Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6f1eb3a-4ad8-3916-b2b4-9a87768f1f8d.roa
File:                     d6f1eb3a-4ad8-3916-b2b4-9a87768f1f8d.roa (raw, json)
Hash identifier:          yxZuJaCrACVMAaSURIRzJMau6Br1YOqx/wsiJD3tGSY=
Subject key identifier:   DB:8E:0F:76:0F:79:AB:0D:92:41:69:F1:15:B1:CC:ED:05:42:AB:8E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848C150DA69BEAE5563A80EE958
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6f1eb3a-4ad8-3916-b2b4-9a87768f1f8d.roa
Signing time:             Mon 03 Feb 2025 02:00:39 +0000
ROA not before:           Mon 03 Feb 2025 02:00:39 +0000
ROA not after:            Sun 04 May 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        174.207.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:50:da:69:be:ae:55:63:a8:0e:e9:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb  3 02:00:39 2025 GMT
            Not After : May  4 01:00:39 2025 GMT
        Subject: CN=6c7e45e1-47ac-464a-80c6-5358c4bd2912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:06:46:0d:5f:85:b0:bf:fe:e3:de:46:04:62:
                    9d:86:eb:e8:51:1b:91:e6:38:8b:2c:cf:57:0b:a8:
                    af:a5:9a:03:d0:08:22:5a:19:83:5b:e9:8c:52:6c:
                    16:75:6e:8c:b5:46:3a:2e:57:7e:10:3a:ff:cc:cb:
                    c0:96:7d:ca:62:a4:a9:46:c3:9f:d2:14:a6:d7:8a:
                    2e:48:08:9d:d3:88:32:0d:99:2e:b9:c9:8f:33:72:
                    02:f2:8b:64:6f:63:44:f5:fb:80:f8:82:6c:7f:d4:
                    d9:0c:76:23:61:07:56:cc:26:8e:db:d4:55:ef:0d:
                    b6:08:a3:00:8e:22:bc:42:72:7d:c9:63:e4:14:67:
                    f0:2c:e5:81:53:02:b8:6b:c0:72:2c:4c:89:19:cf:
                    07:12:42:2b:09:fa:44:80:f3:cd:26:eb:e5:85:c4:
                    92:24:8c:a9:ef:6f:c1:d7:b5:0d:57:cc:86:51:50:
                    e3:3b:6e:b1:eb:0b:97:da:74:de:7f:d7:39:c0:c3:
                    ab:64:d5:50:d9:06:11:47:00:2f:aa:5f:f2:6c:a9:
                    f4:03:40:e4:49:a5:8e:e5:98:05:84:da:3b:ef:83:
                    3e:24:0e:50:ec:36:88:5a:89:db:a4:0a:5c:f7:5e:
                    ec:76:85:99:5a:0f:dc:2f:b8:9b:05:cf:fd:2e:8e:
                    85:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8E:0F:76:0F:79:AB:0D:92:41:69:F1:15:B1:CC:ED:05:42:AB:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6f1eb3a-4ad8-3916-b2b4-9a87768f1f8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.207.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:35:01:27:d2:7c:12:a0:b3:6c:85:10:53:4b:b0:87:af:72:
         b0:c1:b3:ec:8d:26:be:d5:7f:d1:51:9f:fb:84:ad:c0:3f:d6:
         c0:92:ad:8c:4a:68:58:08:b3:db:7d:7d:8f:36:87:5b:2b:9d:
         c6:e3:c1:de:51:86:65:39:02:e7:86:5a:bd:cd:7b:49:5b:6e:
         89:e3:87:e5:50:ff:65:d0:2b:fb:3b:e3:d7:21:b0:86:f9:bd:
         29:29:d6:a0:88:ae:99:f8:9c:97:1e:8c:5a:5a:b9:f9:c9:f4:
         e0:27:23:56:e4:b2:ce:3d:f5:f0:22:3e:7d:c1:7e:cd:26:c7:
         7d:52:74:a3:8a:35:96:5c:f8:9f:c3:2b:6f:ed:07:40:67:e3:
         d3:81:36:91:57:e8:44:88:88:d5:fa:3c:7e:05:3a:9f:3b:5b:
         9c:eb:ff:d6:86:93:88:30:99:2d:ac:7d:8b:48:22:87:25:6e:
         a9:4f:b8:25:e8:8b:76:8c:5f:fe:16:a0:8c:d1:e6:b3:e0:a1:
         5a:3a:b8:90:23:10:2f:69:8d:bd:ee:8d:23:8b:a7:76:91:bc:
         64:74:c9:1f:40:fb:e8:0e:cf:68:a9:f2:be:57:e3:b5:f9:9b:
         57:69:64:aa:ad:05:2d:ba:e8:5a:35:e2:b7:a3:4d:18:46:ce:
         5e:89:d7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:24 2025 by rpki-client