Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ef95021e-4f48-3ae6-bf9d-d582e4100536.roa
File:                     ef95021e-4f48-3ae6-bf9d-d582e4100536.roa (raw, json)
Hash identifier:          f/T1r4RnDMpI9cxVL4/8/Fjbb2+h6iDfeDZ8V72hmF0=
Subject key identifier:   1C:22:46:FB:92:2D:0F:39:AC:9A:3B:63:84:84:15:29:1A:27:C9:53
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848E86669DD91A43AB5C56C2760
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ef95021e-4f48-3ae6-bf9d-d582e4100536.roa
Signing time:             Mon 17 Feb 2025 02:00:38 +0000
ROA not before:           Mon 17 Feb 2025 02:00:38 +0000
ROA not after:            Sun 18 May 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        174.252.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:66:69:dd:91:a4:3a:b5:c5:6c:27:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 17 02:00:38 2025 GMT
            Not After : May 18 01:00:38 2025 GMT
        Subject: CN=c8c3d657-5151-42b7-a9d6-1dd2de54a8dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5f:b6:16:94:0f:bb:6a:4a:66:9e:a0:03:13:
                    4f:25:1d:ce:99:bf:dd:de:ac:ea:69:06:f8:3b:62:
                    6f:9a:03:bf:0f:03:c3:4d:80:14:44:b9:5c:81:7d:
                    8c:df:7d:cb:e6:de:c0:8e:f9:ff:56:41:0e:c7:bf:
                    79:d9:31:be:f8:94:9a:d2:77:c7:b2:4e:ff:a1:33:
                    4a:bb:53:9c:5e:74:f2:b2:74:68:b6:03:ed:a4:8b:
                    3d:f8:43:7f:35:0a:98:d9:da:0b:19:41:14:8e:e9:
                    6b:93:6b:a0:a8:1d:40:7b:10:78:37:af:ef:88:5d:
                    29:18:2f:0e:79:ee:35:50:00:33:f0:9b:47:05:1f:
                    2b:d6:82:e9:b9:1c:ab:97:76:54:a0:ca:ae:64:53:
                    4b:6c:86:64:1e:d2:d6:a1:97:31:5b:40:4f:77:c5:
                    6b:eb:3c:05:47:c5:96:df:e9:dc:58:af:72:5f:30:
                    eb:26:79:3c:3c:f9:e1:29:36:b1:26:19:f8:8b:ea:
                    cf:46:48:c2:87:38:92:25:d9:92:b5:c0:29:6c:6d:
                    3d:75:c1:0a:2d:08:87:59:54:d8:54:1e:86:f5:f9:
                    eb:35:13:73:b5:0b:b8:49:c0:aa:7b:13:70:e4:dd:
                    5f:89:67:23:4a:02:f5:17:12:52:ce:e6:e8:df:c4:
                    2a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:22:46:FB:92:2D:0F:39:AC:9A:3B:63:84:84:15:29:1A:27:C9:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ef95021e-4f48-3ae6-bf9d-d582e4100536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.252.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:28:90:e6:96:ab:58:dd:26:a4:7d:b5:0b:7a:2b:c9:bf:18:
         41:01:6a:d4:fe:a8:53:23:4f:d3:83:3f:15:f5:d9:49:cd:8c:
         c3:63:24:1f:d3:68:0d:b4:87:e2:ee:42:60:f1:3b:29:92:35:
         5e:02:63:48:ea:48:82:bb:d0:72:68:6e:b5:cc:b7:5a:f2:54:
         54:1e:dc:72:f6:82:73:e3:25:d6:00:f2:10:cd:0b:03:6b:66:
         45:06:d2:76:11:a4:72:4e:dd:d1:be:c3:60:8f:af:75:56:b4:
         28:cb:97:38:f3:63:b9:34:0e:37:7b:d3:89:39:02:81:32:82:
         8c:3c:e5:7c:55:ca:32:42:f9:c4:46:d2:15:80:9f:ec:0c:36:
         92:c6:71:4b:ac:78:6b:5a:a1:04:08:f6:15:e5:03:86:67:21:
         e6:13:15:fa:d8:f8:da:3c:a1:3a:61:14:4d:e4:04:cd:e2:ad:
         92:c9:e0:56:23:a6:0f:fa:8c:3f:db:fc:63:88:45:c4:06:9a:
         f0:cb:a7:65:f5:fc:37:77:74:b3:34:0e:a1:01:a9:80:3b:81:
         fd:7c:a3:92:f9:32:8e:60:69:72:9f:14:6e:91:dd:d7:e7:ca:
         de:97:66:2d:23:67:d4:13:78:be:26:3e:5b:9d:3c:b2:c4:36:
         3f:d4:74:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:23:56 2025 by rpki-client