Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e16a8185-d36f-341f-852f-d52eebee519e.roa
File:                     e16a8185-d36f-341f-852f-d52eebee519e.roa (raw, json)
Hash identifier:          v+Ah7Ef+PXz6Sb6EjiSDowlW8fiaoWZ7iD+dvrUw0Pc=
Subject key identifier:   0C:0D:76:55:5A:CB:2B:7C:E3:CA:87:B8:69:F7:35:5C:20:27:B3:B7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849648469521EE4C0E9B0639B40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e16a8185-d36f-341f-852f-d52eebee519e.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        75.243.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:69:52:1e:e4:c0:e9:b0:63:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=d9a210e9-1c26-4494-a8cf-3366526a2e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:13:94:34:1e:cb:91:f5:46:29:b8:9f:d8:1f:
                    d8:be:fb:c5:24:eb:d3:56:9f:52:87:9b:b0:7e:ae:
                    17:d7:eb:77:33:2a:36:9f:b0:da:25:3e:af:81:29:
                    84:e9:c5:80:04:ad:36:32:90:8c:aa:4a:5c:9d:91:
                    5a:48:83:30:ad:47:55:0e:47:1a:51:4e:b5:b9:6c:
                    b5:33:46:22:f5:cc:73:79:69:c8:a5:99:50:07:c2:
                    92:09:79:dd:b7:d8:48:b4:9e:6a:83:95:e0:f9:24:
                    43:1a:9b:8f:67:6f:52:0d:8d:dd:f5:92:9b:2d:ac:
                    be:55:6d:0e:92:f0:fa:58:18:25:8b:eb:2f:3f:9e:
                    33:38:d6:27:53:fb:e5:37:4e:70:88:f8:bf:f3:8b:
                    6a:e4:2e:04:5a:c3:d4:81:c5:99:7a:73:22:33:b1:
                    c5:65:4b:ac:f6:d5:e0:40:55:b5:3b:44:f4:39:96:
                    77:e7:69:1c:fc:3a:47:83:7a:70:75:5e:01:c4:f8:
                    9a:96:61:62:a7:94:ea:98:61:49:88:d5:77:7e:d6:
                    3a:d3:2a:45:24:cb:b5:a3:45:2c:d9:1a:3b:ee:e7:
                    83:8f:3c:b5:25:cd:7a:9c:cf:a1:e6:ef:67:2b:ac:
                    5a:a3:b1:83:8b:a4:44:9d:49:e1:1b:81:da:4d:c0:
                    bf:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0D:76:55:5A:CB:2B:7C:E3:CA:87:B8:69:F7:35:5C:20:27:B3:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e16a8185-d36f-341f-852f-d52eebee519e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.243.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:23:85:0c:1e:30:20:94:28:bc:ad:5c:eb:a1:c8:9d:a3:70:
         c6:b3:9c:93:58:c8:f0:cc:b6:74:a0:3e:6e:fb:00:5a:6c:36:
         55:3f:6d:39:d6:8a:b1:ee:d6:43:78:67:06:48:72:6e:3f:d9:
         8b:7d:df:b9:eb:cf:09:ab:0e:c9:30:b1:12:75:1b:3e:49:34:
         2a:dc:e2:f9:68:38:82:9a:79:e1:5f:b1:ed:c5:77:20:c6:6d:
         66:30:57:89:3d:35:2c:9f:48:51:eb:66:86:49:be:1f:72:dd:
         55:e3:52:e9:8b:8f:1a:d0:4d:de:72:18:46:fc:2e:b3:66:29:
         a2:4d:f0:b3:a7:9f:85:b5:2d:f4:00:ad:53:b6:45:b5:e0:f3:
         ef:06:99:b1:fd:98:c3:77:df:1b:d9:62:ff:7b:01:82:db:a5:
         ff:2c:8a:3d:95:19:ec:c3:a3:15:d1:83:a6:f9:96:2b:8f:24:
         d4:79:c2:db:9d:a3:4b:22:2a:e0:60:c0:6b:36:17:b5:8d:ef:
         bd:3a:34:65:2d:c1:11:76:a6:9f:4e:8c:dc:e8:ae:90:65:e9:
         43:c4:1f:c5:1a:f6:91:ce:9e:a3:d3:5c:e2:f5:ab:73:42:3b:
         98:5c:ed:e9:e0:17:38:9c:12:79:44:07:0a:2e:a3:94:ec:15:
         00:22:92:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:00 2025 by rpki-client