Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e15f9103-0275-3c4b-9703-d1e0a1bcb3e1.roa
File:                     e15f9103-0275-3c4b-9703-d1e0a1bcb3e1.roa (raw, json)
Hash identifier:          53KtzBqG6iN4KQu1jWTnrxs6J0vqo66jcCZxUlcCTkI=
Subject key identifier:   77:FB:D1:EE:5C:C8:5E:ED:F4:11:E5:86:7C:7F:66:16:0E:34:7A:3C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F17FDD4D393D2ABF8BB0CA40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e15f9103-0275-3c4b-9703-d1e0a1bcb3e1.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     701
IP address blocks:        173.50.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:dd:4d:39:3d:2a:bf:8b:b0:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=09c328ac-58a1-445e-84e7-48b1d0b134fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:28:71:dc:ef:11:6f:a7:57:d5:8b:3e:dc:36:
                    1c:eb:5a:1e:b5:fa:33:c3:b4:6e:09:c9:60:f8:5e:
                    e2:68:32:c7:46:85:78:99:52:be:ec:1c:a6:f0:65:
                    68:30:0a:44:79:56:e5:4b:32:3f:18:fc:a8:72:75:
                    02:06:14:5b:99:1e:9b:ba:ec:42:e1:b5:3e:32:d4:
                    91:2b:79:09:ba:28:ca:0f:b0:8a:c8:5e:6f:9a:05:
                    24:eb:08:d4:cd:60:51:05:9b:78:79:1a:e9:2d:5b:
                    44:e8:86:5b:98:f7:4a:ca:68:71:05:3f:95:1a:52:
                    a4:27:82:7c:af:17:93:8c:69:c5:b3:cd:1e:d8:34:
                    6d:f3:6e:c5:c2:33:0d:7a:63:3e:af:93:02:5e:fb:
                    f4:60:e9:3d:1e:a0:5a:9a:83:55:4f:a2:57:e6:a5:
                    2d:15:0b:30:4a:e9:a3:ed:a3:d9:76:b3:d4:7f:c3:
                    8b:a4:60:56:e4:65:4a:cb:6c:24:c8:c6:c9:cb:b8:
                    a0:ec:79:5d:c1:de:5d:52:5b:87:70:41:03:5a:32:
                    e8:ab:6b:7a:f3:0b:73:12:4b:54:a6:0e:e9:00:6f:
                    b1:8b:5e:ea:6a:f7:cb:25:ed:67:41:45:fc:77:7e:
                    82:b0:ed:6e:b3:59:49:72:66:cc:0d:03:bf:bf:3b:
                    7b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FB:D1:EE:5C:C8:5E:ED:F4:11:E5:86:7C:7F:66:16:0E:34:7A:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e15f9103-0275-3c4b-9703-d1e0a1bcb3e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.50.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:50:ba:97:2a:b3:7a:01:47:98:73:30:28:cc:84:ac:8d:43:
         bf:93:a2:39:ed:21:aa:b1:7c:3b:db:e5:2b:5a:05:50:11:35:
         79:ab:f7:c5:e6:fa:e7:07:b0:8f:3c:dd:1f:e9:69:d1:ed:9a:
         20:9b:77:7e:b1:0c:64:5f:22:68:ef:31:7d:16:b3:1e:5c:2f:
         fb:22:dc:76:c0:3f:91:52:2c:02:49:e6:4f:f8:58:aa:0a:9e:
         e4:2a:71:09:68:25:53:16:09:84:4c:90:f2:c1:46:ec:88:cc:
         3a:5e:7f:95:78:c7:3d:7e:72:23:5d:d4:b2:4e:51:1f:82:11:
         53:21:e7:cc:34:8b:86:8a:2d:62:d8:3c:1a:44:3a:8a:60:23:
         12:75:f2:dd:76:3e:d6:0e:56:e7:3a:a0:5a:2b:49:cc:e4:d9:
         92:21:b4:90:e4:eb:73:4f:50:b8:ff:7b:c2:14:4b:e0:63:14:
         5a:cb:76:97:c9:cc:cf:30:a5:27:04:0c:9f:cb:50:0b:76:39:
         60:91:69:98:e2:20:43:f1:ad:1b:c2:f2:b6:af:29:a0:e0:b3:
         63:1f:03:c7:e3:7c:df:31:3c:e5:82:41:7f:0d:0f:93:21:20:
         4d:d2:4d:12:76:29:9b:02:84:8e:e6:4d:f3:6f:e0:53:ea:c1:
         75:ae:55:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:24:48 2025 by rpki-client