:38:9c:39:ff:78:ea:
         3b:b9:a8:1e:94:09:b2:7e:6e:11:b8:15:29:3b:0a:75:95:60:
         4a:66:59:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:28:28 2025 by rpki-client