Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0600e2b0-1534-35e7-a21f-922488a91329.roa
File:                     0600e2b0-1534-35e7-a21f-922488a91329.roa (raw, json)
Hash identifier:          W13NpkXCacrWtbQA6+aazwS2wJGsm1pMqP+9NbIEQWk=
Subject key identifier:   C0:92:54:C9:AE:6E:A3:63:CD:53:94:A0:94:89:75:FC:7A:15:6E:5C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AC2E10F9F53037968BBC97980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0600e2b0-1534-35e7-a21f-922488a91329.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     701
IP address blocks:        204.51.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:0f:9f:53:03:79:68:bb:c9:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=f3d881b9-084c-4456-8460-0e02680fb1d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:a7:90:74:ce:68:7e:53:cc:92:ac:b7:83:
                    f7:5c:14:3b:cf:76:f2:35:f3:ce:9a:da:b0:da:e4:
                    83:b4:39:dd:f2:fe:d9:4c:d0:87:38:43:61:ff:6e:
                    90:78:9c:30:1d:43:6a:61:06:ad:c1:25:2d:b1:8f:
                    e4:a9:c7:e2:1a:b2:86:32:bc:84:93:96:65:90:b9:
                    01:ee:d8:5b:3b:8f:cd:e3:80:19:cc:0f:25:d3:62:
                    7a:06:2a:c5:88:ac:45:f0:c2:ce:80:45:6d:f7:e3:
                    82:a5:5d:86:fa:40:89:2f:21:a5:08:2b:fb:f3:a2:
                    ef:43:4e:1f:47:6e:18:d7:ab:2e:d6:07:dd:57:1d:
                    33:21:83:1c:a0:fd:bb:2e:3e:eb:0a:39:b4:d0:09:
                    7e:94:4f:14:17:79:b3:e7:9f:4c:f4:10:3a:2e:f8:
                    41:55:b9:14:b7:ad:0f:54:99:ed:72:f1:a2:67:6f:
                    e2:d5:54:27:15:6e:fd:bd:27:59:20:fd:d2:cf:f7:
                    b3:a7:f9:45:84:3a:86:e3:93:36:04:19:7c:cf:c5:
                    fb:ef:a9:2a:5c:43:84:bd:f8:64:94:d0:b8:88:54:
                    34:fe:fa:78:5c:78:8d:92:00:2b:ba:e6:77:fb:ae:
                    e6:3d:67:95:d2:f9:6e:05:60:9a:3c:ae:9a:71:98:
                    88:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:92:54:C9:AE:6E:A3:63:CD:53:94:A0:94:89:75:FC:7A:15:6E:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0600e2b0-1534-35e7-a21f-922488a91329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.51.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:9f:95:00:13:9b:8d:5b:74:fd:88:fe:23:dd:98:dc:53:82:
         20:8a:aa:a6:64:13:6f:ea:0b:21:d9:40:6e:21:27:f7:d4:ce:
         eb:d0:e0:ce:c7:d3:20:25:03:0f:bb:93:d3:75:67:bd:59:2c:
         31:57:7a:a7:a4:2e:2f:90:1d:3f:83:19:09:bc:c0:b3:e7:b9:
         2d:50:a4:c7:5b:03:cf:b6:df:66:8d:c9:4e:36:5f:a5:0d:55:
         c7:f4:ba:14:67:fb:9f:a0:00:25:3e:a3:e2:31:8b:a4:74:84:
         b7:6d:b2:75:29:62:af:c4:2c:e5:8b:2c:7b:df:3a:5c:f2:4a:
         92:66:6c:3a:3e:eb:b8:b0:6b:3f:37:54:b2:83:a9:8f:fb:c7:
         15:06:56:54:aa:5a:d2:c7:20:06:36:c2:da:ec:aa:12:ee:7b:
         4d:df:b0:6a:1a:27:3f:4a:aa:41:53:d1:a4:b0:5a:08:3d:ab:
         eb:13:c7:40:cc:cd:da:61:fc:df:e1:dd:24:9b:23:6a:7d:32:
         a0:0b:af:87:c6:48:67:59:ec:d1:32:9a:4f:d2:0d:6e:3e:01:
         42:1d:10:d1:eb:2f:ae:2c:b6:11:50:2e:8d:e7:a0:4a:49:1b:
         b5:3b:b5:13:dc:df:96:12:01:1c:56:ca:91:31:6c:53:4f:0e:
         b4:cb:c1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:38 2025 by rpki-client