Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb599286-6e0a-3161-8fe9-5e005e5eafea.roa
File:                     fb599286-6e0a-3161-8fe9-5e005e5eafea.roa (raw, json)
Hash identifier:          N3Pv41QdrKlyPmSt2S5DcmHKWz6CIU3y2Jnmpyt+54g=
Subject key identifier:   6E:3A:65:EE:08:8A:6A:3A:43:09:F3:21:E1:85:03:F2:22:5C:5A:02
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858489D05EEF763E612A354B74720
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb599286-6e0a-3161-8fe9-5e005e5eafea.roa
Signing time:             Tue 21 Jan 2025 02:00:39 +0000
ROA not before:           Tue 21 Jan 2025 02:00:39 +0000
ROA not after:            Mon 21 Apr 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        75.251.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9d:05:ee:f7:63:e6:12:a3:54:b7:47:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 21 02:00:39 2025 GMT
            Not After : Apr 21 01:00:39 2025 GMT
        Subject: CN=d829d0cb-848a-41de-b9a5-245ba733764a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d7:d0:66:53:ff:8c:ab:bf:32:07:9d:67:75:
                    bc:ff:7a:80:66:23:43:66:0d:42:9e:91:d1:5a:35:
                    fe:ac:8d:42:be:41:10:bd:6b:14:ad:c1:35:72:05:
                    de:84:30:b8:7b:ed:b4:0d:b1:b7:6b:d6:b3:2d:10:
                    56:35:74:4c:e5:1a:b5:68:14:76:e8:a4:4d:c1:b5:
                    fb:09:45:33:87:2d:4d:aa:14:da:60:30:8d:46:ec:
                    92:c2:f0:23:bb:82:dc:a4:ac:d8:af:d5:50:bd:b5:
                    c0:05:ea:97:ba:65:ab:40:73:61:84:14:c9:59:74:
                    09:3d:85:66:7b:40:c4:47:f0:6c:d3:e9:f7:84:dc:
                    67:79:65:6b:df:9a:7d:26:84:8b:61:92:1e:db:b3:
                    7c:16:df:8e:f9:9f:48:ae:a3:c6:cb:38:6a:5d:d5:
                    56:0d:e7:43:3e:b4:21:61:23:9d:63:9f:58:ad:50:
                    79:a3:a4:78:df:24:7e:0f:18:25:fd:1a:c2:80:dc:
                    2a:73:43:4e:18:cc:86:29:c3:03:b3:09:84:d0:f6:
                    0f:d2:41:fa:88:e3:61:fe:12:5c:42:6d:12:4b:ff:
                    59:59:6a:7c:66:86:39:c6:d6:de:7e:d5:16:e7:6d:
                    6d:96:8b:b1:da:12:89:73:d6:c2:90:5e:39:3d:e3:
                    95:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3A:65:EE:08:8A:6A:3A:43:09:F3:21:E1:85:03:F2:22:5C:5A:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb599286-6e0a-3161-8fe9-5e005e5eafea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.251.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:d3:83:7b:ca:34:58:c3:5a:3f:42:9d:78:ab:1a:99:2f:14:
         ea:c7:f0:94:b4:e9:7f:9c:58:21:a0:7c:b7:4d:71:64:fc:46:
         96:c3:54:94:06:cf:9e:6a:fa:60:b3:22:0f:6d:78:8f:7f:30:
         29:22:b3:3b:59:24:6d:f0:8d:90:86:b1:70:4d:2b:21:fe:c7:
         e6:76:6f:e2:d6:67:0f:a3:19:0e:6f:7b:cf:72:c5:e9:93:5e:
         51:fe:9b:0d:3f:8d:d9:32:01:ca:01:eb:30:05:c5:5d:dc:ae:
         18:4f:32:cf:28:13:08:3f:22:56:73:3f:b1:91:1a:b8:22:14:
         54:51:6f:a3:c6:8c:37:95:3f:ba:b5:4c:09:1c:46:d4:9a:a6:
         1c:7a:4c:d6:56:40:e7:19:ff:80:75:8d:b8:aa:4d:72:6a:31:
         d3:ee:34:6e:a4:36:3d:fe:7f:02:17:66:c5:02:ef:6c:af:dd:
         a4:dd:2a:33:10:4f:b5:8f:58:f4:e7:53:4d:9f:d3:d7:7e:ce:
         e3:d9:ef:78:3a:98:9d:60:a4:2c:1c:dc:16:2d:64:24:38:17:
         f2:da:a3:d9:64:f0:44:75:48:29:de:dd:ba:c1:3d:13:b1:63:
         5a:03:b8:94:93:56:ef:a7:3f:31:0f:d5:32:34:b9:0e:9b:0b:
         17:78:d6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:57:19 2025 by rpki-client