Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c51c1d9c-aa32-30d0-ba52-a611a49ba600.roa
File:                     c51c1d9c-aa32-30d0-ba52-a611a49ba600.roa (raw, json)
Hash identifier:          JqSUbk9VGkei0J04/xRIbkacSuZ9yNNvzp66ybhqATc=
Subject key identifier:   28:94:A4:1A:1D:D3:06:A3:A4:C2:F9:B5:6C:10:34:25:EF:A5:1C:E7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849E22540F67F2C6B244F225BA0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c51c1d9c-aa32-30d0-ba52-a611a49ba600.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     701
IP address blocks:        209.118.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:40:f6:7f:2c:6b:24:4f:22:5b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=0981c2b3-338f-4782-bfb8-415b279c27dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:af:ad:ef:27:d8:60:d7:49:6b:e8:25:3f:74:
                    91:e1:a8:48:00:b0:e9:fa:82:7d:86:40:46:98:d9:
                    6b:b2:16:6a:e6:9d:5c:6e:a5:ca:9f:9b:59:73:3e:
                    21:12:63:d3:f3:95:f0:13:7c:8c:2f:1e:4a:49:0f:
                    9c:8f:6b:92:9b:8f:2b:d0:96:07:72:22:f5:d8:27:
                    a6:89:de:24:ed:8b:f2:89:b5:52:d1:7c:56:ff:ce:
                    10:58:83:0e:fe:47:24:66:ce:b3:30:4d:77:f5:64:
                    56:98:ef:ab:c4:47:3e:e0:7f:7b:2d:e1:4c:b1:f1:
                    96:46:1a:48:a6:02:cc:bf:44:5b:90:d6:e6:c6:36:
                    7b:08:f5:fd:b3:b7:1e:a2:8f:6c:9a:e6:af:0b:c7:
                    30:22:58:5e:d2:74:bd:31:5e:e0:b8:41:c7:6a:db:
                    d5:97:1e:2c:0d:1a:ec:db:bf:5d:4c:68:e1:01:af:
                    04:bd:19:e3:2c:61:b0:23:d5:af:0a:2b:04:42:39:
                    fc:a2:f4:5e:aa:72:cd:55:13:f8:2a:4b:be:66:94:
                    7e:21:33:c7:2d:79:43:6f:d9:63:d7:06:5b:00:39:
                    64:55:2e:37:d5:51:75:7f:08:48:7a:f8:59:7a:4f:
                    58:2b:f6:3d:7b:9d:bc:7c:e1:2c:c4:a5:0f:ed:3e:
                    95:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:94:A4:1A:1D:D3:06:A3:A4:C2:F9:B5:6C:10:34:25:EF:A5:1C:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c51c1d9c-aa32-30d0-ba52-a611a49ba600.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.118.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:77:02:23:62:fe:18:9f:a5:86:98:83:01:fc:b2:7d:37:95:
         72:2c:4b:36:63:bb:9c:5a:82:6d:36:a1:91:10:a1:d0:80:3a:
         ba:2d:10:73:d7:9c:71:22:0b:f8:93:9d:42:78:b3:46:18:9c:
         54:da:0d:a7:39:39:ee:24:ae:fd:7d:77:c7:39:44:ba:89:de:
         54:51:a6:b6:1b:12:54:21:28:d8:d9:f0:c8:8b:a3:91:02:fe:
         2f:e0:b3:32:30:99:79:f7:e3:0f:b0:d3:fe:50:87:36:9f:b7:
         b7:32:f4:b4:cc:94:fb:0b:1b:4c:ce:45:6d:50:cc:9f:9e:82:
         f8:ff:43:48:4d:58:7a:78:75:a8:44:72:ed:38:b3:7b:19:be:
         2b:23:8b:e1:8a:47:11:84:f6:45:a5:85:43:da:a0:a8:20:f7:
         bc:8f:62:bf:ed:7d:80:14:6c:14:4b:17:7d:f7:08:31:7d:8f:
         77:07:69:a2:d3:01:69:07:9b:d5:3b:b4:8f:11:ef:01:2c:63:
         dc:74:84:52:ae:db:45:42:0c:62:67:47:d2:b8:00:2a:e3:cd:
         ac:e5:dc:8b:31:c4:41:a3:70:aa:ec:2b:ea:32:ac:c3:b3:1e:
         11:93:98:ba:3f:2c:56:c4:ea:51:94:9c:e7:f9:0d:fc:49:f9:
         d6:22:56:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:27:57 2025 by rpki-client