Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac01f90f-1d3b-3989-a06b-4c2276892263.roa
File:                     ac01f90f-1d3b-3989-a06b-4c2276892263.roa (raw, json)
Hash identifier:          PgU8PDKFdD7DjKcMWxzkTXA4grdl1nWNiuYcP7ZTT8Y=
Subject key identifier:   67:EC:11:B8:C2:24:8A:66:7D:FA:A3:D2:B4:26:20:EB:57:EF:67:8F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ACB40F5D3981E9421DB5C79E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac01f90f-1d3b-3989-a06b-4c2276892263.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     701
IP address blocks:        96.240.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:f5:d3:98:1e:94:21:db:5c:79:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=e9fae79e-7b1d-4552-b27f-01193d2dcdac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:96:f3:8b:35:9d:1a:a7:0c:98:37:4a:b4:aa:
                    50:b8:20:b9:c1:e7:42:ad:77:7d:53:31:c0:07:b9:
                    0e:91:12:a6:e6:e0:a3:b4:40:2f:cb:22:f6:85:3c:
                    1b:2f:95:b4:40:03:cf:bd:f3:0b:52:ac:61:ab:2d:
                    bf:03:d2:9c:95:30:56:fb:22:d6:56:27:cb:80:f0:
                    ab:a5:40:17:93:14:6f:76:ad:f4:e3:6e:e5:46:0c:
                    e9:0a:53:b3:3a:70:06:87:dc:a3:22:6f:ec:3c:c4:
                    30:55:ec:60:08:e7:e9:a2:b5:2f:ae:0b:11:2b:01:
                    dd:f0:95:89:e7:fd:a5:7a:8e:db:ad:d5:82:66:16:
                    b5:fc:61:be:a8:da:53:04:cf:34:07:d5:ac:db:07:
                    7d:24:8d:82:37:52:08:49:e6:c9:14:76:8b:49:15:
                    4a:65:ea:9c:e3:a7:ac:ef:3d:48:39:24:97:1a:84:
                    7e:09:d8:6a:eb:9e:19:70:25:47:17:73:7e:c3:d6:
                    16:74:f5:59:74:69:39:56:9b:1d:8a:aa:17:bb:26:
                    fb:9b:f5:45:51:a3:8e:a8:fe:7c:fb:4b:25:47:6b:
                    d9:ee:c3:b2:50:37:42:5f:59:84:03:ff:b6:ea:ae:
                    25:9b:c8:12:5c:0c:db:c4:1a:03:d4:e3:b2:1d:bc:
                    22:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EC:11:B8:C2:24:8A:66:7D:FA:A3:D2:B4:26:20:EB:57:EF:67:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac01f90f-1d3b-3989-a06b-4c2276892263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.240.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ab:9b:9e:e6:d9:b4:7f:c2:a5:c1:c9:47:9a:66:cd:72:68:
         f5:36:b5:1c:d8:32:ba:99:f1:40:8c:19:ed:46:96:72:c0:99:
         56:25:28:b9:bb:94:92:78:d8:c9:ec:76:63:8b:cc:d2:88:57:
         8b:52:75:c7:af:85:fa:27:7b:43:35:d3:3c:d5:1c:66:10:34:
         5b:78:01:11:72:85:a5:ae:87:ef:36:0f:e3:41:fa:d8:e4:85:
         f7:65:18:04:dc:dd:67:52:b6:af:f0:da:8e:a7:72:09:e1:36:
         ce:68:cd:93:9d:64:28:5b:c5:03:ea:27:6f:cb:19:46:cf:44:
         d2:05:c6:3d:4c:e2:cf:d5:4e:4a:4c:5f:42:08:a6:fb:6e:e2:
         85:7e:73:dc:a2:84:c4:9c:ad:e2:a4:85:d3:b1:c4:b7:77:29:
         08:df:90:e1:88:a4:27:50:e0:55:28:f0:99:bd:0f:6a:27:0f:
         6d:6d:c6:ce:42:29:5f:40:60:a5:f0:ca:30:a9:bb:76:70:2c:
         32:65:f1:37:94:3f:83:d4:5a:79:03:f8:77:ad:2a:b1:31:5e:
         e6:30:0a:e9:33:c8:5a:2f:31:d6:7c:0e:f9:f0:0b:3c:42:d1:
         5e:e7:11:ce:6e:f0:b8:54:bd:6a:88:9c:99:b5:64:bc:31:e6:
         c6:5d:d8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:40:06 2025 by rpki-client