Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b7d3a498-8245-32c5-bd52-02058f22413f.roa
File:                     b7d3a498-8245-32c5-bd52-02058f22413f.roa (raw, json)
Hash identifier:          rUuE4H35gj0/bBm5NWY3V7SLDywfL8V1xtINVF0XdKU=
Subject key identifier:   4B:15:DA:AC:4F:00:09:84:9D:06:64:57:1B:69:5E:7F:73:F9:F2:81
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849EA852925215539B530E86980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b7d3a498-8245-32c5-bd52-02058f22413f.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     701
IP address blocks:        96.236.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:29:25:21:55:39:b5:30:e8:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=f29d536e-6a2a-43e5-b203-ba7e4b484e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:80:ee:f2:71:43:d7:cc:bc:fd:e7:72:86:06:
                    57:7e:f9:4d:56:2b:56:48:c2:91:cf:75:ef:47:69:
                    c4:85:b3:ec:3b:fa:39:bb:f4:30:ad:5d:f1:93:2a:
                    c1:ca:d0:92:42:1d:e9:b4:86:a3:71:61:33:90:59:
                    03:84:20:2c:44:a1:20:18:3e:62:1f:7a:5b:02:a9:
                    76:d6:0e:49:f7:15:ff:e3:81:89:ea:c6:0e:97:69:
                    68:1a:49:84:3b:37:20:79:0c:ec:bf:dd:24:7c:03:
                    33:40:08:d2:0a:ed:4b:57:e3:ee:fb:47:45:db:38:
                    ae:0d:7c:94:aa:4f:4c:d8:1c:a6:79:68:ab:8c:47:
                    52:36:98:b4:f0:cd:a0:38:c9:e6:e8:d7:d8:5a:bf:
                    0a:49:9e:f8:f1:51:7b:69:73:28:32:2e:ee:26:1a:
                    dc:e3:ff:b3:01:98:a3:ef:c5:f5:20:46:0c:44:fe:
                    80:44:32:23:12:d9:bd:df:3e:83:c6:36:22:5d:0d:
                    5b:e6:9c:61:88:3d:eb:cf:0e:25:04:2f:5a:17:b9:
                    18:33:95:98:8e:10:55:37:bf:dc:82:9d:94:a5:f2:
                    3f:0f:19:f9:ee:8a:1c:91:b6:59:54:f2:8e:3a:1e:
                    28:39:25:5c:ed:f5:15:b6:33:18:1a:2e:c7:54:df:
                    06:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:15:DA:AC:4F:00:09:84:9D:06:64:57:1B:69:5E:7F:73:F9:F2:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b7d3a498-8245-32c5-bd52-02058f22413f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.236.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:52:bb:fe:b2:70:d3:68:f6:20:92:4c:6d:1f:fc:61:59:7d:
         8b:60:4e:a9:39:aa:be:0e:99:21:3d:79:d3:b4:84:8c:f5:26:
         8f:cb:4f:89:91:d2:73:99:a6:8c:ce:86:cc:03:65:c7:44:a6:
         4f:a2:52:49:e2:c8:f7:f8:9d:11:7c:ee:ae:60:0a:32:df:b6:
         07:d7:1b:a4:ea:b7:b5:58:2a:4b:e4:4f:39:af:36:b0:17:be:
         c5:2e:36:51:54:1b:b2:55:df:e4:f6:32:d7:76:0b:1c:2d:85:
         eb:da:a2:e7:2c:93:53:63:d2:e3:1e:fe:bc:73:2c:38:5c:11:
         ad:98:ea:7d:aa:ef:b4:8f:8d:46:6a:b0:d8:64:48:aa:70:d9:
         1d:38:65:48:7a:76:b0:ac:42:ad:46:55:3d:81:51:ad:8b:f2:
         e3:63:31:c6:1b:57:d0:b1:ee:5d:92:b9:7f:47:47:1e:a3:f2:
         cd:55:9c:60:ae:30:84:d8:06:69:ae:76:e8:be:96:a4:0b:a0:
         5e:2d:86:d4:e5:e1:ac:dd:36:44:82:6c:a1:0f:ee:23:08:ca:
         09:da:dc:6a:67:b8:dd:16:fe:c2:b9:d7:40:26:68:92:4f:b8:
         74:18:ae:de:af:e0:3b:b9:d5:06:a2:dc:92:e5:1d:15:4e:08:
         49:46:1e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:37:12 2025 by rpki-client