Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d6b4efb-c114-3abf-ba0d-c01c16a8f5ea.roa
File:                     3d6b4efb-c114-3abf-ba0d-c01c16a8f5ea.roa (raw, json)
Hash identifier:          RXmKwaX96IW9KjgVCjG12/rqwiEuSJQHild/kzQ3Fao=
Subject key identifier:   07:A5:E1:21:87:2E:16:C8:45:67:A7:EB:82:0B:47:81:18:07:10:0A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C24768FBF46344444C41200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d6b4efb-c114-3abf-ba0d-c01c16a8f5ea.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     701
IP address blocks:        151.201.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:76:8f:bf:46:34:44:44:c4:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=9a39a408-b02c-4524-9b25-710cbfac6fd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e2:de:ad:49:02:ce:9b:f2:7b:8b:61:5a:b4:
                    5d:c8:3e:79:5f:c2:3f:88:d8:44:e0:8d:64:c1:65:
                    76:cf:24:73:84:0e:8b:c9:3d:2c:fc:ce:de:ab:44:
                    f8:5e:a0:72:bd:86:f2:b7:8e:fc:d9:46:51:48:22:
                    6d:37:b4:d0:08:cc:4a:16:8f:0d:98:43:d9:89:d0:
                    15:d9:99:af:f3:92:99:5c:17:4e:0c:22:3c:b0:6d:
                    bd:20:d8:a0:b2:e1:d4:6d:7e:8b:61:21:83:0c:98:
                    73:e1:e7:0e:65:a3:af:74:fb:68:b1:ae:48:79:25:
                    90:d2:2b:9d:31:7c:70:4a:79:3a:82:08:9a:94:e6:
                    ec:cf:4a:42:ce:29:ed:26:71:c2:45:be:77:f6:a2:
                    03:f0:f2:2d:d6:79:a4:2e:1d:61:d8:be:80:a8:40:
                    08:b1:60:64:1a:78:4f:f2:cd:d0:a5:f1:92:ef:d4:
                    22:de:09:ba:8f:78:a2:27:73:52:d8:d0:60:fc:ee:
                    57:24:05:5e:ec:14:26:a4:8e:4e:b2:48:35:1d:a2:
                    b3:ef:b9:23:d7:8e:cf:2b:4c:64:4f:f9:b7:ab:28:
                    a0:4c:38:83:cc:b5:85:2c:3f:9b:f6:3f:66:ce:2c:
                    cd:a8:6e:4f:55:8a:42:77:9c:b0:21:0f:a5:cd:6e:
                    9b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A5:E1:21:87:2E:16:C8:45:67:A7:EB:82:0B:47:81:18:07:10:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d6b4efb-c114-3abf-ba0d-c01c16a8f5ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.201.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:04:1c:b4:77:df:69:97:45:d4:3e:ec:9f:eb:2e:d8:62:0b:
         34:4a:5e:f1:bc:98:16:e8:68:4a:16:d1:1f:99:78:d6:63:bf:
         e6:20:82:c4:c9:3f:b4:11:3f:7c:11:f5:a5:7c:1f:c6:39:99:
         94:41:6b:fb:bb:5a:5a:eb:aa:27:55:dc:38:f8:f0:d9:07:f1:
         ac:49:1e:56:9b:fa:85:79:10:c7:d1:5b:8c:44:2c:aa:9c:be:
         73:fc:f7:b3:73:60:47:8e:34:3b:25:25:62:74:39:db:2a:71:
         1d:37:1e:92:68:9b:63:b0:61:cb:04:bb:2b:e3:56:0c:e7:d9:
         03:85:99:c4:55:74:8d:34:c9:ea:3e:f4:e0:8f:7b:14:50:f4:
         26:99:32:d6:6c:27:2b:72:a7:71:20:96:cb:c1:b1:97:c5:d1:
         77:24:1e:0e:d6:66:ae:0d:50:58:bc:d7:59:af:7f:12:0a:2b:
         e8:93:46:01:a6:de:e6:e4:22:1e:37:ea:e4:73:c1:ed:78:95:
         40:3b:bf:89:81:77:09:07:11:fb:39:68:8b:5e:29:59:26:25:
         68:0f:6e:c2:d8:11:57:1d:9d:0b:9e:70:8a:66:66:16:38:8d:
         70:8a:8e:1c:5a:3c:f8:91:70:10:14:b5:f3:e2:10:d8:ac:40:
         5b:db:bc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:16:56 2025 by rpki-client