Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b2c2102-aa5f-33e1-a78c-de23750df6e5.roa
File:                     8b2c2102-aa5f-33e1-a78c-de23750df6e5.roa (raw, json)
Hash identifier:          twl2g48+iosz7CnfzzgCpoz6QhkUeVPgoovOV+6td/8=
Subject key identifier:   FA:74:2E:12:B8:04:BB:CE:9D:43:C2:D5:A5:7C:0C:A8:3E:BD:EC:A8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F180095D45EF52E2EE14A6C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b2c2102-aa5f-33e1-a78c-de23750df6e5.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     701
IP address blocks:        96.250.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:09:5d:45:ef:52:e2:ee:14:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=aca43e23-ac89-420d-87b2-f4f55ea31a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:89:db:27:9a:a8:75:0b:fa:67:a7:ab:5f:77:
                    bd:6f:f7:a1:de:5c:73:ba:dd:99:bb:b4:58:ed:e8:
                    d0:21:16:17:fa:1b:40:b2:94:4d:d0:76:6a:00:24:
                    bf:7b:4a:8c:5e:32:f7:f9:83:c9:8a:a2:99:de:7c:
                    67:93:12:26:2d:b3:e5:88:72:f0:3c:de:b5:2a:bc:
                    07:ec:de:84:22:3e:4d:d1:93:e7:dc:39:db:a0:6e:
                    4f:bb:33:4e:00:0e:cf:68:42:b7:d8:e4:e5:91:72:
                    3d:bf:69:01:7d:fe:28:fe:98:8e:0c:98:91:2b:44:
                    5e:9b:74:47:d3:fe:03:a4:b8:66:d5:b8:24:5a:83:
                    3b:94:60:39:84:5c:9f:7d:8b:97:0b:61:9e:51:c9:
                    73:c7:18:27:a9:79:ec:f4:12:90:44:08:9c:62:e3:
                    14:93:28:51:a7:79:cb:3d:86:73:d5:6b:85:1c:4e:
                    72:15:86:05:54:1c:15:25:38:5b:3f:c9:cb:48:7f:
                    d5:bf:d8:a2:30:9e:35:31:da:e8:53:3f:1f:de:2a:
                    74:23:74:70:de:d5:cc:78:e1:ab:89:76:fb:90:3f:
                    01:40:ed:e8:3a:3c:d2:a6:f6:b9:44:e8:f3:7b:b1:
                    cb:59:93:49:24:db:37:fc:17:b1:f4:0e:01:f2:eb:
                    3a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:74:2E:12:B8:04:BB:CE:9D:43:C2:D5:A5:7C:0C:A8:3E:BD:EC:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b2c2102-aa5f-33e1-a78c-de23750df6e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.250.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:ec:09:54:f6:ba:8a:6a:18:dd:06:e0:4f:5c:98:a0:3d:69:
         d8:87:d6:1d:b4:b3:81:42:a6:65:8e:ec:47:37:91:b2:48:2a:
         19:9c:e8:f6:29:58:f4:22:8f:b1:c7:d8:7a:85:30:99:41:36:
         fc:4a:b0:75:bd:07:da:71:67:80:db:b5:29:37:fa:45:0c:53:
         d2:27:c8:75:3d:cc:08:70:23:6b:96:52:9e:fe:3b:86:1d:6a:
         64:8a:b6:95:07:18:8c:a3:4a:66:5e:b9:63:2b:d2:95:d3:1e:
         f4:12:9f:de:d9:30:d3:2c:05:e0:f4:18:b4:9c:17:d7:a3:a3:
         01:9b:54:8b:fa:95:61:d9:42:ea:c9:9a:b0:89:0d:a2:ed:a1:
         20:96:2d:fd:53:87:ff:cb:32:b7:68:7a:4a:8f:df:77:75:af:
         33:7b:8b:65:31:52:0e:5d:c0:25:81:88:dc:e0:5c:77:e5:eb:
         50:b9:d1:b3:ae:fe:1a:23:26:44:d9:26:5b:16:21:e8:8e:28:
         9e:6b:5a:43:b2:f6:26:6f:37:c1:87:27:a9:ba:d6:e5:86:9d:
         b2:c3:d8:50:b2:a9:11:b9:ed:d3:c7:51:ad:7f:0f:55:8a:8b:
         fb:45:97:f8:4f:49:36:17:69:40:44:e1:d5:dd:24:93:0c:1c:
         84:4b:a3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 19:22:09 2025 by rpki-client