Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f06d874-881f-3512-b4f0-f1965fdef7e8.roa
File:                     3f06d874-881f-3512-b4f0-f1965fdef7e8.roa (raw, json)
Hash identifier:          8k5/xPX2MsJuT50KvblZiNg0Owex/CfhHqbwf8ReGrY=
Subject key identifier:   22:D6:62:75:C1:08:B1:21:7B:D4:E2:16:05:A6:E3:FE:1C:C5:FF:12
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B0E398C398DF9F27F1E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f06d874-881f-3512-b4f0-f1965fdef7e8.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     701
IP address blocks:        151.203.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:0e:39:8c:39:8d:f9:f2:7f:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=487e818c-32cf-40d3-a409-5c6bdf07bebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:14:ac:20:fa:aa:dc:6f:62:df:9e:67:fb:08:
                    ab:ac:e8:36:51:6e:b6:91:64:4b:ac:b6:c7:82:25:
                    0b:28:ed:5c:d7:55:58:34:e0:b5:a0:a6:ed:88:f1:
                    8f:aa:fe:98:4d:3b:1e:3a:ea:b1:a5:03:e8:ec:5e:
                    49:17:42:b2:79:e6:e6:3a:c4:0f:29:b8:96:f7:54:
                    17:97:8f:d1:6c:a8:fd:1d:e1:df:d4:ff:56:cc:f3:
                    dd:52:0c:9a:c1:38:3b:9d:4e:c8:36:e2:9c:ca:de:
                    b4:1e:6b:d2:28:98:63:e5:1c:bb:10:1f:ab:be:a0:
                    90:7d:5e:7a:49:33:74:ba:a3:60:0f:70:95:f2:35:
                    50:5a:4f:1c:f8:9a:fc:01:0a:8f:84:e0:78:ff:eb:
                    2b:71:be:df:af:cc:53:da:e3:ca:f1:56:fa:e4:58:
                    8a:8a:3a:95:36:77:8c:6d:71:d9:16:7c:fb:04:85:
                    86:04:b1:bb:72:05:53:31:e2:2b:b3:58:91:0e:2b:
                    da:ee:7a:54:e5:d0:8b:2b:75:8c:d1:20:80:b2:93:
                    d5:6c:fa:e7:40:66:c2:df:cc:6e:02:f0:58:85:07:
                    3f:fe:95:78:d8:8f:79:1c:f5:1d:49:de:54:4f:e5:
                    74:9f:3e:eb:e0:1e:92:16:2a:0c:da:8e:f3:6a:48:
                    58:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D6:62:75:C1:08:B1:21:7B:D4:E2:16:05:A6:E3:FE:1C:C5:FF:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f06d874-881f-3512-b4f0-f1965fdef7e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.203.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:15:de:92:a3:d7:a3:26:ee:e0:f2:ba:d7:c9:99:af:91:5e:
         be:31:38:85:28:d5:db:0e:36:42:d2:9c:39:ce:18:dd:ac:0e:
         f8:6f:f9:3c:f0:15:75:b6:e7:ee:37:33:60:a0:4a:b9:67:30:
         92:c3:11:a1:d2:9e:b9:6c:6d:b4:ad:82:71:ee:da:21:08:ad:
         ae:ec:2a:42:29:dd:6f:10:f2:38:1e:77:7f:3a:96:49:8b:97:
         30:55:45:eb:a1:0d:86:a2:a6:67:a2:3d:d4:73:96:95:5c:d0:
         b8:19:7a:bc:80:ea:22:b9:e3:0c:39:0a:bb:54:a5:22:b0:a7:
         ae:16:e1:05:77:37:cb:08:5b:3f:5b:61:90:64:e9:79:1f:a3:
         fc:2d:c7:35:40:40:6e:56:63:43:45:3d:a6:ce:dd:ad:69:93:
         54:73:0c:28:9a:75:40:30:ff:c1:ee:a7:80:73:b9:d1:5e:fb:
         2e:6e:d3:96:d5:c6:76:2e:28:65:68:83:20:fd:24:6e:43:51:
         f3:f3:c7:88:88:e5:05:77:8c:f9:41:1c:f1:b2:18:7f:f0:b6:
         a5:84:da:6d:48:ff:3c:15:1a:70:b1:2d:90:1f:ae:5a:62:64:
         8a:ec:0c:cc:86:af:ef:42:8f:1d:b6:ef:f1:68:df:dd:e2:12:
         ee:4a:cf:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 14:55:48 2025 by rpki-client