Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/771425ba-a47e-3640-a114-2f65335da74a.roa
File:                     771425ba-a47e-3640-a114-2f65335da74a.roa (raw, json)
Hash identifier:          L20pA5hgaxW2foGZlr2/K/KJt4tnYjaf8ZH77Cgqv8I=
Subject key identifier:   49:11:80:E1:F5:BB:49:91:D8:2A:BC:A4:36:8F:5E:AC:ED:AB:A2:30
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F43285848100A88211B9280414B69B140
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/771425ba-a47e-3640-a114-2f65335da74a.roa
Signing time:             Sun 01 Dec 2024 14:00:51 +0000
ROA not before:           Sun 01 Dec 2024 14:00:51 +0000
ROA not after:            Sat 01 Mar 2025 14:00:51 +0000
asID:                     14618
IP address blocks:        192.184.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:10:0a:88:21:1b:92:80:41:4b:69:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Dec  1 14:00:51 2024 GMT
            Not After : Mar  1 14:00:51 2025 GMT
        Subject: CN=7b3d840a-4a5b-4623-a491-4898eec95a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:62:89:ec:a0:f1:3d:7f:a4:14:96:99:6c:f6:
                    05:e1:9a:b7:79:21:f7:19:4c:71:e9:97:75:a2:cd:
                    92:09:d2:16:96:d7:3b:6a:30:e0:0d:2b:cb:50:b5:
                    d4:97:8a:3e:87:a0:4c:ae:7b:1b:31:68:00:99:0f:
                    3a:4c:67:98:c1:ae:70:85:cf:d7:af:01:5d:ef:25:
                    41:9f:59:dd:1a:57:db:6a:b8:7b:fb:77:68:9b:06:
                    c1:ab:9f:6a:e1:0b:79:d2:74:48:0e:bb:1e:4d:55:
                    9d:b3:66:97:1e:fb:e0:30:f3:89:d9:05:c5:3e:93:
                    41:42:2a:3f:7b:ae:29:a7:a3:d2:d9:44:e2:4d:1a:
                    ac:28:d2:4b:31:08:5b:11:67:d3:57:7c:39:46:6d:
                    c1:2f:cc:9e:c1:e3:bf:f8:03:e0:3b:10:22:08:58:
                    3d:7c:14:77:94:ee:8b:72:c9:f9:2f:95:6f:e6:53:
                    95:95:7a:8a:d3:4d:ea:ff:30:35:e4:95:99:9a:a8:
                    63:ba:df:55:7e:6b:f2:0c:62:8d:ff:63:b9:09:f4:
                    71:d7:07:9e:41:47:ac:2e:c7:88:90:14:86:9e:05:
                    dc:97:cc:70:35:eb:9c:2c:57:34:e4:3a:11:77:d2:
                    73:59:c9:39:15:82:68:0b:d7:34:52:6a:d9:ff:f9:
                    ff:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:11:80:E1:F5:BB:49:91:D8:2A:BC:A4:36:8F:5E:AC:ED:AB:A2:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/771425ba-a47e-3640-a114-2f65335da74a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.184.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:04:0c:13:82:c7:c1:2a:75:98:2f:4f:ee:ce:5f:81:c8:5c:
         c8:fe:c9:64:3d:29:67:3b:57:c0:58:95:7d:e2:87:1e:d0:9b:
         3c:67:83:c6:12:df:da:58:72:00:8c:e0:30:2a:c5:00:62:b4:
         de:be:82:3b:b7:de:74:b2:03:4d:d2:44:e9:ae:5a:f2:0e:c6:
         1e:82:d6:ef:75:1d:e6:65:5a:c7:01:8f:42:e1:54:8c:fd:b0:
         90:1f:44:92:e8:b6:b0:a0:6d:24:e1:e6:9e:90:b2:d6:9d:2d:
         c9:60:a7:af:8d:e7:d1:d4:dc:be:01:1f:f2:5f:b9:99:64:d7:
         c7:e1:45:8a:d0:28:7a:fe:c1:60:1f:4a:e4:74:88:25:fe:fa:
         c3:ca:4a:3e:32:a7:3b:fe:ee:e5:8d:34:2f:9a:94:9c:e1:d9:
         67:54:ef:7b:88:04:7b:48:7a:22:fb:d7:91:3e:1c:40:b6:a5:
         d3:86:c0:88:d7:ff:3d:5c:fc:75:94:d7:24:69:b2:74:d3:ab:
         03:d0:c4:73:a1:e6:d2:d8:73:8c:df:e6:3d:a7:2b:9d:20:5b:
         f0:30:d7:22:09:21:d3:7d:60:b4:60:26:01:d1:2c:b8:ed:4d:
         b6:4e:d6:fe:bf:5e:9b:64:37:a8:fc:af:d9:bb:7b:e5:fe:bb:
         7e:00:ed:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:50 2025 by rpki-client