Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d457510a-6300-367b-ae74-451b2b76ffc0.roa
File:                     d457510a-6300-367b-ae74-451b2b76ffc0.roa (raw, json)
Hash identifier:          bVDFCFo4OzLdJGbv+4o/LFHsOE5bde52h8ROBRm88h8=
Subject key identifier:   00:7F:81:D4:84:6B:21:2E:22:B1:54:C4:95:D5:3D:E9:4D:9D:38:B1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848E866659C80485EFB26069640
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d457510a-6300-367b-ae74-451b2b76ffc0.roa
Signing time:             Mon 17 Feb 2025 02:00:38 +0000
ROA not before:           Mon 17 Feb 2025 02:00:38 +0000
ROA not after:            Sun 18 May 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        174.231.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:66:65:9c:80:48:5e:fb:26:06:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 17 02:00:38 2025 GMT
            Not After : May 18 01:00:38 2025 GMT
        Subject: CN=d0480c8c-d945-4b20-9221-a035283fe49f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a0:5f:4c:d0:2f:3c:ff:ab:e9:ad:c7:96:8a:
                    ce:ac:fe:45:e8:a7:21:83:90:bf:e0:f1:1a:fb:a3:
                    87:1a:b8:61:74:fb:31:12:9f:ed:80:8f:bb:38:1f:
                    20:c5:d5:ec:fd:5f:54:79:0e:a7:4b:67:74:aa:46:
                    a2:c4:7f:68:24:db:63:3b:8b:cc:00:df:3b:27:6c:
                    7a:9a:88:61:3b:19:c9:cf:f3:a1:c5:f4:9d:d3:77:
                    5d:d9:e6:90:5e:97:6d:5b:77:f7:db:10:84:7e:7c:
                    eb:75:7b:52:6c:55:cc:fd:98:84:6c:a2:4a:21:0d:
                    60:d9:50:e2:e5:76:02:c8:dd:3e:f5:5d:d2:fc:b2:
                    cd:e8:90:66:88:19:10:a0:42:93:2e:67:4f:22:b3:
                    55:04:48:fc:35:81:c3:13:8c:30:7f:bc:f2:a5:0f:
                    58:f2:be:9c:a8:96:3e:62:a6:8d:f8:d1:73:c4:d1:
                    07:83:17:7d:55:dd:9f:b2:9a:0c:7c:6c:a1:45:66:
                    d1:20:f6:f7:4e:33:47:85:6b:fc:62:ba:0d:35:db:
                    eb:fd:7e:83:b8:e1:62:1c:00:1c:b8:e0:2f:cc:fc:
                    52:80:67:71:1e:0b:7a:39:c5:ee:64:a3:13:73:6f:
                    dc:20:2a:ef:e3:d8:1d:f4:f5:8a:8a:1b:df:aa:39:
                    fc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7F:81:D4:84:6B:21:2E:22:B1:54:C4:95:D5:3D:E9:4D:9D:38:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d457510a-6300-367b-ae74-451b2b76ffc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.231.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:53:a6:f0:5c:2e:c4:96:3f:46:b6:29:46:55:e6:6b:74:0f:
         79:ad:db:c2:db:c7:09:c2:c3:6b:63:61:fd:98:5b:21:38:72:
         70:75:35:06:d1:ce:17:cf:56:49:cb:6b:ce:f4:83:68:79:53:
         80:76:49:f3:28:52:03:19:f8:68:9e:8c:67:9b:ea:8e:99:09:
         4f:b2:6d:e4:c0:fe:fe:26:c9:a3:a2:fd:17:34:3d:a3:6b:76:
         e1:32:8a:59:47:c2:08:99:a7:68:82:95:af:f7:3a:e4:1e:f5:
         5b:07:d8:4f:4d:1b:6b:f2:48:35:dd:0a:bf:22:3d:7e:76:2a:
         69:17:c7:d5:0f:23:f9:be:2d:45:6d:db:a2:f4:19:d3:50:6e:
         97:76:27:00:07:21:71:25:fd:3b:4f:f7:6c:6e:c2:77:22:d6:
         e8:a6:1b:5e:d3:89:7d:72:66:9d:73:49:a0:dd:96:ae:8a:40:
         de:ac:03:be:5b:ba:49:7d:af:34:c7:e6:be:3f:1f:68:13:ab:
         85:14:5a:d1:81:df:27:e3:ee:da:30:11:1d:8a:3f:8b:ed:90:
         f0:77:ec:46:c8:12:ff:52:60:47:07:ba:5a:e2:bc:df:4a:8b:
         b5:2e:7e:97:f3:d5:80:32:24:8a:b1:56:c0:6a:9c:88:04:b0:
         df:8c:2b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:33 2025 by rpki-client