Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f852161-dfa7-3e50-b710-b9359012321b.roa
File:                     6f852161-dfa7-3e50-b710-b9359012321b.roa (raw, json)
Hash identifier:          rEOGP5MIFyNcymN4BA7G204B9+YOjdpMOUgqNEdmvGg=
Subject key identifier:   A9:0A:9F:2F:E9:D0:6A:CC:00:60:E7:16:A1:D1:14:6A:D2:F0:C1:47
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AC2E110206199611A77EAA100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f852161-dfa7-3e50-b710-b9359012321b.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     701
IP address blocks:        67.90.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:10:20:61:99:61:1a:77:ea:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=038248ab-d2fb-41e3-a64e-9e25b18f69a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:81:c1:65:be:82:d0:dd:cc:41:a2:c1:5a:7a:
                    42:52:b3:26:2a:92:6f:8a:57:17:a3:a3:0f:31:c6:
                    ba:1d:7e:e7:39:b5:74:a0:64:51:9e:af:ad:ce:9a:
                    76:96:8a:6f:a5:cc:fc:84:19:b4:cb:95:ee:1c:0d:
                    83:73:5f:f3:40:89:28:4c:26:19:d3:09:86:60:47:
                    0c:45:30:a6:b8:ac:0b:48:d7:77:fc:25:25:7e:4c:
                    3a:e4:15:52:5e:46:ee:92:e0:ff:3a:92:d6:34:fb:
                    ba:17:f6:2d:01:c5:28:22:d9:33:ab:87:6b:66:2e:
                    f2:dc:ea:63:ee:51:75:a0:43:e9:cd:11:30:61:b7:
                    9e:94:de:4a:63:83:14:fc:21:9d:26:a7:22:44:4f:
                    15:35:b5:c5:19:b2:b4:e7:4e:2f:bd:1d:2f:2c:91:
                    02:2e:11:62:88:42:f3:27:26:5f:a4:2f:c4:0d:ec:
                    cc:35:30:e5:d7:bb:72:45:27:9a:84:a8:41:39:31:
                    8d:6d:39:7b:01:c8:6d:6e:e4:c7:8b:c9:b3:7c:d5:
                    8c:2c:56:d6:52:c3:63:e7:fb:96:d9:8a:fc:d7:43:
                    ae:a3:6a:22:b7:5d:24:5c:5d:25:3e:2a:ee:96:b6:
                    da:b5:53:e2:dc:a0:81:af:ed:6b:36:8b:45:fe:64:
                    98:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0A:9F:2F:E9:D0:6A:CC:00:60:E7:16:A1:D1:14:6A:D2:F0:C1:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f852161-dfa7-3e50-b710-b9359012321b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.90.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:cc:18:a1:b6:a3:30:eb:a6:f3:11:c8:59:f8:e9:61:74:b9:
         04:2b:c4:a5:92:07:b2:b9:a1:d7:cf:c1:1a:67:17:e5:1d:a7:
         80:47:a6:60:83:d8:2e:17:48:83:1e:94:ec:8c:aa:80:a3:6e:
         f8:45:5d:a5:3f:47:f3:1d:1b:95:7c:f3:57:47:fa:d6:64:3d:
         37:68:ab:41:2e:2d:db:cf:67:4c:05:31:dd:9f:88:23:22:89:
         7c:c6:e1:cb:ab:2a:94:ee:91:74:8a:a9:88:4a:81:ad:a9:5c:
         b3:3d:65:c4:d3:77:80:8d:72:e1:42:9e:a5:b6:c5:93:84:45:
         ce:4f:bf:99:f7:77:53:00:cf:f7:31:e7:17:5c:ed:cf:4f:da:
         12:0c:a2:90:56:2c:f1:99:37:9c:66:82:dd:ce:77:5c:a6:d4:
         30:da:60:2a:7c:c9:98:c3:57:72:18:b3:22:1b:63:09:2c:55:
         a9:1d:d2:f8:69:36:ef:ac:ed:70:ed:b2:17:2c:4f:a7:43:b2:
         97:11:f4:1f:2d:04:58:c3:42:a9:32:b5:96:33:a4:ae:44:d3:
         fe:bd:76:00:c6:03:6b:c9:99:ff:5d:d2:cb:c5:96:cb:ce:08:
         a0:0b:1e:de:a1:fa:48:c9:28:78:06:0b:54:6e:85:68:1a:15:
         05:fb:43:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:30 2025 by rpki-client