Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5ae9e84-8331-356b-b2a9-0099d0e68482.roa
File:                     d5ae9e84-8331-356b-b2a9-0099d0e68482.roa (raw, json)
Hash identifier:          +UDbbSb4rkgFe8MKYQZTtLXGW0OJDGgXc1CsCxn5rUc=
Subject key identifier:   BB:00:97:64:B5:D9:6B:1D:DE:B7:0B:F0:45:7F:18:39:6E:64:96:EB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A00DAE40EAF77287F66678430
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5ae9e84-8331-356b-b2a9-0099d0e68482.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     22394
IP address blocks:        168.201.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:e4:0e:af:77:28:7f:66:67:84:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=d7dcee75-017a-497d-ba1b-8e679c87135c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:86:30:b8:c2:0c:1b:1f:9a:7b:b4:ee:e1:90:
                    b7:b6:4a:b2:35:44:c4:23:f7:32:10:d2:71:6f:01:
                    96:eb:ab:55:00:fd:4c:55:82:e4:94:76:f2:1d:38:
                    3e:84:73:a2:51:13:19:7a:f2:02:35:39:ba:89:e2:
                    2a:1a:19:75:ba:19:70:df:e9:42:41:7b:89:2f:41:
                    74:db:10:e4:f9:91:93:09:20:75:21:5e:ed:94:8b:
                    1d:70:97:da:04:44:fe:d1:2f:7a:32:af:95:0f:7c:
                    b2:55:24:f5:60:da:32:d6:46:7f:56:ee:97:ed:ae:
                    3c:cd:f7:35:b8:3b:63:6f:3e:d7:5b:71:b3:e8:b4:
                    9b:07:77:51:29:cd:ea:01:cd:e6:aa:87:19:6f:47:
                    21:da:dd:b3:2e:d1:e7:e9:86:3b:3c:26:2a:cc:1b:
                    f7:9e:10:cf:f1:f2:2f:30:d5:e6:8e:1f:58:66:29:
                    1b:2f:2a:37:eb:ec:22:d1:fe:77:7d:86:fd:cf:f7:
                    76:33:b9:dc:ec:3d:dd:2f:87:93:a6:1a:44:53:60:
                    2c:02:6c:a3:8f:e6:f7:98:05:30:ab:63:88:35:5c:
                    18:56:8d:a8:ed:69:e3:9d:fc:f3:b7:be:cc:cc:27:
                    48:07:7c:1e:ae:c0:59:d8:9c:f7:57:2d:6d:ac:cb:
                    98:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:00:97:64:B5:D9:6B:1D:DE:B7:0B:F0:45:7F:18:39:6E:64:96:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5ae9e84-8331-356b-b2a9-0099d0e68482.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.201.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:72:44:71:d9:c2:55:55:1f:06:0e:9f:0c:e0:53:ab:27:ea:
         df:03:a8:3d:11:6e:f3:bc:43:ef:f9:b9:29:fa:79:03:0d:6e:
         71:a1:c1:80:8c:fa:20:b5:ef:cf:11:3b:18:d5:ca:fb:4c:4e:
         4a:c3:65:e6:25:67:90:fa:37:01:9b:2b:aa:e5:8b:78:2f:8a:
         d4:f4:e0:34:ab:96:b7:2e:f1:02:53:98:ef:08:9f:45:8b:ae:
         b6:9b:9f:a4:63:ea:d3:fd:13:3a:0b:88:56:ba:e7:19:09:b4:
         c2:e7:93:93:ca:68:42:4e:ff:9b:12:af:c2:1e:1a:9a:74:31:
         f5:51:5b:59:aa:98:d2:e1:fd:95:c9:11:99:66:5b:52:1e:42:
         3e:85:de:43:b4:88:ad:ab:31:c3:80:41:54:4d:21:5a:a6:99:
         96:de:1e:7d:d8:69:d3:d1:d5:90:df:2d:98:de:39:91:ce:41:
         d6:c7:2b:cb:8f:c4:d9:8a:1f:87:05:df:f3:d8:67:f9:b8:bc:
         97:b4:9f:d2:b0:40:35:ac:d0:2a:2b:a7:47:71:e1:37:06:24:
         24:84:81:6a:4c:5c:0c:46:57:a3:ec:f3:94:59:8b:cf:22:97:
         d7:f2:13:a3:cd:48:13:ba:25:39:ac:5a:c0:cf:f9:95:68:42:
         97:4e:b0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:07:26 2025 by rpki-client