Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e90ba205-d060-3fc8-b4ee-4272e7e9a0b3.roa
File:                     e90ba205-d060-3fc8-b4ee-4272e7e9a0b3.roa (raw, json)
Hash identifier:          iWlSaAXjYwZ3mh+6F4vVfB+v46V39JiNWvGKK4cl0ck=
Subject key identifier:   60:71:BF:09:CD:72:F1:22:56:4A:E0:78:CE:AD:F4:F3:DB:41:B5:FE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849EA8538C0F4B3706E449B0600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e90ba205-d060-3fc8-b4ee-4272e7e9a0b3.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     701
IP address blocks:        96.233.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:38:c0:f4:b3:70:6e:44:9b:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=7076c5cd-1d9e-453b-b630-34580da865c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ef:b7:24:28:98:b5:c0:81:ad:ca:c7:01:68:
                    8c:b7:fe:b2:e0:f8:f6:4f:f4:e1:07:89:38:37:8a:
                    1f:f1:0f:86:e6:a0:1f:ff:b1:31:bf:fe:e3:0a:c1:
                    3e:11:9e:80:a9:e0:a4:62:21:37:07:d6:23:94:3f:
                    56:11:1b:75:c8:ca:98:ee:cd:4f:5d:e2:f3:3b:d2:
                    c9:e3:78:5f:52:fa:70:74:65:dd:27:f7:8b:d8:06:
                    1b:8d:55:5a:ea:7d:bb:0d:35:f7:22:08:72:30:58:
                    10:6a:40:ba:39:4e:ea:f7:f2:27:75:c4:ed:27:9c:
                    5b:94:d6:80:b9:aa:8d:eb:97:00:1c:0a:26:8d:5b:
                    90:9e:05:54:38:67:19:ef:ea:50:11:5e:94:e3:da:
                    3a:77:3c:2d:89:2b:2a:c7:87:e5:8a:d7:44:a1:21:
                    05:24:92:bc:d2:b8:21:d5:d2:5c:c3:2a:2c:0b:36:
                    0c:6f:94:c9:7b:2e:20:b8:d1:5c:99:9d:71:65:d5:
                    b1:7d:5e:5e:34:69:ae:bc:81:97:9d:c1:0b:b5:76:
                    1c:17:d1:cc:31:b8:33:1d:78:73:9e:ea:7a:4c:53:
                    72:1a:1c:12:b1:11:86:02:9d:fe:15:81:22:67:5f:
                    b9:33:b6:c1:3e:a6:94:20:c6:18:a9:d3:b2:97:12:
                    17:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:71:BF:09:CD:72:F1:22:56:4A:E0:78:CE:AD:F4:F3:DB:41:B5:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e90ba205-d060-3fc8-b4ee-4272e7e9a0b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.233.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:b1:5d:5f:d4:87:4d:19:f0:b9:7e:0e:9c:fc:f5:4c:ed:a7:
         08:f2:d8:e7:06:95:39:e2:73:44:0d:6c:68:19:4a:1d:8b:4d:
         a2:5d:95:d6:8a:18:f9:77:27:69:20:8a:34:11:cd:f1:06:51:
         77:de:c3:45:cb:05:d3:84:eb:f0:0a:83:71:c5:a8:31:15:51:
         90:d7:ae:bf:c2:62:26:95:4d:ea:9f:d0:2e:2d:99:a8:27:91:
         5c:68:84:fc:31:92:1c:56:aa:eb:1b:3f:2e:47:e3:41:8e:4c:
         36:d6:4d:1d:22:d5:82:42:ba:f3:d1:f4:52:89:56:16:6b:1e:
         30:5c:f4:1c:e5:06:f7:ce:40:24:0a:4a:20:4c:d8:c0:ea:b0:
         2d:5d:42:44:4d:0a:51:1c:7d:5b:a9:4f:d0:51:c7:d7:0e:24:
         f7:ca:11:3d:34:b3:f6:74:eb:c7:11:97:ca:f2:58:0a:10:7b:
         f4:73:08:71:52:06:6a:07:7d:85:04:8c:0e:8d:07:2a:05:55:
         33:1e:69:ac:4e:a1:92:8d:31:57:91:dd:b2:0e:da:8d:a9:b7:
         53:b1:a2:d2:a8:e5:1e:df:98:05:d2:4a:0e:97:34:95:5e:6b:
         a7:4f:ee:c4:00:3c:3d:e0:48:67:c2:5c:2e:33:09:49:ee:ac:
         a1:eb:da:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhTjA9LNwbkSbBgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk
NzA3NmM1Y2QtMWQ5ZS00NTNiLWI2MzAtMzQ1ODBkYTg2NWMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO+3JCiYtcCBrcrHAWiMt/6y4Pj2T/ThB4k4
N4of8Q+G5qAf/7Exv/7jCsE+EZ6AqeCkYiE3B9YjlD9WERt1yMqY7s1PXeLzO9LJ
43hfUvpwdGXdJ/eL2AYbjVVa6n27DTX3IghyMFgQakC6OU7q9/IndcTtJ5xblNaA
uaqN65cAHAomjVuQngVUOGcZ7+pQEV6U49o6dzwtiSsqx4flitdEoSEFJJK80rgh
1dJcwyosCzYMb5TJey4guNFcmZ1xZdWxfV5eNGmuvIGXncELtXYcF9HMMbgzHXhz
nup6TFNyGhwSsRGGAp3+FYEiZ1+5M7bBPqaUIMYYqdOylxIXdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGBxvwnNcvEiVkrgeM6t9PPbQbX+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTkwYmEyMDUtZDA2MC0z
ZmM4LWI0ZWUtNDI3MmU3ZTlhMGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYOnQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAASxXV/Uh00Z8Ll+Dpz89Uztpwjy2OcGlTnic0QNbGgZSh2LTaJdldaK
GPl3J2kgijQRzfEGUXfew0XLBdOE6/AKg3HFqDEVUZDXrr/CYiaVTeqf0C4tmagn
kVxohPwxkhxWqusbPy5H40GOTDbWTR0i1YJCuvPR9FKJVhZrHjBc9BzlBvfOQCQK
SiBM2MDqsC1dQkRNClEcfVupT9BRx9cOJPfKET00s/Z068cRl8ryWAoQe/RzCHFS
BmoHfYUEjA6NByoFVTMeaaxOoZKNMVeR3bIO2o2pt1OxotKo5R7fmAXSSg6XNJVe
a6dP7sQAPD3gSGfCXC4zCUnurKHr2p4=
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:16:56 2025 by rpki-client