Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9026ffe8-1857-331c-8bea-8bd8363ffd1a.roa
File:                     9026ffe8-1857-331c-8bea-8bd8363ffd1a.roa (raw, json)
Hash identifier:          99r+HrRl5mhD4JBYS/9qdSd7/T+hKhFS4UQ+TPkdCqQ=
Subject key identifier:   6D:BF:1D:19:27:10:72:0E:69:50:8D:E7:72:50:AA:CB:86:DF:50:2A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F17FDECBF9BD32DC76441C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9026ffe8-1857-331c-8bea-8bd8363ffd1a.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     701
IP address blocks:        108.4.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:de:cb:f9:bd:32:dc:76:44:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=7bc686c5-58dc-4739-b440-2024ee5e48d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:79:ea:d3:f6:03:02:f8:95:50:9a:fd:e2:59:
                    09:1b:d4:33:fc:1a:20:32:40:cd:fa:84:02:e4:61:
                    1b:6b:e4:0e:38:a2:e8:3e:9d:f3:8d:be:53:6e:0e:
                    1e:d7:9c:a9:b5:5b:d9:3e:19:20:cf:d2:02:85:58:
                    63:dd:85:ac:c2:9d:ed:aa:fb:18:d9:1a:dd:fd:e4:
                    f4:c9:57:f0:d1:5d:50:ee:74:82:a2:e7:5b:17:4d:
                    7f:20:70:34:28:ef:2d:96:0c:c7:56:53:9f:b8:a8:
                    fd:fb:38:34:15:9b:d1:28:02:de:b4:bb:91:7e:9e:
                    43:1c:6e:c3:ef:fb:0f:b3:e7:8f:a7:03:5e:f8:18:
                    05:f9:cb:92:95:1a:a7:a1:40:8a:79:e0:f4:e6:98:
                    95:f7:5c:89:c8:25:6c:76:e2:ff:ee:ac:c5:e0:ab:
                    66:de:29:20:b6:55:f8:a3:58:08:3d:1e:94:37:0f:
                    dc:83:57:07:6b:db:34:09:1a:cc:24:a0:41:e0:92:
                    cc:63:4d:30:b8:d8:08:b5:be:5f:6e:3e:7f:30:fa:
                    86:20:6b:5a:db:4b:39:8a:92:ee:35:ce:5e:ee:a0:
                    10:bc:80:f7:ba:be:b3:21:93:3b:01:85:81:e0:84:
                    86:cb:64:4b:e1:72:9e:43:be:23:bc:19:ad:2c:ad:
                    0a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BF:1D:19:27:10:72:0E:69:50:8D:E7:72:50:AA:CB:86:DF:50:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9026ffe8-1857-331c-8bea-8bd8363ffd1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.4.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:66:e6:67:3c:c9:56:0f:00:f4:c5:ca:a0:bf:d9:d4:d6:a3:
         50:14:0e:31:5d:0e:ab:33:0d:10:f0:3c:7f:b6:a9:fc:a8:d0:
         a8:b9:6e:95:9b:b8:de:e9:8a:b4:a1:09:70:e0:5c:c4:56:a2:
         af:e7:0f:10:b3:d4:0e:07:7e:95:90:0a:0a:0f:fd:73:bf:4f:
         5c:6a:9d:b3:62:4c:36:e7:28:d7:b8:40:55:12:12:4a:b1:80:
         36:ca:14:17:df:47:b3:ff:52:7b:97:d4:6f:b3:80:ef:54:1c:
         41:79:47:aa:13:a5:3c:82:90:ff:0a:38:ae:20:48:38:7a:6e:
         f5:ad:3b:50:ea:a7:f5:9f:9d:ed:f7:a9:f3:e1:aa:b0:11:e5:
         e1:bf:b6:aa:f0:fd:f9:0a:25:ac:9e:45:0e:ea:26:42:76:fc:
         0f:d0:21:de:ba:c3:ab:31:34:da:e5:47:fd:e8:06:42:91:11:
         96:10:27:2d:eb:f7:8d:c7:4b:e6:bd:25:9a:5a:a9:bf:08:d3:
         7a:75:fd:c5:88:7c:06:15:e6:99:bb:c1:ee:fa:79:07:28:a2:
         15:04:fa:27:65:ce:c5:d3:d9:23:41:52:48:3c:5a:4b:8f:cb:
         37:23:db:4b:10:d1:72:67:cc:42:af:f3:ef:2c:73:fd:37:fd:
         5e:41:39:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:42:05 2025 by rpki-client