Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ef43fbef-6b33-3b6b-932d-9d841813c8b7.roa
File:                     ef43fbef-6b33-3b6b-932d-9d841813c8b7.roa (raw, json)
Hash identifier:          q0nvlfGnSf2I1FPQBYmuyp0FHx1h/NerlFFIPwxVfiM=
Subject key identifier:   34:DB:BA:86:E1:FA:EA:3F:A5:9F:C0:D9:E5:3E:82:EF:94:DA:79:85
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848E8666C7BA074CCA5B8C7F280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ef43fbef-6b33-3b6b-932d-9d841813c8b7.roa
Signing time:             Mon 17 Feb 2025 02:00:38 +0000
ROA not before:           Mon 17 Feb 2025 02:00:38 +0000
ROA not after:            Sun 18 May 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        174.227.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:66:6c:7b:a0:74:cc:a5:b8:c7:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 17 02:00:38 2025 GMT
            Not After : May 18 01:00:38 2025 GMT
        Subject: CN=a8007b59-e870-4175-924a-a6770d30e55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8c:1e:1b:2c:44:c0:5d:e4:93:3c:70:83:83:
                    42:83:26:2d:31:41:67:05:0c:a7:3a:b9:8e:7c:8d:
                    61:25:86:50:8b:5f:bd:cb:97:6c:fb:d2:8f:65:92:
                    40:6f:a2:2a:88:21:8f:6e:70:9e:7c:53:fd:73:e8:
                    00:90:2d:a4:0c:0b:6e:14:24:9b:b7:69:14:cc:00:
                    76:e0:91:5b:c5:50:55:79:d5:fc:82:ea:60:5c:6f:
                    8a:8c:fb:a1:82:14:76:91:61:8b:1e:a9:3d:19:66:
                    f6:41:c1:67:96:22:1b:d7:ca:7e:43:ca:df:52:2d:
                    8a:1d:64:09:83:32:f5:c1:38:cf:49:2b:d6:25:0d:
                    c8:4c:83:b3:f8:b3:2d:d8:89:64:8b:ea:13:4f:bc:
                    40:14:da:f9:b7:42:d6:e2:c1:2e:74:f0:11:4e:f3:
                    66:fb:b4:db:15:59:58:75:01:d1:f0:7d:01:7b:46:
                    84:dd:54:34:3c:18:cd:7d:e6:43:45:24:cd:ea:0f:
                    7e:e0:86:5c:25:11:2b:8c:49:9a:e0:d1:57:ce:ff:
                    c1:e9:5b:7e:5b:b2:f8:c7:4e:84:6c:d4:80:b7:aa:
                    b9:c5:b4:db:4e:b4:0b:18:5d:b7:74:63:bb:7a:42:
                    24:27:89:0f:2c:72:db:c5:90:93:08:a1:0e:88:b9:
                    cc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DB:BA:86:E1:FA:EA:3F:A5:9F:C0:D9:E5:3E:82:EF:94:DA:79:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ef43fbef-6b33-3b6b-932d-9d841813c8b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.227.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:84:08:4e:6e:f0:fd:62:e3:73:65:18:33:5c:95:ec:e6:a6:
         d8:b6:79:6a:22:fc:b4:f5:c2:de:60:a7:27:67:63:c7:e2:1c:
         51:f1:dd:96:0c:0d:c7:39:34:6e:db:0f:67:66:f9:09:54:07:
         eb:c7:11:bd:47:98:3c:52:7c:20:87:00:2e:4e:59:41:92:65:
         ba:ff:ce:f2:8b:8a:29:dd:5a:64:6b:82:30:d7:3b:b6:a8:07:
         02:07:56:f8:80:7c:13:d1:89:85:e7:1a:b6:11:fc:fe:74:ab:
         58:3f:50:0b:00:b2:bf:0b:5a:3e:81:5d:95:ba:b2:14:18:84:
         5b:68:a6:0b:6c:7c:e5:41:8e:d5:18:21:18:96:63:76:a3:16:
         a2:be:ce:80:50:ef:5a:01:5b:82:15:de:c4:33:08:76:6d:11:
         69:5d:e7:7f:d5:86:d0:ea:a3:59:78:e2:47:e7:e5:24:49:2a:
         6b:e3:e0:d4:d2:36:02:ae:bd:d4:68:27:3e:65:4c:a5:21:9a:
         57:5e:63:23:d9:f3:32:3e:41:c4:26:6b:14:c5:64:af:d5:15:
         09:34:78:2d:e8:00:ec:1d:9f:f0:9e:f4:60:26:d6:6d:db:31:
         3a:fb:01:02:19:4e:7f:b9:64:42:71:fa:f6:fb:68:02:59:2d:
         2b:9b:3f:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZmx7oHTMpbjH8oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk
YTgwMDdiNTktZTg3MC00MTc1LTkyNGEtYTY3NzBkMzBlNTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIweGyxEwF3kkzxwg4NCgyYtMUFnBQynOrmO
fI1hJYZQi1+9y5ds+9KPZZJAb6IqiCGPbnCefFP9c+gAkC2kDAtuFCSbt2kUzAB2
4JFbxVBVedX8gupgXG+KjPuhghR2kWGLHqk9GWb2QcFnliIb18p+Q8rfUi2KHWQJ
gzL1wTjPSSvWJQ3ITIOz+LMt2Ilki+oTT7xAFNr5t0LW4sEudPARTvNm+7TbFVlY
dQHR8H0Be0aE3VQ0PBjNfeZDRSTN6g9+4IZcJRErjEma4NFXzv/B6Vt+W7L4x06E
bNSAt6q5xbTbTrQLGF23dGO7ekIkJ4kPLHLbxZCTCKEOiLnMHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDTbuobh+uo/pZ/A2eU+gu+U2nmFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWY0M2ZiZWYtNmIzMy0z
YjZiLTkzMmQtOWQ4NDE4MTNjOGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruMwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEOECE5u8P1i43NlGDNclezmpti2eWoi/LT1wt5gpydnY8fiHFHx3ZYM
Dcc5NG7bD2dm+QlUB+vHEb1HmDxSfCCHAC5OWUGSZbr/zvKLiindWmRrgjDXO7ao
BwIHVviAfBPRiYXnGrYR/P50q1g/UAsAsr8LWj6BXZW6shQYhFtopgtsfOVBjtUY
IRiWY3ajFqK+zoBQ71oBW4IV3sQzCHZtEWld53/VhtDqo1l44kfn5SRJKmvj4NTS
NgKuvdRoJz5lTKUhmldeYyPZ8zI+QcQmaxTFZK/VFQk0eC3oAOwdn/Ce9GAm1m3b
MTr7AQIZTn+5ZEJx+vb7aAJZLSubP8o=
-----END CERTIFICATE-----
Generated at Thu Apr 10 05:29:54 2025 by rpki-client