Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fcbecf9-9ce0-3e83-9e3e-e077753c9105.roa
File:                     3fcbecf9-9ce0-3e83-9e3e-e077753c9105.roa (raw, json)
Hash identifier:          f4X/rB8CD8JOGE/pniaUa21dj/5BSPvTOkzeVl8cMI4=
Subject key identifier:   C0:55:D1:96:A5:41:5B:3F:10:AC:A6:62:A0:26:E6:6E:98:60:88:B4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A126D468EBB2C437074296D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fcbecf9-9ce0-3e83-9e3e-e077753c9105.roa
Signing time:             Tue 03 Jun 2025 20:05:29 +0000
ROA not before:           Tue 03 Jun 2025 20:05:29 +0000
ROA not after:            Mon 01 Sep 2025 20:05:29 +0000
asID:                     3855
IP address blocks:        199.172.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:12:6d:46:8e:bb:2c:43:70:74:29:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  3 20:05:29 2025 GMT
            Not After : Sep  1 20:05:29 2025 GMT
        Subject: CN=e72edb0c-afa7-4829-ae26-3035a95e90db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:98:4e:e3:82:62:0a:6a:11:54:86:03:31:d3:
                    2b:09:61:01:de:0b:7d:88:6f:f4:bd:10:31:9b:b3:
                    18:14:14:8f:6d:96:f2:1b:47:23:08:ab:91:2a:09:
                    13:62:0a:75:ca:fe:46:9e:61:1a:d4:a5:a4:2e:5f:
                    16:33:3f:3a:58:03:49:92:e0:18:f4:97:55:5d:61:
                    72:61:38:c1:78:8d:bc:e9:71:af:c7:66:65:8e:09:
                    83:be:49:6c:5c:1f:61:38:59:37:6f:42:d6:cd:82:
                    12:a5:09:c2:1d:17:5f:fd:bc:33:0e:7d:74:92:c9:
                    3c:b9:64:7a:67:96:f3:c4:7e:ef:13:9c:21:6f:b9:
                    76:fc:c7:ca:a9:a5:6e:b8:85:40:8b:68:fa:4c:c7:
                    e3:8f:bb:e0:0d:10:5f:3c:1f:a0:72:c7:99:4e:d7:
                    52:79:23:f3:dc:cc:e5:71:99:ed:49:aa:d6:46:50:
                    4a:cd:14:50:45:f8:08:1a:d1:5f:30:36:c4:83:3b:
                    cf:9e:6d:ab:da:ab:2d:27:f8:b4:0c:d6:bb:6d:4e:
                    5f:ab:5b:85:05:be:6c:75:a7:56:f5:0a:da:58:90:
                    95:db:6c:1c:4a:0e:12:8e:d1:2d:3f:b9:8e:68:ed:
                    4d:45:43:49:21:f0:17:73:9c:eb:54:40:14:ce:ab:
                    5c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:55:D1:96:A5:41:5B:3F:10:AC:A6:62:A0:26:E6:6E:98:60:88:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fcbecf9-9ce0-3e83-9e3e-e077753c9105.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.172.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:0b:7b:53:d0:0a:bd:ad:32:fe:76:71:af:cb:8a:6f:ec:cf:
         ef:c8:d9:c2:7b:a6:9b:06:e3:05:d7:0d:f3:39:72:72:c6:30:
         9b:9b:49:de:19:b8:10:1c:1f:82:11:d3:2a:23:85:3e:53:7a:
         54:0c:7b:09:83:d6:9e:b5:ed:de:da:e6:3b:71:83:35:34:44:
         73:82:7e:0d:55:ee:3c:ba:fa:0b:e3:df:5f:4e:66:b6:03:4f:
         62:23:6e:86:32:1c:aa:d5:c8:96:42:12:3b:df:19:c3:cf:9b:
         a6:c9:90:6b:97:5b:e5:50:41:32:77:63:d1:3c:0b:6e:65:93:
         ce:96:90:7a:c5:6c:38:3f:ed:e8:ea:d0:d2:5f:80:e8:4c:c8:
         ba:5a:d3:71:3e:8f:ae:79:e4:26:36:70:d7:17:fa:cb:bb:c4:
         0f:2e:b2:78:f5:9c:91:ea:20:d4:87:fb:4c:b6:d9:e6:67:77:
         de:27:af:5c:54:07:9b:b7:3a:4e:90:55:70:05:44:74:03:fb:
         5c:45:4f:09:ba:12:2a:fd:c2:5c:5f:50:c3:3b:e9:d7:1d:36:
         63:26:65:9c:13:c2:98:cc:3e:26:5f:b6:8a:6e:f6:56:d7:d8:
         f4:8b:26:65:d8:c0:31:69:b8:bc:ca:e7:96:44:72:00:87:91:
         bb:c5:20:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:25:22 2025 by rpki-client