Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/321fb60d-9686-3132-a037-9e5f9e621a79.roa
File:                     321fb60d-9686-3132-a037-9e5f9e621a79.roa (raw, json)
Hash identifier:          5xN1he9cS5GvRxunqOLuv91V0rNonQnKpj3SsujWeOk=
Subject key identifier:   93:87:4D:36:D4:25:CC:38:70:53:DA:2B:B6:76:50:0F:DD:82:3F:35
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AC2E1118144EFFEC22C266E40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/321fb60d-9686-3132-a037-9e5f9e621a79.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     701
IP address blocks:        216.156.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:11:81:44:ef:fe:c2:2c:26:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=af6d2fdc-e43b-459f-9a73-0655b048b8e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e6:f2:d8:3c:51:92:a5:2b:bd:86:f0:de:91:
                    a0:4b:49:17:56:cf:21:17:aa:88:a3:c9:7a:c5:3c:
                    2d:70:8f:11:91:ee:da:48:1e:53:08:2f:b6:2a:10:
                    0f:67:22:40:8e:ce:ca:cf:08:16:2b:14:be:f3:ee:
                    e3:bb:34:2e:dd:8a:38:1b:fb:77:eb:a9:f1:79:27:
                    13:a8:de:25:83:1b:d8:41:a0:5e:ec:5b:9a:e6:17:
                    be:96:6a:1f:fc:8b:79:f9:7e:85:4f:6b:fd:10:b1:
                    f5:d9:35:38:c4:fd:15:29:d6:cb:54:ac:42:09:86:
                    29:1b:a2:c0:de:35:9d:84:67:e1:8e:7e:d0:14:d9:
                    18:a0:ce:ac:78:ac:23:7c:ad:2d:23:aa:97:e7:6a:
                    03:c4:40:07:3b:e9:77:5b:96:ba:fd:4c:4f:1a:f8:
                    20:f5:0d:9d:82:84:b5:10:d1:ec:bb:16:cf:ed:1c:
                    24:1a:11:27:85:9b:de:12:6b:8b:ce:22:13:e1:53:
                    ca:8a:85:28:d4:82:46:02:d6:e6:1b:1a:2c:f7:d8:
                    e8:82:fc:a9:b2:b4:e5:ff:2e:08:3f:23:70:10:53:
                    2c:da:d7:af:2c:26:46:f8:8d:06:3c:92:c3:80:9b:
                    e5:f6:59:4f:68:25:3d:33:66:af:ee:10:bf:db:3e:
                    23:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:87:4D:36:D4:25:CC:38:70:53:DA:2B:B6:76:50:0F:DD:82:3F:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/321fb60d-9686-3132-a037-9e5f9e621a79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.156.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:96:ce:44:99:1d:ee:c1:af:c5:4c:88:9a:ff:24:fb:e5:dd:
         62:31:f8:a3:36:90:58:19:03:24:25:d7:ad:3d:a5:24:24:90:
         3b:ca:1a:ac:02:63:90:fc:7b:3e:76:f3:fd:78:4c:26:f9:c8:
         2e:6b:c5:d6:3d:37:ee:92:34:86:12:ed:9e:2d:0a:26:69:27:
         06:e5:b7:6a:de:10:28:53:b9:f9:1f:87:8b:8b:1c:23:6c:44:
         c3:da:cb:76:4c:00:ba:8a:26:36:0f:8d:a4:d2:c5:65:91:99:
         84:b3:30:93:41:e7:06:aa:55:ca:a1:be:49:e6:22:b1:1f:ea:
         a7:0f:21:ad:f1:96:2a:13:a4:62:bd:4b:c6:b7:2c:fd:a3:74:
         8e:d9:98:ce:09:10:48:85:2f:1b:e5:33:dc:43:c3:ca:1f:4e:
         48:0c:6e:5c:26:88:d7:54:dc:83:d8:56:53:88:3c:8a:96:a7:
         12:d3:ab:09:43:ae:0a:91:8d:7c:5c:3d:1e:92:df:bf:01:dd:
         c1:f7:21:78:f4:e9:2c:0e:f0:cd:b7:13:a3:a8:3c:15:cb:11:
         c8:4f:7a:19:f6:77:f4:7e:89:fc:3b:6d:17:5f:e9:0f:a5:c2:
         cd:2b:8f:4c:b6:9d:2f:a8:6a:64:28:1c:80:ec:46:94:b5:52:
         71:80:58:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:29 2025 by rpki-client