Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/960dc43f-f76d-3e6d-9525-869338b4a73e.roa
File:                     960dc43f-f76d-3e6d-9525-869338b4a73e.roa (raw, json)
Hash identifier:          G0PeaqxTIZkZrQAyKUnAlMkCqwCJSMvR3I5gM+FXEuo=
Subject key identifier:   B1:CF:07:A8:5A:EA:60:E7:5D:F1:5D:CE:3D:8F:BA:D4:36:1F:60:BE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848E8666D5EC38EF88E47835E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/960dc43f-f76d-3e6d-9525-869338b4a73e.roa
Signing time:             Mon 17 Feb 2025 02:00:38 +0000
ROA not before:           Mon 17 Feb 2025 02:00:38 +0000
ROA not after:            Sun 18 May 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        174.228.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:66:6d:5e:c3:8e:f8:8e:47:83:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 17 02:00:38 2025 GMT
            Not After : May 18 01:00:38 2025 GMT
        Subject: CN=c93ccaa8-7750-4980-bd64-b6f8c6fc0428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:88:60:20:b6:cd:dc:ad:56:92:89:9f:e7:bb:
                    af:70:11:24:ce:42:67:9a:65:8d:1c:d2:95:b4:a3:
                    ff:0a:a5:23:4b:8e:dc:b2:89:4e:47:98:ea:96:59:
                    c3:84:5b:e3:41:06:ea:68:9d:4c:71:ae:4b:7d:8b:
                    fa:7e:9e:7d:b0:57:9d:f3:95:1f:77:cc:cd:75:83:
                    2d:af:5c:d1:c5:60:c7:10:fa:08:9a:4c:26:fb:5a:
                    e6:11:7c:ba:f1:75:55:af:82:80:ec:5c:96:bc:56:
                    12:a5:68:69:03:d8:0b:95:6a:b0:ec:2a:ca:4b:ff:
                    ab:8d:bc:e8:01:f6:72:a7:83:83:97:d6:3b:d4:35:
                    2c:a7:59:29:d2:e3:eb:8a:52:e5:80:60:61:a7:51:
                    54:1a:26:df:df:7e:d6:4a:10:d7:30:eb:38:c7:d4:
                    a8:ad:55:fe:66:7a:d5:6d:3b:fb:a5:fa:43:9e:ea:
                    75:fc:35:5a:bd:af:e9:a7:cd:ff:88:ef:77:2d:2c:
                    48:1b:41:ca:73:6e:b4:79:23:97:c3:4f:51:0c:0c:
                    f3:11:ff:ce:96:90:d8:77:9c:08:93:d6:62:a3:85:
                    d8:26:39:b4:47:49:ff:f1:de:a3:68:3c:43:6d:27:
                    ca:40:93:c8:40:bf:c1:a2:5e:ce:4a:cc:f7:d0:64:
                    87:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CF:07:A8:5A:EA:60:E7:5D:F1:5D:CE:3D:8F:BA:D4:36:1F:60:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/960dc43f-f76d-3e6d-9525-869338b4a73e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.228.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:32:b1:a7:f2:9b:a7:6e:fd:49:19:2d:68:7c:04:7f:0c:c1:
         b4:d4:92:bb:8f:ae:53:af:c5:81:16:2f:96:a9:83:16:67:6d:
         32:b1:b0:75:24:84:d5:6c:29:79:25:b3:f8:57:37:34:16:21:
         5a:b2:28:55:c5:b3:aa:a2:e9:4b:4c:f3:5e:84:83:9d:7d:59:
         2a:af:89:a2:44:81:b0:9b:77:e1:0c:17:4f:1e:32:90:5e:12:
         75:50:ca:ab:1e:aa:b6:cb:76:a5:25:4c:5e:15:de:1f:40:ec:
         1a:3a:bd:f0:a0:d6:a4:90:bf:38:4b:16:1e:d1:8f:0a:56:07:
         e6:d5:66:34:68:2e:f1:42:17:98:32:91:7e:46:cf:83:14:51:
         36:98:c6:06:74:af:67:72:37:84:f3:79:26:21:8a:da:f3:fb:
         b9:d3:fb:22:4a:e5:42:72:0c:2e:e1:81:b6:19:ed:44:98:47:
         a8:ac:20:72:ee:a5:c2:1b:4b:50:d1:8d:81:49:ad:a0:76:6c:
         f0:50:ce:a7:e3:ad:df:0d:2f:a1:89:6d:b7:d9:6c:cc:3b:d3:
         57:4c:9d:3c:52:cb:3f:2d:87:47:52:21:98:77:68:ab:d9:cf:
         20:c8:71:6e:1e:45:db:50:35:c7:a4:ab:58:6d:79:72:4a:ee:
         9b:74:4e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:47:55 2025 by rpki-client