Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae771f74-2147-3ae3-a00c-8c3584555bcf.roa
File:                     ae771f74-2147-3ae3-a00c-8c3584555bcf.roa (raw, json)
Hash identifier:          l1LGc2OMC1s/E2rpWVS4tdKpNOJjjkuaY8LyHXVvGnA=
Subject key identifier:   C9:01:98:BA:AE:A3:C9:60:EC:7B:FF:34:96:A8:21:0B:02:CE:BD:57
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848EF6171A06C39AD279DD9D080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae771f74-2147-3ae3-a00c-8c3584555bcf.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        174.42.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:71:a0:6c:39:ad:27:9d:d9:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=29557d80-22ad-47bf-b526-23c31009dd32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fa:b9:e3:32:d9:08:e4:78:9b:79:ce:cd:9a:
                    59:5d:94:a8:0c:4a:8c:5a:79:30:2b:36:d8:17:90:
                    c8:87:5d:49:4c:ea:e1:cb:10:8e:ad:d0:97:70:ca:
                    82:d2:4b:9a:37:a5:5f:18:ec:7f:78:d8:df:68:06:
                    2e:07:18:b7:6b:1b:4d:99:7d:71:a4:01:5b:14:27:
                    c3:21:ee:b6:fd:5a:00:a8:07:1c:ca:11:49:b0:37:
                    0e:18:bd:7d:c9:25:08:d4:80:e2:dc:eb:53:cb:0d:
                    ff:3b:2a:61:31:30:76:05:ec:85:c6:15:2c:3c:e2:
                    50:ba:52:15:f2:b5:81:cf:40:32:14:ca:0e:43:ed:
                    04:f7:84:c5:dc:05:30:48:05:bd:7d:10:fc:5f:c6:
                    e9:39:df:fd:36:25:2c:c7:dc:ca:f1:4f:f7:c8:99:
                    b2:7a:b7:79:17:b5:b7:13:1a:89:2e:99:cc:49:16:
                    e9:d3:c6:4d:e9:b1:aa:5c:77:40:13:6f:72:4b:fc:
                    1d:43:aa:14:3e:1c:91:22:0b:47:94:81:0e:5d:f0:
                    7e:bb:aa:48:f4:1e:3e:76:e1:8e:05:f2:f1:e7:e0:
                    41:6b:1d:6c:0b:63:c9:52:81:08:5a:89:9e:ae:2c:
                    15:ab:40:37:b8:18:0c:a3:60:05:04:27:7c:80:d2:
                    20:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:01:98:BA:AE:A3:C9:60:EC:7B:FF:34:96:A8:21:0B:02:CE:BD:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae771f74-2147-3ae3-a00c-8c3584555bcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.42.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:d3:25:dc:f7:a6:ff:67:b4:bd:e4:01:9d:60:b9:ad:ce:e4:
         cf:e5:55:7b:b2:26:22:d0:17:d0:fa:86:d9:35:98:f1:73:5e:
         69:8d:85:64:26:ce:39:b0:62:f6:7c:b4:80:21:af:2c:fe:5d:
         c7:61:f1:08:01:85:d3:a7:2f:3e:14:61:57:8d:5c:fe:f3:5c:
         7c:41:c2:c7:eb:e5:30:60:eb:16:6d:42:ef:e0:a3:7a:1b:84:
         04:8f:5c:63:4e:ef:9e:6f:1a:bc:6c:8e:67:32:62:ab:cf:a7:
         a0:77:5b:69:20:00:74:87:b6:b1:d4:c4:11:e3:ef:77:60:2a:
         f9:40:9c:fc:41:d5:20:e3:5f:b5:fd:55:b1:19:b6:68:ba:1b:
         d7:16:e1:cb:dd:8e:c4:0d:4b:85:d0:87:b9:4b:82:c9:41:c8:
         5c:fa:12:ef:67:98:84:c4:b0:5e:83:bd:38:98:d6:70:77:a4:
         d6:8d:f6:ef:f6:c2:48:7f:19:83:9e:20:27:61:80:09:b0:32:
         5e:d5:ba:fc:2d:ea:56:85:76:f9:1b:46:8b:d4:b7:4e:ac:3e:
         84:31:ee:b3:9e:0d:75:ac:65:aa:e9:c8:8f:7a:bf:69:2a:a5:
         98:c7:6a:d7:e6:00:f4:04:05:ad:bc:f8:98:90:eb:fc:ee:a6:
         b9:9e:64:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:07 2025 by rpki-client