Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33899ca3-4617-38b0-b540-98950e532cd0.roa
File:                     33899ca3-4617-38b0-b540-98950e532cd0.roa (raw, json)
Hash identifier:          piYarIW1UeQCh+5o+X7wrM2DMxr1AS3DmSpWZBhxCGc=
Subject key identifier:   40:F9:78:2A:1E:B7:37:61:1D:3A:D6:98:98:A0:12:54:23:1D:B6:E0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F180043B3388400E9C66A410
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33899ca3-4617-38b0-b540-98950e532cd0.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     701
IP address blocks:        68.162.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:04:3b:33:88:40:0e:9c:66:a4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=873a233e-d71a-4ddd-956f-c73bee08dc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:58:dd:35:9d:86:3e:87:43:6e:f5:63:66:01:
                    ba:23:c0:04:28:af:9d:75:0e:04:51:ff:1d:8f:24:
                    59:40:d0:cb:3b:bc:6f:c2:91:09:98:48:81:5f:5d:
                    c5:74:52:24:eb:81:08:0c:5d:cc:9b:13:cf:be:35:
                    3e:56:d7:ef:b9:a7:36:3b:1e:2f:74:04:f0:eb:ea:
                    2c:b1:b0:3e:4d:eb:35:09:8f:21:47:c8:9b:ce:58:
                    c5:6a:82:77:36:e6:3b:12:ca:0c:9f:04:8e:0e:e2:
                    17:f7:1f:a3:e5:f4:1a:7f:85:ad:f4:e5:7e:3e:91:
                    b5:b1:56:13:66:15:48:89:7c:6e:cf:9c:41:ae:ff:
                    38:e9:e2:10:cd:69:2a:76:24:97:52:64:c0:84:b5:
                    8d:2b:0e:ad:e7:25:58:d1:35:3c:65:b8:aa:1e:e8:
                    fa:e0:c0:98:71:d0:4d:59:01:7d:2d:45:2c:01:41:
                    d0:68:d3:39:1a:14:0c:0c:bc:5f:4c:bf:8a:a3:40:
                    50:72:08:28:1b:f5:de:10:ac:0b:d2:ce:97:6f:2f:
                    a7:dc:01:39:b5:01:a7:70:c5:e9:69:25:dc:49:2e:
                    9c:8f:84:ed:27:a6:0f:41:59:58:43:94:12:6d:f3:
                    9a:33:c6:97:48:54:a4:19:71:ba:31:bd:4e:fb:65:
                    53:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F9:78:2A:1E:B7:37:61:1D:3A:D6:98:98:A0:12:54:23:1D:B6:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33899ca3-4617-38b0-b540-98950e532cd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.162.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:ff:0d:f5:34:01:5a:8d:6f:9c:2a:a6:c7:c6:4e:28:77:3c:
         60:7a:1b:c8:95:69:11:4d:f0:5e:65:4c:f1:b6:0f:73:5e:f0:
         a2:b8:f9:6f:28:9f:d0:e5:f4:20:6f:1c:ad:b9:91:a7:8f:45:
         58:79:a1:02:86:5f:8b:fb:ef:fa:6d:4e:fc:41:88:cd:5b:b4:
         ae:b3:39:ef:80:e6:0f:35:77:68:0c:7e:e8:23:d3:8f:da:87:
         db:92:5f:80:81:09:12:8e:ed:89:45:bf:0e:46:76:e6:45:34:
         d5:af:dd:c2:c5:d8:c4:dd:c0:f2:69:1f:ae:ce:56:43:99:8f:
         6b:fa:17:bf:f6:a4:bf:d8:6d:51:a3:8e:f1:e1:81:3f:49:b7:
         b7:99:cb:c7:f8:a4:e1:be:08:3d:51:e3:50:47:6a:df:37:d5:
         d9:1e:c1:8a:24:1f:4c:90:6a:0d:fd:07:aa:46:27:a0:59:ab:
         81:c1:b6:36:43:36:15:47:bc:ca:07:96:60:70:95:bd:0a:1a:
         4b:d7:5d:08:53:76:b9:5a:67:bf:c9:92:3c:4f:d5:03:f0:12:
         ba:d0:85:6b:3e:a8:e7:ff:82:75:73:53:7d:6b:07:a5:aa:6d:
         eb:4a:a4:6d:fe:75:65:d3:1e:be:71:cd:2a:34:7a:63:c2:f8:
         f0:bb:23:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:20:04 2025 by rpki-client