Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/892b925f-b0b6-3929-968e-e26b0385d673.roa
File:                     892b925f-b0b6-3929-968e-e26b0385d673.roa (raw, json)
Hash identifier:          g8UEK3hbqeg03uaKbKrmmp9Jk2tED2GTM6w3Z14Qeoo=
Subject key identifier:   56:E4:A8:64:DC:8D:61:0A:F3:88:AD:2C:61:88:B4:9E:3D:D8:D7:AA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849EA852AE22B523164C65D2100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/892b925f-b0b6-3929-968e-e26b0385d673.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     701
IP address blocks:        96.232.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:2a:e2:2b:52:31:64:c6:5d:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=6af8928b-e444-4ef9-9101-3f6ccc58ffec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:26:44:77:d6:9e:dc:d1:84:a8:cf:38:ac:48:
                    ed:40:69:1b:38:c0:88:9f:ee:95:2f:f6:e2:03:68:
                    35:27:a4:40:72:b3:cc:ff:ae:1e:c1:e2:18:fb:89:
                    3b:de:a0:f7:3f:fb:d5:cb:9e:cb:78:fe:7a:6e:c3:
                    c7:91:ae:15:48:31:a1:76:02:74:34:70:75:50:0f:
                    3f:2b:90:c1:a5:fa:2e:df:b5:97:d8:a3:37:87:0a:
                    7c:bb:3d:85:b6:d0:c7:f7:04:2a:8c:c6:36:a3:09:
                    6a:0d:6f:6c:ae:0f:0d:c7:08:db:1f:50:bd:13:94:
                    2a:18:2c:91:cf:ba:8c:e9:d1:66:f4:bc:5c:18:6d:
                    04:eb:2b:16:8b:01:05:4a:28:95:06:20:80:89:ce:
                    b0:28:42:b8:39:6b:90:63:7b:c9:1b:d1:7a:df:75:
                    76:d3:83:c7:41:5c:08:7d:29:bc:69:67:bb:a4:4e:
                    e3:86:6a:e6:6a:44:55:9b:69:7e:6e:3c:44:c7:39:
                    70:eb:6f:8e:1c:c4:09:ef:3f:23:30:c7:18:d1:19:
                    74:5c:13:ec:1b:fa:bb:73:e4:e6:aa:2a:37:01:14:
                    c8:85:df:55:83:93:2c:e1:12:e9:ff:ba:56:70:4a:
                    1a:14:74:1f:ab:96:97:3a:21:a9:51:d6:74:be:29:
                    7e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E4:A8:64:DC:8D:61:0A:F3:88:AD:2C:61:88:B4:9E:3D:D8:D7:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/892b925f-b0b6-3929-968e-e26b0385d673.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.232.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:d2:0a:e6:f3:e2:1f:59:af:b2:27:a6:97:55:42:93:84:43:
         eb:a1:13:2c:5f:f2:d1:37:9c:b3:65:8c:d3:39:78:14:25:20:
         76:7b:f0:86:46:b6:4b:87:df:51:bc:9d:f8:a2:ac:d3:d0:40:
         7c:de:3a:9b:4b:db:94:5f:15:96:be:f2:30:e0:3d:72:b2:58:
         28:bc:2d:53:48:5a:71:40:f8:ce:52:41:4b:1b:62:c6:0b:35:
         50:ea:6a:5e:12:a2:90:7d:ed:87:cf:91:5c:14:7e:9a:bc:15:
         0f:40:b9:1b:a5:df:54:90:37:76:93:01:35:7b:75:cd:57:b2:
         67:b2:34:dd:ea:16:d3:06:66:19:97:a0:5d:8d:c7:73:bd:33:
         b2:90:e7:6d:d5:31:ad:12:7d:45:f2:1b:4d:03:2b:df:42:81:
         57:9a:70:1f:53:27:4c:f2:ea:2d:18:6c:ca:26:30:31:8f:c2:
         a2:e5:4a:68:ea:66:fa:72:ba:a6:be:60:07:f0:0d:3d:cc:44:
         75:5d:2d:80:97:30:13:e8:1a:db:c4:3f:13:9c:17:f2:e2:47:
         ec:7d:0a:cc:cc:b9:9f:2d:06:f2:d1:f0:d0:52:14:be:53:7d:
         6e:f7:bb:93:21:aa:5d:3f:66:16:a3:e2:4f:e7:07:2c:1c:5e:
         4b:e1:50:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:31:22 2025 by rpki-client