Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72b89b20-5b84-3659-bff1-a9fb0eff24dc.roa
File:                     72b89b20-5b84-3659-bff1-a9fb0eff24dc.roa (raw, json)
Hash identifier:          huwNxY9gOqbn9qViSe4zvUGHFzESbfVjIivizJFy1yU=
Subject key identifier:   28:5C:05:36:7C:40:2B:75:37:BF:F0:17:CB:23:26:AA:F8:F0:B2:3E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849EA853A650B8653C2C175CC90
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72b89b20-5b84-3659-bff1-a9fb0eff24dc.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     701
IP address blocks:        71.182.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:3a:65:0b:86:53:c2:c1:75:cc:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=e54c1fb9-bbc2-4b06-a671-a4ed7ca6636a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:17:ca:02:79:a5:5d:31:72:f4:77:78:b9:a4:
                    76:cb:4d:a8:a5:23:63:40:e9:0c:86:a2:f3:9f:99:
                    6a:02:d1:60:4d:04:f6:c0:2b:e7:49:42:52:0d:58:
                    bc:e5:d5:83:53:6e:91:c3:e0:87:ef:19:c0:5a:0c:
                    5d:1b:44:a8:6e:6f:9a:a4:aa:4a:7f:bd:53:df:92:
                    27:ca:06:a6:c4:2f:93:3b:30:62:71:07:b0:99:25:
                    16:78:45:f5:aa:14:bf:5d:95:39:bd:68:76:a0:8a:
                    a6:db:75:41:35:1b:fc:37:4b:b9:3a:f0:45:23:60:
                    78:20:d1:c3:ef:6f:1c:25:7e:68:87:1c:43:5b:5b:
                    c5:81:c5:e2:bf:ee:8b:09:ec:8f:ef:05:3b:e9:0f:
                    60:fd:7a:7e:1b:06:8a:6a:f1:05:4f:6a:d5:22:d9:
                    5a:b4:f1:e5:1c:57:41:ef:bb:47:fd:34:7d:cc:2d:
                    52:0b:7c:3e:84:a6:55:a1:85:01:a7:4a:4d:fb:25:
                    e8:9b:04:c7:f9:27:af:d6:d9:ec:58:e5:8d:cb:6d:
                    0d:cc:24:66:50:63:f6:6d:5c:3e:3b:10:a0:91:eb:
                    7d:25:1e:a5:e8:4f:4f:7a:8b:fd:92:1b:51:c6:0e:
                    e0:c2:02:2a:38:4f:e5:5a:46:70:0d:5a:3c:bc:c5:
                    31:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5C:05:36:7C:40:2B:75:37:BF:F0:17:CB:23:26:AA:F8:F0:B2:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72b89b20-5b84-3659-bff1-a9fb0eff24dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.182.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:4b:07:cc:4e:68:b9:5c:0f:50:e3:0b:a2:83:45:3e:17:e4:
         f8:0a:63:cf:07:12:bf:7a:d8:cd:ec:be:b0:6c:ee:59:8f:ad:
         7a:7b:9c:45:40:11:17:f7:02:72:aa:39:c1:03:5f:df:ce:f5:
         ec:78:57:0a:40:21:a1:ba:61:fc:2c:54:f5:c9:13:04:6e:69:
         c0:7a:3c:bc:ad:40:f8:d1:57:99:ac:7f:b8:db:d1:ad:2e:99:
         28:af:86:7b:64:64:a6:10:25:27:4d:1c:ec:42:0c:37:eb:52:
         31:21:b9:7b:1e:1f:2f:58:b5:45:72:2b:5b:43:eb:8d:90:bb:
         15:29:e9:b8:a4:37:aa:93:f6:31:85:eb:96:c2:15:3d:ec:fe:
         6b:9e:14:1c:45:99:fe:75:93:20:a5:0c:2d:cb:19:90:b5:f8:
         f5:b3:ce:6b:da:b0:05:a7:fb:74:78:ff:cc:fe:81:19:fd:5e:
         6c:6a:4b:0a:a4:01:23:d4:16:04:ab:2e:2d:af:a2:b6:5d:91:
         bf:3a:9d:8e:32:95:dd:f2:78:57:bd:a4:4d:8d:e0:f7:a5:6a:
         31:db:24:92:af:f4:00:95:7c:7c:de:87:25:45:03:4c:d3:6d:
         3c:1c:fc:de:ae:1c:42:18:76:de:28:c7:a7:21:f9:41:7c:30:
         17:93:93:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:53:08 2025 by rpki-client