Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/968b086e-6286-3da3-9160-aabed5113be2.roa
File:                     968b086e-6286-3da3-9160-aabed5113be2.roa (raw, json)
Hash identifier:          eBdHatoNLMG30U/4lrN2CEw9o6GbkEo7Az9oEgQxAzs=
Subject key identifier:   A1:05:FD:34:F0:0C:24:E0:3D:A4:4A:62:29:4E:35:C6:87:E7:FC:EE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F17FDBBCA395420F4367F500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/968b086e-6286-3da3-9160-aabed5113be2.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     701
IP address blocks:        71.179.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:db:bc:a3:95:42:0f:43:67:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=76b933d3-3c80-4141-b990-0aa1c0443c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bb:70:e8:f9:85:2e:b5:a4:c2:c0:ea:74:e2:
                    f6:21:9b:6d:42:c2:31:1b:de:a3:69:6d:b4:fa:7c:
                    ad:1b:8c:23:3c:b7:3c:72:a0:b8:21:51:53:40:d7:
                    47:f0:62:3a:fc:6e:ec:59:fb:20:cd:95:e9:83:d6:
                    27:46:65:ab:2f:f7:2a:41:e3:0e:58:28:d1:b2:ea:
                    78:7e:38:81:d8:62:69:56:fe:20:95:aa:44:e2:e7:
                    b7:f8:10:57:99:c7:6a:39:0f:a6:6a:7e:a7:4c:ef:
                    43:1c:70:c5:62:4c:a3:df:44:b5:a8:cb:e2:9e:31:
                    88:6a:5e:54:3a:96:22:9a:e0:83:27:a9:b7:84:7c:
                    68:4d:87:ed:72:32:93:59:27:2d:f6:f0:b2:f8:52:
                    58:9c:cc:be:95:da:6d:3c:cb:ae:13:db:b3:c9:2d:
                    b8:29:5b:b3:7e:ad:66:10:5c:6b:87:41:5b:75:1a:
                    dd:22:e6:41:0e:4e:8e:e9:d2:d7:37:d2:ad:aa:a9:
                    b6:87:2c:73:2e:04:96:57:37:77:d7:84:1f:72:2b:
                    c4:c8:1c:67:c2:bc:d0:01:f6:71:ae:8e:34:73:26:
                    2d:61:3a:df:0b:66:d3:2e:26:5a:55:66:26:42:9a:
                    58:1c:2e:b3:90:14:90:50:2f:17:88:c1:3b:10:94:
                    1f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:05:FD:34:F0:0C:24:E0:3D:A4:4A:62:29:4E:35:C6:87:E7:FC:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/968b086e-6286-3da3-9160-aabed5113be2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.179.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:84:3a:b9:69:cb:dc:78:32:bc:26:22:ab:0e:02:84:9c:a6:
         de:45:ea:07:17:89:b2:ca:dc:cd:a0:ba:8e:41:33:1c:96:71:
         78:a4:cc:17:c3:7b:10:67:97:67:5e:79:a7:51:83:f7:af:6f:
         b4:42:00:22:59:9c:c5:51:c2:41:b7:3b:fb:8d:d0:4c:b0:46:
         1f:72:7c:c0:da:77:dd:0c:f4:08:b2:ef:95:2d:41:f2:1e:8f:
         7d:da:7c:7c:08:62:e7:7d:61:22:68:7a:f1:b7:90:5f:b4:c4:
         ee:3d:8c:07:79:cb:71:9f:8e:92:c3:90:8b:d7:ee:f6:0d:1d:
         2f:0d:b1:96:11:2a:5b:e6:1e:97:df:7c:c7:36:f7:21:c8:71:
         57:ed:76:01:ea:4d:d1:f5:5b:e5:ab:28:9c:00:d7:d0:21:49:
         54:88:7e:b8:12:ef:be:02:72:ff:53:9a:42:cb:86:e6:58:93:
         e7:f7:80:7b:19:fa:9b:fb:73:3e:86:b1:15:a9:f9:98:93:32:
         5a:e1:92:c5:51:f2:9e:e8:b7:82:d6:70:00:e0:72:be:53:fd:
         bb:0c:3c:96:14:62:4a:99:6d:bf:f3:1e:0e:9c:8a:dc:33:e5:
         b8:e3:e5:e1:99:d6:28:8f:1b:54:19:11:7e:4d:3e:ae:5b:6d:
         2c:d2:b2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:59:32 2025 by rpki-client