Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4320125-88f6-3770-a9d9-1df746388c80.roa
File:                     f4320125-88f6-3770-a9d9-1df746388c80.roa (raw, json)
Hash identifier:          0dmJMrOTx7L7oqIqnL2IVIUJ+Cn3LTa2vAw/0m3/V7E=
Subject key identifier:   EB:EF:46:61:AF:C6:86:5C:B7:B5:C1:46:8C:4B:CC:A8:54:ED:9B:B5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848EF61711854BB157D9A7D1D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4320125-88f6-3770-a9d9-1df746388c80.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        174.42.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:71:18:54:bb:15:7d:9a:7d:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=648b0a73-a708-490e-94a6-177caa69b7ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f8:1f:4a:1b:74:ea:e3:b3:20:81:48:16:f0:
                    9e:8c:48:d1:7e:7b:5c:71:a3:73:93:a3:14:01:a3:
                    7f:d3:1d:33:fa:dd:81:bb:d1:9e:2e:49:53:34:0f:
                    86:7c:4b:44:c3:49:16:d0:0c:f2:d0:88:ac:90:84:
                    d7:a8:7b:70:39:8d:c8:a9:51:6c:ad:b9:f9:8c:c6:
                    e5:31:ee:42:5d:b2:8c:ec:19:32:84:4d:07:7e:ab:
                    e7:1e:74:59:d7:1d:dc:6d:68:96:d5:bd:28:ff:e2:
                    a8:29:93:43:2b:eb:f2:9a:79:5e:a7:f1:28:31:62:
                    0b:93:a8:af:76:6e:07:f2:01:a0:51:87:90:94:35:
                    0f:ad:dd:c0:9a:37:35:9b:44:6a:89:2f:bf:59:d2:
                    cf:f8:37:7e:ec:12:ba:11:83:a9:c3:17:6b:bd:df:
                    a4:0c:ca:7f:a7:98:ce:09:8a:a2:b8:a3:4e:d4:63:
                    f0:c9:fb:c7:5a:db:de:f9:27:0b:33:cf:4b:4a:4f:
                    af:b0:76:24:01:ff:96:ab:27:3d:ab:fe:f7:9c:9b:
                    61:9e:8d:14:37:06:62:66:ca:f6:03:85:df:c1:e2:
                    b7:ad:1d:b0:3d:db:d4:f4:09:16:6a:dd:7c:6b:3b:
                    b9:02:b5:7b:ad:d5:f0:d6:13:ab:bb:b8:9e:48:d7:
                    5e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EF:46:61:AF:C6:86:5C:B7:B5:C1:46:8C:4B:CC:A8:54:ED:9B:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4320125-88f6-3770-a9d9-1df746388c80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.42.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:1b:7a:59:04:39:67:7b:73:b8:f8:6e:38:2a:70:31:e7:f0:
         26:42:19:f1:12:6c:66:b9:83:a0:bf:79:19:32:df:e2:91:e1:
         7d:25:a8:ac:0d:41:3c:74:29:c1:2a:a7:96:5c:75:98:da:fe:
         fc:03:33:f1:f4:c0:f6:b4:85:27:ab:ac:16:b0:69:67:60:78:
         d0:75:e1:52:a6:e1:98:da:78:2d:ac:f9:74:9d:8b:41:d7:24:
         1c:3c:79:37:22:cc:d6:cd:ef:71:53:fb:bb:51:17:1d:65:07:
         ce:fa:e8:f4:9b:a7:b3:25:c0:6f:a3:fc:08:9a:53:7f:68:cd:
         bd:6b:d7:8d:c6:98:4a:f2:83:5b:10:b3:e3:d5:b2:1b:a7:64:
         1d:44:5c:7c:83:40:7e:1d:31:4a:7b:18:22:3a:17:20:6c:aa:
         67:fe:4d:5d:ad:ef:76:27:8f:23:84:7a:90:ab:e6:a6:4b:6d:
         8c:db:8e:8e:3b:a6:58:8f:51:75:ae:e9:1b:0b:09:90:16:b0:
         0d:61:18:1c:17:be:85:ee:a2:ea:bd:ce:f4:5d:33:fd:72:22:
         b5:d8:a0:2e:5e:ba:8b:5d:09:03:22:6b:c1:a2:51:20:2e:56:
         1d:89:ac:5e:5f:55:39:c1:91:26:9f:b0:f4:73:55:6f:71:be:
         ea:6c:34:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:09:58 2025 by rpki-client