Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e22b76c1-c236-3bbf-85c5-e3ccbd15cf0d.roa
File:                     e22b76c1-c236-3bbf-85c5-e3ccbd15cf0d.roa (raw, json)
Hash identifier:          26qyJH5tvjiWIjxOsQMDhyWMUU5AdNiziiN7BQCvEqY=
Subject key identifier:   E0:D0:0F:02:FE:E2:CC:8D:5A:25:73:C3:A8:0B:FC:49:BE:2E:36:2D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848E866711B0406F7F4B9DF5E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e22b76c1-c236-3bbf-85c5-e3ccbd15cf0d.roa
Signing time:             Mon 17 Feb 2025 02:00:38 +0000
ROA not before:           Mon 17 Feb 2025 02:00:38 +0000
ROA not after:            Sun 18 May 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        174.235.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:66:71:1b:04:06:f7:f4:b9:df:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 17 02:00:38 2025 GMT
            Not After : May 18 01:00:38 2025 GMT
        Subject: CN=ca7e714b-2c98-4776-a9f6-32023fd2f80c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8c:9c:c9:82:ff:06:fc:03:34:37:43:48:e9:
                    fc:36:6a:e0:1f:9e:95:3e:d3:b4:1c:a5:2f:a5:1c:
                    bd:21:e2:33:5f:7e:dc:2c:35:f2:17:f5:0e:79:82:
                    7b:2b:fb:c8:11:57:a1:03:17:cb:9f:f9:44:ea:99:
                    ac:e9:5f:11:cf:64:3d:47:08:1c:7b:df:f5:84:cb:
                    9b:c2:2e:83:35:17:1d:be:e6:8b:24:33:e8:84:bc:
                    eb:e9:9b:1f:2a:b7:0c:47:ab:8b:3a:fb:46:f2:9f:
                    31:83:04:ed:75:58:f7:44:fc:0b:6c:bf:cd:9c:e8:
                    9c:f0:60:54:8f:b1:8e:a5:36:e4:35:ed:cd:da:56:
                    f4:b8:5f:24:ce:98:55:96:65:6e:1d:4f:77:3a:94:
                    c2:bd:be:92:9b:13:61:15:68:46:7e:52:03:b3:19:
                    96:01:17:f9:07:34:b0:e7:d4:b8:dd:48:9d:00:4a:
                    34:09:76:f3:39:c8:05:70:4c:88:bb:99:52:fb:95:
                    03:98:27:10:d1:b1:d6:97:94:bf:be:af:c2:fe:c5:
                    e8:dd:65:e2:9f:47:ea:1b:f3:a2:62:74:21:44:4c:
                    0e:95:48:ee:e1:23:88:4f:5c:31:80:2c:73:00:b7:
                    32:62:af:e5:31:eb:60:43:97:50:2c:61:17:67:4f:
                    a5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D0:0F:02:FE:E2:CC:8D:5A:25:73:C3:A8:0B:FC:49:BE:2E:36:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e22b76c1-c236-3bbf-85c5-e3ccbd15cf0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.235.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:b2:9d:21:2f:3e:80:95:8e:a9:81:12:3e:2b:0b:f9:74:27:
         dd:c4:37:90:77:78:75:73:08:10:01:f1:73:3c:e0:65:fc:9f:
         8c:28:78:33:7c:45:56:19:db:87:15:c2:ad:fb:2d:ad:ef:d9:
         0c:5b:8b:e7:f1:10:d4:26:cd:dc:a9:33:b9:7f:03:87:00:c4:
         e2:71:02:f7:9a:9f:35:3e:a6:0e:b4:a7:20:7b:15:37:25:28:
         6c:78:af:90:76:df:e3:da:a8:ad:58:bb:8b:4e:28:6a:e0:2d:
         f1:a9:13:d7:27:d9:28:88:9a:00:33:8f:83:2c:75:a5:c3:73:
         b5:ab:69:7b:0d:15:5e:b7:0f:c5:3b:a6:bc:4f:fe:9d:5f:53:
         ca:7b:62:36:2a:da:3d:84:e7:31:26:ea:a3:1a:9f:c1:d6:82:
         e3:3f:6e:13:d1:fc:d9:00:9a:f3:a8:4d:b0:96:71:2e:db:69:
         4f:26:8c:48:93:77:5b:cd:92:a6:18:97:f9:8c:03:66:94:f4:
         a3:62:e3:f8:bf:8d:6b:79:7e:de:39:b6:d6:54:2f:84:69:e6:
         8e:f2:bf:91:fa:37:f1:c0:60:22:5d:59:5f:fd:56:30:f8:1e:
         04:d5:11:a7:39:b5:da:4f:6e:b5:d5:f8:0d:93:a3:68:b6:31:
         86:3b:d2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:15:44 2025 by rpki-client