Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a5807d9-7b1d-35ab-8ccc-b8dd24ebf029.roa
File:                     3a5807d9-7b1d-35ab-8ccc-b8dd24ebf029.roa (raw, json)
Hash identifier:          ugZrANujS29B2wn3LF4NMi4/+VV8tAqAIYH1yAIksCQ=
Subject key identifier:   81:D0:83:7C:87:76:9C:DF:7C:9F:A3:C7:1F:93:CD:E6:E8:4C:6E:DE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F18005BCA95E5D94BFAB9440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a5807d9-7b1d-35ab-8ccc-b8dd24ebf029.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     701
IP address blocks:        96.249.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:05:bc:a9:5e:5d:94:bf:ab:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=379b9977-a5a0-4fe3-971b-754ec49d6fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ce:7d:1f:ce:37:0d:f6:48:99:66:34:f2:b8:
                    df:a3:ad:32:8f:51:be:4d:6e:f4:7b:62:1b:ce:d2:
                    9c:e3:d4:e8:49:05:b4:d6:e4:8c:d0:91:4f:d9:b3:
                    77:ef:ca:78:5c:26:46:2a:ba:a7:5c:62:58:8c:6c:
                    23:65:ed:eb:40:5f:48:0c:a1:15:7a:b2:44:33:d2:
                    0f:c6:1c:4d:cb:96:f5:ce:fd:73:4a:a1:b5:0d:ef:
                    15:c5:bf:ef:f5:df:46:5a:dd:49:d1:b9:b1:9e:7c:
                    ed:b6:a5:07:2d:71:6f:de:ce:72:9d:a0:28:c0:f6:
                    14:62:7d:65:8e:ce:f2:77:ba:95:92:f5:6a:77:15:
                    14:74:cb:0b:29:7e:81:8e:88:3f:f8:6a:40:1e:64:
                    7f:eb:07:a6:6b:15:21:f8:cd:b8:a2:29:2d:a2:01:
                    e1:10:17:71:7f:2b:2c:7a:35:d9:2e:9c:df:12:6e:
                    42:65:f0:d5:32:98:70:81:25:41:19:aa:21:b8:06:
                    eb:8c:25:e7:27:9b:08:a4:a5:3b:37:0e:26:92:af:
                    83:f8:a2:74:fe:9a:08:b2:4f:46:66:11:f8:0a:a2:
                    c0:1c:4c:a6:09:54:ab:f9:5a:15:25:51:07:71:e7:
                    ed:98:a7:fa:dd:67:4b:ff:3f:95:54:19:6a:01:33:
                    4e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D0:83:7C:87:76:9C:DF:7C:9F:A3:C7:1F:93:CD:E6:E8:4C:6E:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a5807d9-7b1d-35ab-8ccc-b8dd24ebf029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.249.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:29:ee:fd:e6:47:2e:cc:bc:d5:b7:79:e9:97:23:3d:cf:90:
         09:e5:cc:b1:28:ca:7f:af:b0:58:e1:e7:44:f9:3a:9a:1f:1e:
         45:96:e4:0a:70:03:28:74:8a:c0:c0:09:9e:ff:39:2f:95:0b:
         5e:9c:78:90:ef:8d:f1:c4:14:c7:bc:52:e1:da:9e:53:f8:15:
         79:7f:69:5a:7b:5a:e1:99:fa:97:8c:41:2b:df:26:3c:05:6f:
         65:15:92:ea:61:69:c5:2d:5d:4d:73:1a:cc:ae:7a:ef:17:68:
         56:96:05:eb:fd:20:14:89:7b:ee:c8:01:7d:0a:ee:26:fe:e7:
         da:2d:95:27:c9:21:6f:11:f2:dd:c1:00:ee:fa:86:5d:dd:d0:
         c1:4e:2a:3f:d6:20:f9:ff:5d:a5:8f:07:70:27:49:64:cf:b2:
         e2:08:ac:e5:26:da:d3:ff:a3:60:ca:ac:ab:89:8a:23:2d:ca:
         a3:33:09:df:88:47:d5:8d:ab:80:14:97:fa:9e:1b:cd:ef:87:
         66:24:14:11:65:d2:d8:c7:8b:1e:66:5a:a8:36:84:98:32:88:
         49:08:4f:b1:7c:98:75:08:9c:12:c0:ae:e4:23:19:ed:f1:82:
         b5:6c:8a:64:eb:96:65:4d:4c:40:c0:a8:4c:0f:d8:54:11:86:
         a3:da:22:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:06:05 2025 by rpki-client