Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1729c03e-da8c-3a93-9a01-f0f39e4325fb.roa
File:                     1729c03e-da8c-3a93-9a01-f0f39e4325fb.roa (raw, json)
Hash identifier:          L1c0OqjaoRKk91vob7jYUY/y5CVA25nB5ZhaQgtlMMQ=
Subject key identifier:   E1:19:9E:B5:CB:98:22:7B:D7:69:20:D7:61:7E:D6:C1:7E:B0:19:D9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849EA8539F78BBF2DF65A22B2C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1729c03e-da8c-3a93-9a01-f0f39e4325fb.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     701
IP address blocks:        71.123.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:39:f7:8b:bf:2d:f6:5a:22:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=cb40e77f-f62c-47a6-93d9-99bfecb5281c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:51:89:6a:4c:00:3d:27:2b:87:a1:3d:63:03:
                    e5:83:86:62:6b:0b:3f:2b:85:cb:5b:d8:bb:b7:81:
                    2a:94:c2:3f:fd:3e:bb:e4:d8:29:ea:04:88:6a:e3:
                    b0:9b:99:0b:09:ca:e0:3a:c7:1b:ac:40:04:57:bb:
                    b5:15:d8:45:54:fa:61:ef:1d:48:31:e0:11:2a:68:
                    12:f8:ba:27:cd:70:77:4d:1e:fb:76:de:a3:c5:09:
                    3a:bc:b2:f9:6f:32:14:dc:5d:e7:a8:0d:64:74:ad:
                    73:63:be:ca:e8:c4:13:f5:ea:97:99:dc:b2:8d:90:
                    5b:9c:43:3e:c7:a3:6a:48:ae:5e:10:54:ee:22:d9:
                    91:19:cd:cd:fb:1e:27:dc:38:4d:3f:2c:4a:02:b7:
                    3c:f9:9e:84:d9:31:43:60:10:69:01:ad:be:17:d5:
                    82:ef:90:82:24:87:12:fc:e6:df:3f:6a:9b:79:50:
                    86:0a:4c:fd:36:4c:77:63:26:09:e6:02:7d:41:bd:
                    63:98:86:69:35:77:e7:98:d0:5d:12:6f:58:c5:84:
                    d7:d6:14:6e:7e:65:51:04:ff:f9:d9:34:d2:8c:7f:
                    02:24:2f:d7:b6:9d:61:63:dc:07:e0:12:3a:32:a2:
                    20:9d:a8:94:a5:bb:1e:55:a6:f1:44:65:90:d2:1a:
                    00:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:19:9E:B5:CB:98:22:7B:D7:69:20:D7:61:7E:D6:C1:7E:B0:19:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1729c03e-da8c-3a93-9a01-f0f39e4325fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.123.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:9a:b6:81:40:23:23:3c:26:1d:07:88:49:15:97:ca:6a:dd:
         cc:fb:d4:91:f0:8f:42:51:7f:df:6b:2d:96:17:fc:a2:d5:ff:
         96:24:05:3d:20:6e:ca:d8:19:7b:03:a0:da:92:a6:b7:a4:77:
         a3:a4:08:8b:bc:fb:c9:7f:22:9f:33:58:73:7b:b5:95:c2:ed:
         1f:ce:d2:74:53:0f:4a:5f:3e:38:04:12:85:78:a0:db:32:4e:
         ca:95:70:95:06:e0:63:1f:14:38:88:d9:d8:eb:4e:07:54:64:
         a6:e6:61:83:a5:fd:e8:95:ed:d5:57:c9:e6:ad:30:46:10:25:
         31:6c:de:0c:11:92:e5:b3:e8:e5:87:49:b2:5e:cf:56:8b:c1:
         9c:6b:13:1f:80:c1:47:3e:dc:bf:74:78:a3:9d:99:0a:0a:a8:
         e2:0b:65:e4:08:4e:66:d6:18:74:0a:ab:95:17:9b:3b:80:fd:
         bb:0b:9a:49:47:c5:52:d5:64:7c:18:d1:a9:8f:78:90:fb:cd:
         9a:2f:f5:3a:87:c0:8d:66:8d:6b:47:f5:b1:27:cf:6a:12:b7:
         7a:a0:36:01:55:db:e3:2b:bf:aa:ab:58:78:00:f4:c1:64:2b:
         22:da:4f:fe:e9:28:88:be:a5:f6:66:91:b7:e0:5e:27:32:05:
         09:72:bb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:23:48 2025 by rpki-client