Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c1aeff7-e221-3c72-9ea1-d0958f00ed52.roa
File:                     3c1aeff7-e221-3c72-9ea1-d0958f00ed52.roa (raw, json)
Hash identifier:          Rm9qQaQ2wDmGKojSV3pH83CXdVYpP6ubfoX0lAUGxFI=
Subject key identifier:   0D:F3:08:CF:E3:7F:FC:17:6E:D4:5F:1E:CE:0B:FC:CA:92:F0:82:92
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A126C79746A3D122129F21330
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c1aeff7-e221-3c72-9ea1-d0958f00ed52.roa
Signing time:             Tue 03 Jun 2025 20:03:53 +0000
ROA not before:           Tue 03 Jun 2025 20:03:53 +0000
ROA not after:            Mon 01 Sep 2025 20:03:53 +0000
asID:                     3371
IP address blocks:        69.96.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:12:6c:79:74:6a:3d:12:21:29:f2:13:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  3 20:03:53 2025 GMT
            Not After : Sep  1 20:03:53 2025 GMT
        Subject: CN=2593029f-b4e5-473c-916a-f1e2094e55ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8e:9a:d3:91:a1:e4:2e:51:19:7c:0d:5a:a7:
                    17:5b:3a:0d:4f:8f:56:74:42:65:1b:d9:bc:95:54:
                    92:77:6f:4c:a3:9f:83:9d:ed:5f:72:df:e5:95:93:
                    b3:67:09:1e:91:ae:32:b1:55:64:4e:11:c8:d5:39:
                    0f:95:6f:37:45:1d:89:d7:27:fa:7e:c7:e1:8f:94:
                    58:90:6d:c2:5d:a6:d8:cd:ed:fa:a5:bc:08:5c:b3:
                    c4:3d:fb:6a:52:29:07:80:49:92:8d:61:9e:fc:81:
                    76:31:9f:1a:fd:72:20:47:62:67:43:45:2a:2e:eb:
                    5d:ea:02:9d:03:4f:93:62:22:74:f7:7b:38:2b:9c:
                    c3:16:0e:07:c8:11:bf:31:ab:4f:df:dd:2e:11:3e:
                    e2:a5:36:bb:5f:13:b0:f8:b3:9d:4f:ed:93:a6:d7:
                    0a:a5:a7:f0:d7:0b:25:c6:3e:9d:80:5c:54:8b:77:
                    a0:3a:cd:b9:2f:46:0d:90:63:da:bc:11:a5:81:cc:
                    19:71:a8:2c:76:1f:c7:d8:a1:dd:21:db:de:76:ae:
                    bc:8e:c0:a3:d5:e9:2e:9a:4e:d0:13:8c:1f:e3:ea:
                    94:c8:ae:e2:8b:62:b4:1a:8b:fa:5e:0d:95:40:05:
                    70:6a:fc:cc:17:6f:78:ed:ac:da:fd:c5:6e:9d:a1:
                    6a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F3:08:CF:E3:7F:FC:17:6E:D4:5F:1E:CE:0B:FC:CA:92:F0:82:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c1aeff7-e221-3c72-9ea1-d0958f00ed52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.96.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:54:55:ae:18:ae:fe:a4:bb:3d:75:26:7c:84:91:99:74:66:
         a4:0b:2c:ac:31:20:21:46:b2:0a:88:28:19:3f:ae:f1:ce:2e:
         bb:94:8e:d0:7d:cc:bf:ad:46:be:f1:88:4a:bb:20:05:52:c2:
         da:d5:2d:e9:67:a4:81:b8:f2:3e:92:61:c3:59:34:07:6c:d9:
         25:86:0a:7c:d6:27:c3:87:7d:e4:0a:46:f7:17:32:e7:61:8a:
         70:6d:ec:78:61:fd:8b:f9:7f:88:39:e9:b3:bb:d0:b3:b7:4c:
         20:cd:54:b9:2e:c4:94:39:31:19:67:9f:ae:40:24:cb:82:c6:
         3d:05:06:ae:6e:96:0a:2c:82:f8:ef:64:f4:54:4c:07:fc:ad:
         0f:e9:fd:d7:b2:bf:0a:d6:ad:28:86:f2:98:a0:2c:26:46:e2:
         4c:07:c7:9f:a7:f2:b0:fa:c4:ad:d9:c4:d5:5a:ff:36:bf:08:
         1b:fb:1b:1b:27:6b:83:72:0f:52:52:29:d3:a1:f1:40:d3:e2:
         50:48:1c:d3:67:16:09:cc:88:8b:f9:7e:cd:3a:19:28:28:53:
         b2:03:c5:4b:5a:ee:10:e8:68:b7:8c:d9:46:83:28:fe:62:4f:
         bc:5d:cf:7d:62:df:cb:a4:f8:d0:09:bf:39:d6:f0:70:d6:d3:
         e1:f8:94:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 03:55:30 2025 by rpki-client