Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ad926e8-0e15-3ea1-b004-a26688cedc5d.roa
File:                     4ad926e8-0e15-3ea1-b004-a26688cedc5d.roa (raw, json)
Hash identifier:          Dlw0MQnh1k08KNcj7nH2Fq1g6XOvtzTk1HYLZfOpH8U=
Subject key identifier:   0D:FE:14:75:EB:7D:E9:66:04:3B:D9:1F:DA:25:2C:B8:09:AC:18:46
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849EA853BEE1B1C682082FE1B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ad926e8-0e15-3ea1-b004-a26688cedc5d.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     701
IP address blocks:        71.124.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:3b:ee:1b:1c:68:20:82:fe:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=541879ab-4f89-4866-be09-005b0edd1c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ca:24:a3:cf:7c:b3:87:08:9d:32:aa:ed:9f:
                    65:82:3c:44:54:b1:91:3d:de:82:1d:36:9c:1c:9f:
                    f2:c9:c8:c1:a0:c2:93:b0:0e:e2:ea:2f:ec:20:82:
                    d5:28:59:7a:c7:c1:03:02:8a:d8:6e:44:05:a1:e0:
                    d1:3b:1b:cc:44:f6:fb:2b:54:f8:b1:8e:c5:0b:56:
                    ff:57:4c:32:cc:99:41:ca:58:85:63:85:97:c7:8f:
                    a2:8e:94:4f:9b:a5:98:79:7f:58:76:7f:e8:b2:87:
                    5f:21:ef:1c:9e:13:e2:13:30:53:09:86:88:b1:58:
                    e1:35:74:89:4b:4e:ad:61:87:bb:2c:30:f6:95:4d:
                    8f:df:60:14:ef:7f:c6:e5:ac:44:73:4a:01:49:12:
                    ad:c4:88:6b:ee:00:b9:0a:d4:70:bb:9c:a8:88:73:
                    af:46:26:f7:25:9d:08:84:aa:8c:21:a6:31:b1:e5:
                    f4:9e:e4:b5:7e:9b:55:ce:93:85:cd:46:8f:b2:4d:
                    5e:92:21:66:24:9e:0f:8b:5b:07:5e:ea:2b:2b:09:
                    11:b2:11:0d:54:14:3c:a0:cd:26:08:4c:62:0c:af:
                    2f:8f:b5:8b:25:29:10:58:01:42:f8:e4:42:fe:52:
                    b3:0a:c6:03:61:dd:13:a1:1e:40:8e:b3:de:8a:33:
                    07:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:FE:14:75:EB:7D:E9:66:04:3B:D9:1F:DA:25:2C:B8:09:AC:18:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ad926e8-0e15-3ea1-b004-a26688cedc5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.124.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:d2:28:b8:1a:e2:72:d5:ee:3a:05:35:9d:a1:fd:59:b6:39:
         6b:4b:e9:d4:b6:62:d1:59:eb:2a:07:7c:b0:44:f5:ee:61:37:
         05:7e:ae:5a:d7:c9:f2:ae:e4:45:06:fb:64:65:98:70:f4:f2:
         54:95:92:83:ca:94:ad:e6:75:2b:b8:dc:e6:42:84:84:db:d7:
         1a:aa:c9:63:7b:a6:f1:1a:54:57:13:57:f7:4f:37:fa:b0:c0:
         24:3c:4c:9b:ab:38:5a:cc:b2:a0:d4:59:d8:ec:09:1f:04:8e:
         5f:aa:f0:77:b4:0d:d0:73:be:c0:0a:57:a8:4f:45:de:b1:bb:
         8d:7c:52:97:cf:cc:45:c9:80:88:76:50:ba:6f:80:98:42:89:
         54:f6:1d:7a:b2:a2:d0:8c:f3:16:47:2e:3f:82:6f:72:ef:1e:
         3a:2d:bc:59:80:67:f9:ec:a2:38:f6:d0:49:d4:31:13:e8:59:
         32:8f:dd:f2:e5:75:61:09:1a:06:66:4d:8c:a8:88:f5:53:10:
         33:59:01:07:2c:ae:dc:b1:8f:59:8f:04:88:24:87:87:29:4b:
         50:f6:79:a4:9a:71:2f:6a:22:17:88:7e:00:b2:08:a6:b2:89:
         42:c3:58:ba:ce:5d:c7:f5:11:67:b9:36:4b:ba:86:71:f6:6e:
         13:14:7b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:51:26 2025 by rpki-client