Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0e478cd-ce62-34f8-80a4-cfa0575e8023.roa
File:                     b0e478cd-ce62-34f8-80a4-cfa0575e8023.roa (raw, json)
Hash identifier:          zTnIDE16QMASG0Vs0cpdbK4gNrw/qfUjwC53FpNCFm8=
Subject key identifier:   C8:E7:C6:70:F1:B7:58:B1:27:FD:6C:63:8C:C2:1F:3A:0C:29:8A:9F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F1800D0B74861015364CFF00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0e478cd-ce62-34f8-80a4-cfa0575e8023.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     701
IP address blocks:        173.62.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:0d:0b:74:86:10:15:36:4c:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=0a5a2fea-fbe6-4040-83e4-e4036b5e4ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a5:97:3a:d4:2a:8b:1d:f2:89:3e:c4:10:b2:
                    25:21:99:2d:cf:b4:b0:55:22:b8:1e:e4:0b:c2:a0:
                    fb:d4:d1:21:5e:f8:38:42:91:dc:fe:22:79:bb:ff:
                    3f:8f:b3:50:76:e3:da:b7:90:3b:35:24:46:1f:bd:
                    db:c0:5b:3c:a5:3f:f7:d3:62:7f:5e:72:21:fe:ea:
                    e5:62:9b:74:dd:60:5d:8a:23:e9:f4:33:20:c1:46:
                    c1:f7:bb:0e:f2:ca:e2:1a:0a:aa:34:8f:8a:a6:79:
                    1b:58:34:dd:5a:b2:f2:6f:84:88:fc:75:20:88:29:
                    fc:82:c2:32:50:bc:12:26:36:c7:88:b3:85:8a:c3:
                    1d:20:80:90:f1:c2:69:cb:52:4b:f9:d8:4e:b5:da:
                    73:eb:e8:56:08:94:21:77:1f:4a:e1:78:8e:96:f4:
                    de:d0:03:90:95:6c:75:a6:e3:60:78:9e:6a:47:c1:
                    a9:a3:8b:a8:74:2a:2f:94:d3:8f:da:92:90:2b:51:
                    91:33:c9:ce:e4:6c:87:7a:5b:3f:d6:b3:0e:9c:12:
                    c4:64:40:48:8d:fe:c9:67:da:ed:6f:0e:86:e4:9a:
                    89:98:5c:f3:9a:b8:48:e4:e2:a4:ea:72:3d:29:a5:
                    3f:8a:e9:af:bc:40:f6:1f:a2:76:fa:67:e0:9f:06:
                    52:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E7:C6:70:F1:B7:58:B1:27:FD:6C:63:8C:C2:1F:3A:0C:29:8A:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0e478cd-ce62-34f8-80a4-cfa0575e8023.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.62.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:6b:ff:e5:b4:f8:0f:69:18:f8:1e:b4:e1:fb:7e:80:06:a6:
         19:f2:c9:79:76:d7:91:f7:6d:27:5b:42:4d:4c:76:ca:4c:f7:
         0b:db:22:62:17:61:ac:f9:62:c5:76:04:ef:9f:ad:51:47:3d:
         3c:8d:8e:54:0f:96:a8:52:6e:d8:d3:2e:ce:54:fd:06:7d:ee:
         d8:fe:22:88:2f:b1:2f:00:ee:33:97:45:aa:a5:b7:4f:d7:ac:
         dd:e2:69:83:e8:17:42:74:b3:9b:15:89:79:91:e8:4a:69:d6:
         31:da:af:ea:4e:ea:a4:04:09:1f:b6:cc:14:de:d7:b9:4c:9b:
         72:eb:f6:1a:f0:3b:64:e8:b4:a0:8e:e0:4a:6e:76:39:65:39:
         41:b2:1c:ce:49:8c:3e:60:6b:d8:8f:ed:be:4c:d7:66:95:ff:
         95:b6:60:21:69:1e:72:07:a6:2d:d5:f0:0d:d1:9f:ce:b9:2c:
         2f:ac:22:4c:64:48:86:87:f3:ec:d8:ce:9d:06:bb:de:0a:d2:
         53:0a:38:5e:50:51:b8:b0:dc:d7:8d:7e:09:8b:bc:0f:58:4a:
         19:fa:f9:cf:b6:bd:0e:67:e5:f9:8a:48:0c:46:9a:6d:79:1c:
         b4:1c:6c:ee:a3:3e:9c:44:8b:7c:a5:8e:ae:76:e4:e9:7f:21:
         01:02:6f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:59:01 2025 by rpki-client