Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eaf27d41-cc4a-34ea-a5ad-7a79143097ca.roa
File:                     eaf27d41-cc4a-34ea-a5ad-7a79143097ca.roa (raw, json)
Hash identifier:          DZG/5T0ktiZmXsANSXWE3soYxik7HPEZGamrg33y4+Y=
Subject key identifier:   84:69:85:44:D3:AD:D2:93:D5:CD:14:49:60:DD:EB:B1:46:0D:C9:15
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849EA8526D0CE133C41D3B9B580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eaf27d41-cc4a-34ea-a5ad-7a79143097ca.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     701
IP address blocks:        71.254.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:26:d0:ce:13:3c:41:d3:b9:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=bd20432c-5f29-4bb2-ac41-897030aaf03c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3e:9a:cd:70:5e:4a:50:5c:8e:94:f1:c6:25:
                    70:b1:cb:82:a9:81:d7:53:f5:52:b7:73:44:e0:ce:
                    49:d2:ca:12:f6:c6:b6:92:fa:36:82:cb:c4:34:73:
                    a6:8d:1c:71:6e:69:a9:f8:f9:9c:a4:cc:4b:3c:ef:
                    aa:7f:eb:f4:09:0d:64:8b:74:f5:c8:d8:75:6e:d3:
                    f2:1b:31:59:78:2d:1f:bc:f1:24:d0:45:cc:bd:16:
                    7e:e5:be:98:45:c7:89:d8:9d:93:d1:0a:20:df:91:
                    1f:23:fc:86:27:9e:cd:ed:95:96:25:35:41:cb:42:
                    1c:62:db:fc:26:42:c9:e6:96:8e:25:46:32:56:f2:
                    53:ae:51:0a:57:69:c6:31:a9:1b:5f:db:23:fb:c7:
                    9f:97:67:f2:08:69:5c:bd:a9:94:d6:b5:03:c2:94:
                    4c:48:85:15:40:70:16:38:81:3e:16:1a:1e:5b:5f:
                    03:8a:60:3d:9b:6d:b6:fe:2c:79:05:8a:ae:1b:40:
                    41:84:80:96:df:49:79:be:c7:32:09:85:81:3c:b7:
                    e8:70:b9:c5:9a:e9:a7:ed:85:e0:1d:80:da:1c:cc:
                    c0:dc:06:9d:ad:95:8c:6b:dc:88:00:92:7a:f3:5e:
                    2f:2e:81:b9:6c:cb:73:72:da:ce:bd:e2:05:40:59:
                    88:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:69:85:44:D3:AD:D2:93:D5:CD:14:49:60:DD:EB:B1:46:0D:C9:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eaf27d41-cc4a-34ea-a5ad-7a79143097ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.254.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:42:5f:e3:99:9e:4e:d0:98:cc:69:35:a7:17:c9:4a:8b:f6:
         3c:66:70:47:f6:72:74:db:60:76:86:a1:8b:5c:78:2d:53:1e:
         d3:50:4a:1b:5c:ed:20:8f:4f:c4:40:d6:c9:66:b1:3d:86:79:
         32:fd:20:54:b1:10:fa:e4:70:de:f0:3b:1c:f4:7e:8c:b0:02:
         d1:e6:5f:fb:b2:a7:a4:4b:04:13:a7:21:9d:53:90:b5:bd:ac:
         ef:80:b4:7f:b6:a4:fd:9b:0e:eb:9b:33:6b:a1:99:18:81:b8:
         36:3e:ad:93:b0:68:5f:40:19:38:d0:50:46:8f:46:8c:2a:9c:
         73:40:cc:26:39:3d:80:c6:ca:37:ac:e7:36:55:a6:e9:f3:59:
         11:0c:df:95:d5:d7:83:5b:88:06:e5:d2:cf:77:9f:20:1d:9c:
         fe:7c:f7:e8:e1:d7:0d:f5:fb:3d:79:3b:5b:35:40:ce:5a:a8:
         85:86:ac:1f:78:72:8e:3b:2b:bc:59:d0:f9:80:44:de:d6:98:
         b4:a3:a8:72:a3:77:1e:6c:6d:be:01:3f:71:f0:e4:cf:b0:ef:
         75:f0:cf:d2:8a:43:69:4b:05:c8:67:dc:44:f4:ec:60:4f:93:
         3a:5e:c8:eb:4a:77:bb:f0:f3:30:35:03:5f:66:fe:04:58:75:
         15:87:3a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:36:46 2025 by rpki-client