Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f5dfe71-5abe-33b9-b55d-bff9fe465212.roa
File:                     4f5dfe71-5abe-33b9-b55d-bff9fe465212.roa (raw, json)
Hash identifier:          YwG4Wjzusy1qSLfiiQFPh7qw3mDOUvFysjTg1x9EM9Q=
Subject key identifier:   52:34:8C:A4:06:49:46:45:9C:A7:31:90:5E:5B:6D:AF:C2:68:8E:A3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B358DF21F8E6D98AF4F50
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f5dfe71-5abe-33b9-b55d-bff9fe465212.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     701
IP address blocks:        65.225.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:35:8d:f2:1f:8e:6d:98:af:4f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=3bc1fe77-ed4d-4e93-9bbe-771fe3a2ed80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:85:f0:92:b2:5d:93:43:7f:ff:68:08:7d:4f:
                    03:1f:ff:56:fe:92:6c:c6:9b:48:14:99:e4:fa:c2:
                    a4:1b:f6:bd:fd:8f:a8:8e:2d:64:28:ee:dd:aa:6c:
                    fe:eb:6b:85:2b:28:0a:b1:41:32:9e:1e:09:ac:fc:
                    6f:d7:04:91:6a:03:a7:7f:3f:89:1c:c4:47:0e:00:
                    ad:43:b0:01:56:d0:df:af:bc:70:8a:00:b1:62:9a:
                    53:e9:e3:41:8e:7a:e6:6b:d6:45:c8:2b:be:b0:b3:
                    40:dd:7c:42:16:4c:64:0e:34:d4:86:f6:08:b5:c6:
                    57:24:8a:1f:42:fa:fb:e2:e4:67:34:00:86:7e:aa:
                    1d:2b:d8:a6:dd:d4:e6:9c:e1:f7:b3:20:42:0f:7d:
                    92:0f:0a:77:af:99:69:32:c9:59:fe:d6:89:71:07:
                    14:51:a4:9e:ec:e1:d1:ab:8e:67:c3:91:41:be:63:
                    82:66:85:d7:74:03:be:62:a2:94:3d:ae:a6:49:ae:
                    e4:96:1c:eb:32:25:c9:28:7b:5b:8c:57:4d:36:82:
                    1a:3d:ba:7e:2c:9d:21:da:3a:cc:3b:f7:ed:0b:23:
                    0f:0c:ea:61:b5:4b:f4:b4:b1:69:33:64:95:d0:c2:
                    ed:77:44:78:d2:ba:2e:cd:b2:c6:a3:0b:45:ee:c6:
                    c4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:34:8C:A4:06:49:46:45:9C:A7:31:90:5E:5B:6D:AF:C2:68:8E:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f5dfe71-5abe-33b9-b55d-bff9fe465212.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.225.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:f7:2f:db:d6:39:5e:54:31:d6:3e:25:30:ed:90:d0:8d:cf:
         c4:d2:d0:74:78:17:46:4c:ab:88:84:8d:8f:17:53:f3:7a:22:
         3a:56:83:ab:10:30:50:d7:bf:c9:19:d9:e1:33:0c:5c:03:31:
         76:de:13:bd:52:79:ac:3d:42:f0:27:53:a7:f8:c6:9d:84:35:
         e3:57:6f:46:48:3d:c7:2e:40:ed:75:8c:e3:81:1c:da:d3:3b:
         e3:5c:88:06:97:b7:3f:5a:2a:c0:3a:a2:64:8e:b5:46:98:71:
         6a:c2:93:9a:e6:00:14:c3:e2:d5:91:cc:30:f6:b2:dc:3a:31:
         dd:a3:35:76:2c:b6:d9:40:29:35:f4:52:66:01:c8:61:89:fd:
         2c:9a:26:81:0c:33:49:0a:43:f8:06:b6:06:03:fe:88:c7:6c:
         47:e0:d7:35:28:76:cb:ef:cb:ea:6d:70:c6:4d:98:08:de:73:
         bc:17:52:87:a5:26:9b:b9:7f:33:45:42:d3:f6:a4:e2:e4:12:
         0e:24:8d:87:1a:af:93:06:97:95:02:c4:67:fe:90:04:e1:3b:
         8b:47:18:61:98:d3:70:c3:1a:79:46:ba:28:3f:18:2e:82:16:
         44:d6:84:99:3a:c4:ff:dd:ae:b0:92:27:aa:81:e2:a7:be:cc:
         5e:55:dd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:10:22 2025 by rpki-client