Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/658e7884-f8f8-3498-bae8-6c9805bfe8c6.roa
File:                     658e7884-f8f8-3498-bae8-6c9805bfe8c6.roa (raw, json)
Hash identifier:          DDSyEmsyF6qqTfax7WgxRyBvNGIdMSeySSQcIDda458=
Subject key identifier:   3F:80:31:4E:73:37:04:84:56:1F:A4:D9:AE:C3:4E:7C:8F:6C:57:7F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ACB40F44BACDCEC1C527D94C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/658e7884-f8f8-3498-bae8-6c9805bfe8c6.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     701
IP address blocks:        96.240.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:f4:4b:ac:dc:ec:1c:52:7d:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=3d4f5755-0752-466a-9dc5-6bada7e95b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6c:6f:1f:80:d1:ac:fd:2f:b1:6e:96:77:6d:
                    80:fa:c6:43:48:f4:a7:7d:7c:1a:18:95:80:fa:95:
                    e0:97:ff:d4:0e:44:67:92:bf:23:39:c4:8a:e2:8d:
                    ea:92:23:1c:5e:e6:1b:eb:cb:47:ef:f7:43:da:61:
                    93:cc:5e:a0:83:dd:e6:1d:61:cb:5c:25:f7:30:9e:
                    55:f7:76:48:ea:16:c9:36:8f:71:0e:bb:ea:35:df:
                    3e:d3:dd:f3:37:66:02:a7:17:f8:c5:b7:09:e1:c7:
                    c8:c5:56:ca:fc:f1:7e:83:39:b1:e8:79:a4:10:5d:
                    b8:19:af:48:a5:f6:34:ab:3e:bf:83:68:2e:36:36:
                    10:e1:ac:4a:d3:58:51:5d:56:f2:e3:8b:a0:b0:e3:
                    17:ec:d0:fc:01:56:7a:68:60:aa:cb:4a:c1:3b:19:
                    d0:b3:d2:cc:c9:d9:f3:18:6d:ef:c1:42:4d:bb:0a:
                    cf:e2:80:40:40:f5:28:78:0c:31:01:4b:3e:39:fd:
                    ec:35:d9:65:0f:21:bd:80:a7:3c:7c:c3:ea:42:75:
                    e6:30:aa:73:71:88:17:de:8c:39:5d:d5:bc:47:4d:
                    95:94:f2:62:20:35:f7:60:54:78:b8:2c:72:30:ad:
                    e2:a3:46:d6:57:84:bf:d1:53:06:63:0a:db:72:48:
                    08:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:80:31:4E:73:37:04:84:56:1F:A4:D9:AE:C3:4E:7C:8F:6C:57:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/658e7884-f8f8-3498-bae8-6c9805bfe8c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.240.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:32:07:97:9a:67:2c:03:6b:7b:1d:ae:fb:03:eb:d7:75:6f:
         35:fa:1a:a5:98:09:1d:cd:fe:64:a7:3c:33:6e:a2:13:c9:d8:
         df:7a:ce:ec:f9:7e:09:6f:06:9f:42:94:f5:41:dc:58:01:d3:
         72:5a:aa:95:09:e1:44:ac:8c:ee:d8:1f:43:77:f7:d6:91:92:
         5c:c1:0a:db:d7:f8:3c:08:13:5a:90:da:b7:ff:b8:60:d8:2c:
         60:bd:a6:d8:13:db:8b:ea:71:6e:5f:1c:8f:ce:3c:51:48:39:
         c5:37:bc:43:51:c4:44:fd:a6:34:fd:ac:c6:6a:49:93:57:34:
         01:06:cb:48:ce:7a:b6:59:dd:90:00:76:70:ae:a7:66:e9:ce:
         8e:c2:01:51:1c:43:25:27:4b:f7:83:6b:33:5e:6a:08:f5:59:
         37:6e:97:a6:cf:fb:7f:e1:24:d0:70:39:07:e1:0e:fc:7a:26:
         e1:ec:f8:ba:2d:58:9a:fe:53:65:c2:2d:fd:d2:64:c1:e0:fe:
         bd:c5:8a:c1:48:47:78:6c:f8:2b:91:7d:1e:a4:c1:11:dc:a0:
         94:5a:8e:0c:2b:b4:2f:2a:82:5d:91:cb:bc:09:4f:53:38:7c:
         2f:e1:52:f1:88:60:6f:93:0a:ef:6f:2b:7b:ba:7a:f4:7e:60:
         b0:f8:e5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:24:15 2025 by rpki-client