Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aed9292e-f43e-379b-ad5c-38c9fe7dc2be.roa
File:                     aed9292e-f43e-379b-ad5c-38c9fe7dc2be.roa (raw, json)
Hash identifier:          jZ22Aq0U8HiUiD+V/byLSlmuWtJ6b0QC0/nCbBKZMmQ=
Subject key identifier:   69:6B:DE:97:CC:E1:B1:55:40:F0:1E:42:B2:DB:43:1C:DD:AD:9B:F2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848EF616FE2C8214D4D7E05BD00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aed9292e-f43e-379b-ad5c-38c9fe7dc2be.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     22394
IP address blocks:        174.41.246.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:6f:e2:c8:21:4d:4d:7e:05:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=1e0f2e87-5b10-40fc-bfa5-0253fc3cd8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0b:96:1d:1b:75:5d:87:d6:9e:1a:44:85:f7:
                    a5:e0:b7:d1:f6:a7:14:83:ba:0f:ee:95:92:69:29:
                    f4:e8:aa:cd:e5:06:c2:51:33:19:d6:cf:48:69:c9:
                    36:07:4e:77:b0:c8:2f:39:22:e7:3e:ac:fc:85:46:
                    86:60:1b:9b:1d:28:55:03:43:1c:55:ed:b4:84:c1:
                    33:80:a4:f6:7d:2a:c9:db:cb:a0:c1:17:c6:df:dc:
                    f9:ef:c1:8f:b0:a8:1e:94:5f:1f:e1:17:7a:5b:97:
                    72:37:99:66:1f:2b:0e:93:bf:0f:65:e4:b9:ee:e5:
                    41:91:5d:87:65:29:f3:f4:1a:74:15:f4:c2:c6:ed:
                    fe:33:56:9b:e0:a8:71:52:99:6a:e3:02:fa:d8:40:
                    3a:89:54:c0:92:45:5b:82:8e:3c:ad:ba:a4:91:a6:
                    6b:b1:a4:ce:d1:ea:20:77:e8:0e:59:f0:7a:02:0a:
                    fa:96:db:f5:ee:0f:02:bf:b9:01:3d:b1:d9:7a:ac:
                    a0:1a:2d:f9:ed:18:c5:01:16:c1:13:de:0a:95:fd:
                    97:b6:fc:7a:77:d2:e5:93:21:47:92:57:b8:a9:12:
                    d0:24:52:5e:ae:f2:8c:a2:3b:7e:48:b1:a9:73:96:
                    07:26:ea:47:65:64:80:f0:80:af:d0:99:a4:74:b2:
                    f6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6B:DE:97:CC:E1:B1:55:40:F0:1E:42:B2:DB:43:1C:DD:AD:9B:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aed9292e-f43e-379b-ad5c-38c9fe7dc2be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:96:61:c1:9c:37:69:1b:08:f2:78:01:56:18:83:26:c8:bd:
         a1:d1:3d:60:2a:c0:6f:cf:e7:ce:8d:8b:39:c9:c0:59:36:bd:
         95:57:cf:3a:bc:d5:65:19:da:a3:40:07:25:d7:ba:98:b3:fb:
         c5:dd:fa:f5:ba:e8:a0:74:82:46:31:d5:62:dc:4a:3d:2f:ad:
         fc:25:30:60:5e:c6:d3:98:6a:45:1c:9d:16:cb:99:25:7e:03:
         59:0f:a5:e7:1a:9b:a3:95:e0:b8:ee:41:07:0a:c5:d3:a4:61:
         f0:a4:a6:1a:b6:02:8a:b4:ff:d2:96:cc:fa:3f:03:97:f6:ba:
         47:55:3e:0e:cb:90:01:a7:5b:47:6e:b7:a6:95:4c:ff:2b:f6:
         dc:aa:24:95:34:be:d0:48:37:c1:85:13:b7:8c:03:57:cd:42:
         87:20:f3:ee:24:76:2b:12:31:0a:ec:88:fa:16:7e:58:14:ed:
         0e:b3:00:b7:90:4b:81:0e:c9:e7:5e:1e:21:3f:3e:a8:2c:8e:
         9a:a6:b5:c6:71:50:7e:fa:6f:f9:9c:8b:1f:ee:e6:32:f6:b0:
         78:e4:90:98:ff:8d:e3:16:ac:e4:b6:1d:c0:d5:81:77:e2:46:
         c2:c5:e6:3b:91:4c:c7:42:d3:19:be:89:9c:53:7f:4c:0a:a9:
         1c:b3:55:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:30:21 2025 by rpki-client