Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0d9f575-d306-3abd-b32e-8943e7d35f09.roa
File:                     f0d9f575-d306-3abd-b32e-8943e7d35f09.roa (raw, json)
Hash identifier:          V8UaveIMOcwRmtjRv6Q8xeczFw0dJwDHEN745NQZDmY=
Subject key identifier:   3F:23:12:04:C0:79:CB:AA:4E:43:17:F3:24:6E:D9:51:53:9F:10:3C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848E86674EE08202C348F4F252E
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0d9f575-d306-3abd-b32e-8943e7d35f09.roa
Signing time:             Mon 17 Feb 2025 02:00:38 +0000
ROA not before:           Mon 17 Feb 2025 02:00:38 +0000
ROA not after:            Sun 18 May 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        174.241.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:66:74:ee:08:20:2c:34:8f:4f:25:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 17 02:00:38 2025 GMT
            Not After : May 18 01:00:38 2025 GMT
        Subject: CN=2d6d357b-df99-4ddf-854a-17aebd0a7acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ab:e3:7a:4d:7e:9d:2d:02:e3:a6:d0:43:01:
                    d8:70:d1:95:bd:79:43:33:09:88:d6:6c:f7:64:bc:
                    00:a5:33:4a:e9:5d:b0:35:55:4a:cb:75:ff:64:b3:
                    28:5e:e3:d3:b0:cd:72:64:97:58:29:56:61:76:e5:
                    0d:6e:91:bc:d8:63:f1:28:06:99:51:40:fb:5d:4e:
                    dd:7e:55:90:58:42:11:59:6e:7d:66:ac:4e:6b:26:
                    dd:51:8c:76:10:90:0f:f2:41:7b:8a:57:f9:08:5e:
                    92:a5:cf:2d:b0:da:b3:97:c4:fb:17:78:1a:b2:53:
                    ee:05:2d:91:2c:07:19:e5:43:46:eb:f9:18:0a:01:
                    7c:67:d5:b3:b5:ed:64:bd:e9:38:e6:52:b3:11:aa:
                    b2:b4:dc:71:75:1a:6b:93:d9:e7:80:18:f8:d1:02:
                    97:a0:c5:54:3a:68:76:b8:47:c4:ea:11:5d:bd:f0:
                    17:9e:34:80:e9:96:bc:61:f0:da:4c:e9:dc:8a:f3:
                    f0:cf:f8:a6:9b:44:83:9b:e8:19:3c:9e:65:67:04:
                    bc:99:34:3a:e1:70:c8:c5:3e:0e:8e:e7:e9:be:ea:
                    0b:19:83:11:d3:4d:31:28:0e:7f:c6:62:89:71:2a:
                    53:0d:41:ea:0c:45:d4:0e:f1:d8:c4:ea:04:fe:05:
                    4a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:23:12:04:C0:79:CB:AA:4E:43:17:F3:24:6E:D9:51:53:9F:10:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0d9f575-d306-3abd-b32e-8943e7d35f09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.241.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f6:6a:ed:fa:36:b7:43:9f:fd:b3:9c:f3:28:8e:2f:b0:78:
         9a:32:3d:16:2c:b9:40:12:22:a2:f8:fa:9f:77:ed:63:84:e1:
         51:f0:ae:de:5b:a2:94:3e:c9:c5:3d:fa:6e:1b:b7:aa:36:12:
         ba:0e:7f:1d:d6:40:5f:64:8d:e6:50:bf:8a:fb:2f:47:e4:ec:
         55:af:d5:a5:97:c1:84:1c:a1:fc:5f:0c:8a:99:79:87:01:01:
         ca:ed:77:c5:c0:96:9d:a5:8c:d5:74:fc:72:c7:a6:9c:62:49:
         80:24:a5:94:1a:39:52:11:17:c2:26:6c:a5:ab:18:ca:fb:10:
         e9:39:40:cd:64:ec:7b:db:06:79:53:c1:1b:3d:1c:ef:a9:fe:
         ab:7a:e0:d2:4e:18:75:34:a7:bc:0d:7c:67:b6:e6:bd:01:45:
         9a:c3:30:86:4f:5f:8c:43:e3:79:b7:fb:ca:92:88:b2:9b:9d:
         74:be:10:c2:19:d0:9b:b0:0b:54:94:20:05:1a:1a:44:61:3b:
         f9:0d:90:23:ec:24:f5:7f:a2:7f:7c:8a:0a:fa:cc:c4:62:f9:
         67:b8:ae:75:a6:96:62:dc:57:d7:cc:f9:c8:47:33:ea:05:3f:
         7e:d1:99:74:0e:88:fe:fa:ee:3f:6b:0d:e2:15:ab:c1:90:f1:
         4d:94:5b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:20:08 2025 by rpki-client