Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03a6f53b-c22a-3be7-9fb4-b4934f69399b.roa
File:                     03a6f53b-c22a-3be7-9fb4-b4934f69399b.roa (raw, json)
Hash identifier:          U88bcm4R/Nm2XONEhmipIPOfa+zqYtS8Ykty6Am7HC8=
Subject key identifier:   ED:AD:29:F6:C0:31:EA:21:34:AD:60:39:48:A0:CE:D9:91:CD:3B:7F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F1800CEF3EC86E152A679700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03a6f53b-c22a-3be7-9fb4-b4934f69399b.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     701
IP address blocks:        108.50.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:0c:ef:3e:c8:6e:15:2a:67:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=c02f44b5-3da1-4e64-9fac-2e3dd9733863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3d:55:26:b5:db:82:20:4f:2f:e7:57:30:3d:
                    c5:bf:1f:16:56:b0:4e:b7:95:5c:79:26:6e:1a:62:
                    3f:bc:88:bf:57:c3:65:71:52:c4:35:f4:3c:ff:20:
                    ee:09:23:20:e8:16:54:4f:8c:5e:5d:8a:4a:2b:9e:
                    95:c0:4d:a0:af:f6:1c:af:61:3e:c0:fd:45:da:d5:
                    d3:23:f8:74:ae:b7:88:22:c5:a9:d4:52:69:0f:c6:
                    59:1e:42:dc:37:3c:f6:e9:80:66:33:c5:c3:8d:18:
                    43:c0:8a:1c:b2:1e:9c:1f:12:0f:58:5d:1a:51:17:
                    53:69:58:11:98:21:d6:17:79:0e:cd:33:77:81:06:
                    a0:b5:d9:96:fb:1d:44:dd:ef:48:04:39:21:05:db:
                    46:fb:aa:2d:a9:1a:15:7f:d9:79:74:c4:49:0c:03:
                    07:8f:76:6c:17:a6:1b:51:30:54:f0:8c:c8:b2:70:
                    56:a6:82:fd:09:73:02:66:6c:31:c5:ba:bf:ea:06:
                    87:2f:4c:4b:8e:d6:a3:9a:3f:89:c7:28:ba:0c:7e:
                    10:93:72:0f:a0:11:d6:48:b0:dc:e5:85:ff:17:f0:
                    a7:7f:fe:75:c9:83:74:99:81:65:5d:c1:70:b2:46:
                    56:9f:c0:93:e4:c9:49:95:3c:e5:fe:18:3b:f4:af:
                    dc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AD:29:F6:C0:31:EA:21:34:AD:60:39:48:A0:CE:D9:91:CD:3B:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03a6f53b-c22a-3be7-9fb4-b4934f69399b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.50.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:25:4f:a3:94:96:d3:d7:6e:98:f8:e0:29:7c:57:15:22:95:
         52:10:97:8c:08:a9:56:fc:e5:e7:87:cb:d8:04:98:fc:fc:52:
         91:ec:b8:5c:f6:84:b7:66:dd:df:48:53:e8:d1:8d:aa:da:9d:
         06:05:49:87:d4:85:31:13:9b:13:da:3e:3a:7a:06:cd:ff:01:
         6f:04:d8:e7:6a:36:a7:0d:aa:c5:1f:a4:b4:37:4b:6c:7e:8e:
         fb:c5:83:0f:f7:c2:69:f4:8a:f1:3b:e3:f9:e0:44:cc:95:49:
         ac:cd:0d:3c:25:c9:d4:0e:39:2b:cf:ad:ff:27:3d:a9:3a:3d:
         13:4c:65:5d:5d:a1:85:00:07:e3:13:52:b5:b3:9c:7b:4a:86:
         56:ac:cd:5b:98:97:28:33:81:77:96:1d:97:f2:52:7b:16:92:
         79:fd:6e:d9:e0:a7:bd:33:92:10:73:42:6d:b7:9e:bb:22:ad:
         f0:e6:4b:4f:85:fd:f2:11:43:ce:de:6c:45:9a:c3:5a:6e:79:
         5a:5e:72:e6:d7:c8:bf:3c:94:16:20:38:76:b5:8d:31:6d:40:
         eb:28:49:1c:a4:a4:da:69:ba:78:7a:e6:85:b2:89:62:50:10:
         71:e3:48:1f:fc:f7:bb:0b:16:db:99:03:c9:bf:9f:d2:3a:e5:
         47:01:6c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:26:51 2025 by rpki-client