Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d881d009-cbf8-3a7d-aacb-3abbc815e32e.roa
File:                     d881d009-cbf8-3a7d-aacb-3abbc815e32e.roa (raw, json)
Hash identifier:          ny1NsFPwjFqxR8nyM143Os4fgS+RA1OaDcXd1a9j4q4=
Subject key identifier:   C4:64:86:6E:2F:6A:22:5C:26:4A:1D:72:14:3B:0C:02:46:90:B7:82
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849EA853966D1ECA91A355B1E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d881d009-cbf8-3a7d-aacb-3abbc815e32e.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     701
IP address blocks:        71.255.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:39:66:d1:ec:a9:1a:35:5b:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=339d0eda-091e-4563-9de1-9f84d8af65c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:30:eb:12:b0:76:82:0b:17:8e:a9:8e:b1:50:
                    fd:ad:7e:49:ea:a9:84:36:14:bf:c9:01:e0:28:fb:
                    2f:aa:1e:5f:71:7c:10:a6:10:9c:cb:27:a4:7c:3c:
                    be:a1:0f:92:b5:b9:df:d1:3c:a1:33:57:dd:e9:d1:
                    a0:42:8c:f8:71:fc:fd:a4:ef:1c:55:fc:1a:ec:68:
                    57:bc:de:e7:4e:89:8d:e4:e3:eb:66:74:36:41:fc:
                    b9:02:0d:c3:04:18:c9:c0:e5:a9:70:55:ea:19:06:
                    13:c3:1f:6e:67:f2:b1:6d:80:94:c0:ed:73:db:8d:
                    f8:83:84:32:5d:ad:70:18:ae:70:d9:c1:7c:34:11:
                    bf:c7:e0:26:9a:c7:4c:00:b1:dc:c5:6a:b3:41:54:
                    aa:1a:a2:0f:4f:81:d4:b6:56:42:4c:8d:a9:a6:ce:
                    21:57:56:4e:83:87:d5:76:64:db:ce:03:f9:9e:a1:
                    c9:0c:40:9e:32:31:25:c3:35:b7:01:b1:e1:ec:63:
                    fb:02:03:03:7d:27:74:21:c2:63:ed:85:c8:33:91:
                    3b:1e:b2:02:9d:99:10:1b:e9:87:bd:5f:a7:03:c5:
                    3f:b8:a7:6f:1e:89:79:25:4c:9a:8d:6c:79:a8:a7:
                    43:35:62:56:6a:af:65:62:47:61:15:5d:48:a0:34:
                    82:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:64:86:6E:2F:6A:22:5C:26:4A:1D:72:14:3B:0C:02:46:90:B7:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d881d009-cbf8-3a7d-aacb-3abbc815e32e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.255.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:48:1b:af:ba:55:15:e2:cd:d8:fc:c3:29:61:48:0f:cc:4c:
         42:ff:b4:7d:cb:7e:29:1d:ce:b5:ff:f9:ae:62:b8:9b:c2:5c:
         f5:7e:5f:30:5d:5b:d1:95:fd:fa:e0:c7:3a:c3:23:77:94:06:
         05:8b:24:85:7d:ff:01:2f:42:29:c6:7d:4d:90:bf:c8:93:3b:
         43:5d:9f:45:a2:98:f0:cf:e1:c3:90:37:3e:19:16:d9:07:2d:
         ec:2f:f4:e8:91:0d:95:4e:44:88:94:70:44:68:64:a1:7a:e2:
         cf:c4:a7:bc:7b:52:d9:92:fd:7a:e5:5c:08:88:42:38:cc:66:
         bf:e8:13:b0:12:5c:50:cb:69:3d:71:07:c8:e6:b2:16:6c:48:
         85:b9:4a:1f:0c:17:81:81:e8:a8:65:35:68:44:52:a9:69:77:
         a0:63:cb:3a:d6:ac:01:83:29:2c:42:f2:66:c9:68:66:98:ba:
         05:48:74:e0:dc:bc:21:90:cc:36:dc:9f:80:34:4f:00:54:af:
         f3:1d:0d:9d:8b:c3:c8:e5:cf:da:6c:a5:e8:5e:74:d5:21:c2:
         a8:28:bc:2b:fe:ab:c7:df:7f:51:d1:3f:ad:74:23:7b:a7:b0:
         4e:c2:a2:a5:d7:16:af:e6:f6:63:0c:b4:fc:c8:2d:38:9e:ef:
         f4:e3:02:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:06:59 2025 by rpki-client