Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/963b59a4-74ab-32cb-b100-39652a6d9ebd.roa
File:                     963b59a4-74ab-32cb-b100-39652a6d9ebd.roa (raw, json)
Hash identifier:          JS7/7chOy6131NYFgBh/1yxQxZeC6CA2UBpNiS2WyUg=
Subject key identifier:   A9:D3:90:87:F2:95:10:55:AF:36:33:35:93:93:B2:7D:6A:FB:2B:84
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849CE9A7F19B10E38F64DBD8480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/963b59a4-74ab-32cb-b100-39652a6d9ebd.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     6167
IP address blocks:        174.42.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:7f:19:b1:0e:38:f6:4d:bd:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=46dc3d51-92c5-4de1-b439-33f25081c64b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2c:56:d0:bd:bd:10:22:e9:a1:64:75:88:59:
                    5a:3a:d1:99:6e:ad:98:47:b0:ce:31:d6:df:54:c2:
                    48:58:c7:59:1c:e2:dc:33:60:c9:6d:95:72:9f:48:
                    a1:00:1b:14:11:d6:00:74:0e:b7:13:2b:1e:a7:44:
                    48:9e:f8:7c:80:f1:cb:b0:5a:a1:1a:14:f4:aa:89:
                    d9:7a:bc:63:91:f6:21:64:31:05:8a:bd:b2:e4:1b:
                    43:36:e5:7c:0c:17:11:1d:a8:d8:72:f7:bd:5a:d7:
                    72:49:88:ba:47:d0:b3:02:b4:84:c5:01:e4:c9:f8:
                    2c:bc:2c:62:ba:04:67:c1:3c:a7:16:15:39:1e:fe:
                    f6:ea:a5:e3:9c:1c:a8:a7:fe:ee:0f:c1:ab:b1:1a:
                    ac:a7:52:97:d1:97:41:7c:53:3c:86:eb:1a:f2:c2:
                    9e:7d:82:a8:b1:4b:b5:52:a0:fe:59:81:48:05:df:
                    4e:e0:c1:1a:49:ad:ca:7b:0e:d9:ef:4d:a5:bd:0a:
                    9b:40:89:2c:15:a9:94:d9:c7:4d:35:6c:8a:c6:d3:
                    28:92:51:f6:43:b0:3e:9f:7d:be:5c:20:06:c4:8c:
                    ff:fd:79:17:90:3e:f5:83:a4:8f:9f:ed:43:ba:0a:
                    01:de:79:08:b7:e0:26:ed:e5:91:97:19:8d:f5:39:
                    9d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D3:90:87:F2:95:10:55:AF:36:33:35:93:93:B2:7D:6A:FB:2B:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/963b59a4-74ab-32cb-b100-39652a6d9ebd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.42.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:56:93:91:37:cf:fb:cd:fa:94:5f:10:81:d6:85:d5:81:3c:
         b5:5f:e9:b2:75:e2:b2:8d:8a:ed:4c:dc:a4:a2:80:05:ad:db:
         2b:7e:c8:bb:31:89:0a:88:7f:6a:0c:cb:ca:01:d5:8b:dd:62:
         71:8a:8f:c1:65:25:f5:4c:41:71:e4:87:06:09:fe:6e:17:9c:
         bf:65:eb:bc:47:df:5a:f6:af:0b:22:16:df:69:f8:ab:f0:02:
         3f:71:8c:47:60:80:24:48:9e:36:3a:a1:16:5b:22:0c:42:73:
         e0:85:71:e8:5d:2c:94:fb:3f:ce:80:c1:bd:45:45:7a:ef:b1:
         97:53:ef:38:ff:e7:1c:69:5f:ba:ad:f1:1c:6f:27:1f:63:62:
         42:03:21:93:02:12:2c:23:42:d3:0f:ef:fe:89:16:d1:e5:34:
         4c:a6:28:77:fa:3e:60:82:6f:84:64:79:3a:ff:00:0a:8d:11:
         87:a3:76:13:87:0c:80:fe:8c:14:ab:8b:d5:c0:7e:c8:4d:0b:
         ea:26:fe:1a:69:a8:44:7d:a8:16:bc:89:cc:48:e1:06:3d:c1:
         82:2d:39:ec:52:1b:67:9b:00:a3:44:da:a5:e3:dc:32:9d:78:
         39:d0:85:79:6d:fb:23:f2:1b:bd:18:d8:34:43:ee:9d:c9:ab:
         c9:40:d6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 03:45:54 2025 by rpki-client