Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0a57216-5402-387d-9bc6-24e318cb3337.roa
File:                     c0a57216-5402-387d-9bc6-24e318cb3337.roa (raw, json)
Hash identifier:          +8MZouINhG62j9jHCAUxBP4aY5S1xoR6oTN2rD97GUE=
Subject key identifier:   46:8F:05:1A:95:6A:1B:06:F2:CC:D0:F4:D8:EA:C9:ED:0F:8D:59:13
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848E8666E5D02E7807AA7312700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0a57216-5402-387d-9bc6-24e318cb3337.roa
Signing time:             Mon 17 Feb 2025 02:00:38 +0000
ROA not before:           Mon 17 Feb 2025 02:00:38 +0000
ROA not after:            Sun 18 May 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        174.232.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:66:6e:5d:02:e7:80:7a:a7:31:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 17 02:00:38 2025 GMT
            Not After : May 18 01:00:38 2025 GMT
        Subject: CN=0d3a4eb6-4bfb-4145-aa1d-157f88ec3389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7a:0a:20:ef:79:96:49:bd:47:59:99:fc:65:
                    db:03:90:20:ec:6a:cc:08:aa:c3:b1:e9:6a:e5:f5:
                    dc:09:03:dc:59:1d:8d:49:56:8e:2e:95:33:73:30:
                    b9:c4:a7:46:c1:21:59:fb:5c:01:c0:c7:4b:fc:f3:
                    87:84:b9:2d:2b:c9:62:82:77:6d:be:8a:4b:72:65:
                    df:c1:3e:b8:f5:4f:cf:ba:b4:ee:46:24:76:38:35:
                    77:66:4d:98:1e:15:48:11:e9:ed:e2:14:03:cf:50:
                    63:57:42:a0:98:a7:fc:ce:f7:9d:71:2d:09:04:e9:
                    2f:d7:8a:19:f7:11:5b:b7:96:29:f4:c6:63:13:9c:
                    a1:4e:ad:50:96:5b:77:84:b1:ec:5d:cc:e0:21:0e:
                    bd:95:4b:3f:3d:58:f6:e1:48:41:1a:e9:49:cb:ab:
                    9c:3d:3c:f2:b8:5d:28:55:e4:6c:2d:37:b2:80:bf:
                    04:72:0c:e6:84:c2:b3:b1:ab:cb:2a:b0:4e:c5:ee:
                    22:29:d8:36:0a:d5:13:52:fc:ae:af:8c:98:f4:58:
                    5c:8d:8c:6c:79:0c:8c:ce:c5:8a:80:9a:35:5d:87:
                    dc:a4:8f:f6:31:a9:80:4a:ac:16:48:8a:2c:dc:d2:
                    df:13:a6:fd:a3:91:f9:3b:2a:2c:51:ad:6b:84:b8:
                    92:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8F:05:1A:95:6A:1B:06:F2:CC:D0:F4:D8:EA:C9:ED:0F:8D:59:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0a57216-5402-387d-9bc6-24e318cb3337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.232.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:32:d8:ba:f5:c0:c2:61:7e:2b:8a:a1:fd:9a:5a:13:d4:f0:
         d4:57:65:53:e8:15:65:d3:f3:45:35:17:52:c7:3d:18:f2:6a:
         13:93:59:58:ad:1e:21:46:dc:62:13:df:b8:9f:e3:69:f2:3b:
         c8:73:39:0b:b9:ca:0f:f0:26:11:75:6d:e4:c7:62:b0:d9:f0:
         9c:37:bd:f9:8e:f8:63:30:22:32:02:45:48:5e:0f:bf:c0:f0:
         a0:13:6e:ea:5d:2d:45:2f:70:12:ad:d0:55:ff:07:5f:d7:92:
         f6:30:74:5d:ba:8f:9d:94:51:16:2e:e3:a4:63:5b:52:96:60:
         4d:b3:69:0e:a6:d8:cc:d2:dd:4b:05:64:c3:b8:b1:87:e5:3d:
         0a:33:43:58:9a:c7:0e:0f:00:37:dd:ce:06:0e:07:34:82:3d:
         83:ce:2c:c0:8f:e4:86:87:a7:32:36:cb:cf:29:8e:96:f2:d2:
         63:10:86:49:01:bc:81:1d:ab:b8:ef:0c:ef:06:0e:36:3e:92:
         43:26:6d:ad:f6:7d:0b:17:dc:91:f7:28:89:37:c5:6f:de:6d:
         bd:42:de:47:c3:ff:9d:83:f5:96:84:c5:b6:f0:94:1a:13:39:
         d8:a7:dd:c5:8c:7b:8f:57:83:f8:85:d9:28:93:06:73:c9:f3:
         0b:ea:e9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:04:42 2025 by rpki-client