Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c602be14-9222-3e83-9a34-c2e20e0f0e37.roa
File:                     c602be14-9222-3e83-9a34-c2e20e0f0e37.roa (raw, json)
Hash identifier:          Xv1N3YzjREr2D3tiKWrIbKi9PIIOPlgdyjrL/p3U750=
Subject key identifier:   C4:AD:99:8F:A4:C5:66:1D:98:CC:3A:62:5F:A4:47:FE:D9:22:7F:2C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848E86679385CE4D26386AAF000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c602be14-9222-3e83-9a34-c2e20e0f0e37.roa
Signing time:             Mon 17 Feb 2025 02:00:38 +0000
ROA not before:           Mon 17 Feb 2025 02:00:38 +0000
ROA not after:            Sun 18 May 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        174.247.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:66:79:38:5c:e4:d2:63:86:aa:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 17 02:00:38 2025 GMT
            Not After : May 18 01:00:38 2025 GMT
        Subject: CN=17cbbe29-43a9-4a1f-b659-307f52c87cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ea:1a:08:0b:30:34:7a:4f:6b:50:54:95:44:
                    e4:c5:ce:8e:32:4d:c4:95:bd:b5:5c:54:4e:5c:4a:
                    cd:96:59:f6:57:d1:cc:3c:1f:a9:ea:29:2f:71:f0:
                    25:bb:15:68:54:eb:f0:1c:95:14:1b:3e:38:d1:72:
                    91:d3:0d:11:fb:cb:b5:12:5b:30:f7:10:8b:7a:06:
                    94:5c:95:3b:00:ea:03:6b:2e:56:30:8a:b9:1a:b3:
                    fd:e7:74:18:19:77:dd:32:74:d3:fd:4b:ba:7c:4f:
                    9c:87:1f:03:43:69:e2:a2:2a:f9:53:17:eb:6d:e8:
                    8f:45:15:16:87:8a:d0:26:41:5f:f5:73:25:dd:42:
                    af:39:4d:cd:f9:49:89:86:9a:85:07:3c:75:0f:fd:
                    b0:16:a1:58:e0:ae:ac:3d:02:37:05:02:0b:fc:d2:
                    32:7e:3c:5c:4f:5f:9b:bb:21:68:ca:62:a6:f8:28:
                    2c:c8:22:d1:42:44:71:02:d0:d8:8a:d8:f3:17:3d:
                    41:a3:d8:8e:42:d5:94:7b:c3:c1:6c:cc:c9:f7:9e:
                    08:76:32:38:a3:26:d9:04:e5:a7:93:b2:ff:f8:8d:
                    a8:e7:22:d7:6d:5f:89:1b:09:8c:79:12:f8:58:d5:
                    35:d4:6d:8a:1a:cc:e2:2a:91:75:ce:04:a5:dd:dc:
                    c3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:AD:99:8F:A4:C5:66:1D:98:CC:3A:62:5F:A4:47:FE:D9:22:7F:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c602be14-9222-3e83-9a34-c2e20e0f0e37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.247.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:7c:74:f2:17:f6:4e:14:9f:7f:1c:e8:a6:e8:c3:65:ff:67:
         a3:97:c8:57:c7:17:a3:74:d8:d0:1d:88:70:22:cc:f9:6a:90:
         44:60:58:f0:c2:7e:a0:70:e6:5d:00:4e:a4:5b:12:0e:af:21:
         64:ea:46:a3:ac:e2:91:11:78:ac:3f:e5:0c:8c:60:65:53:72:
         53:d6:ca:a5:68:bf:58:a1:a3:29:e7:e6:7a:f1:e3:91:29:08:
         6a:8a:50:f7:49:f7:fd:14:04:32:58:c4:8e:66:e9:c7:7a:ed:
         7d:c9:34:bc:51:69:32:c0:20:5e:e4:15:e2:5f:82:f0:0d:87:
         1a:23:cd:f3:05:e1:97:36:f4:a5:54:13:b4:99:51:8f:98:52:
         f3:22:5b:00:cf:e9:3f:a6:e2:21:f8:cc:a0:c1:f2:38:29:4f:
         b6:0c:92:62:a1:fd:fa:29:44:1a:4e:37:39:ea:f8:49:23:b2:
         0b:4a:73:9e:fd:25:bb:59:cf:98:8d:0a:c8:89:93:bb:7e:b4:
         1f:e5:a8:d1:55:ef:15:ea:f4:c9:ae:cd:5d:b9:fa:01:91:16:
         fe:99:38:df:32:f0:d7:5f:3b:c6:5a:9c:6c:73:3d:b7:de:91:
         2a:3a:e2:b6:68:ae:19:59:5c:19:86:d3:d7:8c:75:6e:5e:f5:
         65:76:a5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:37:37 2025 by rpki-client