Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2a64599-facc-307b-a133-2488397e5476.roa
File:                     f2a64599-facc-307b-a133-2488397e5476.roa (raw, json)
Hash identifier:          jfzAs8B8n+Dxn5jHNu2L88DZPW8Nx1O7B4oYQ6+v/F4=
Subject key identifier:   8D:21:EE:E7:C2:4E:60:3D:29:96:F1:00:52:67:E1:7A:6E:51:BB:C6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ACB40F42754EEF7A4897FEC10
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2a64599-facc-307b-a133-2488397e5476.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     701
IP address blocks:        96.239.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:f4:27:54:ee:f7:a4:89:7f:ec:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=fe95dff9-6ec3-440d-9184-690085f5ff1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8e:a7:0b:f0:04:12:d8:9d:3a:d1:e4:58:94:
                    a3:53:04:37:f5:fc:6f:9f:67:7b:8b:1d:35:4e:de:
                    d1:0d:69:40:d5:25:91:5e:39:37:15:b2:51:7b:f3:
                    81:26:aa:d9:82:b6:82:ad:98:3d:99:86:da:20:95:
                    0b:e5:6f:8e:3b:f2:fb:c0:6a:71:5f:27:55:dc:b5:
                    bb:74:3b:8c:43:71:46:e4:54:52:db:6a:2c:5f:2d:
                    ee:6d:9b:85:d6:5f:a5:b3:7e:dc:5d:41:b7:5c:cb:
                    0d:55:ce:a5:9a:ce:d1:5a:3c:9d:4a:57:25:a2:76:
                    b2:5e:17:91:59:17:83:e1:af:18:3f:5a:77:fc:42:
                    bd:bd:58:3b:02:eb:3d:18:88:9e:5c:a9:25:bf:fc:
                    7c:40:8f:43:b8:2c:73:b5:49:52:5a:26:cd:1f:45:
                    ce:a6:01:0f:f5:4f:b3:55:61:04:35:d3:aa:a9:9c:
                    84:8e:63:6c:ca:1e:e5:8e:60:07:65:b6:f2:c8:b1:
                    29:5c:0d:f9:bb:19:b4:8f:c7:e8:76:8f:5a:c7:0a:
                    10:86:57:9d:fc:6d:a9:91:ad:28:d4:1f:d1:a8:a6:
                    44:7a:5c:36:15:5e:62:3e:cd:4e:01:a5:5a:21:13:
                    55:c6:80:65:8a:a6:24:6b:ff:89:9e:5e:a6:df:58:
                    c1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:21:EE:E7:C2:4E:60:3D:29:96:F1:00:52:67:E1:7A:6E:51:BB:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2a64599-facc-307b-a133-2488397e5476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.239.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:08:45:fe:76:bc:33:0e:f8:ab:b2:65:97:f2:78:ed:9a:47:
         f1:a1:ae:9a:f9:95:04:6a:c6:16:63:f7:91:11:34:76:58:9a:
         c4:89:16:2e:75:f6:86:41:03:62:1f:69:a5:bd:f5:3c:d5:30:
         ce:35:dd:43:a1:0f:06:4d:5c:3b:1e:79:b0:1c:5f:42:fd:7d:
         2d:66:a7:33:a2:f3:b0:20:c7:4c:a0:d9:dc:47:09:ef:f4:41:
         0f:bd:05:15:d7:67:2a:88:60:cf:57:eb:39:df:39:99:c9:6a:
         84:8d:e2:3d:6d:15:f1:01:45:66:6d:69:46:e2:20:4d:cc:2b:
         e9:14:1a:da:37:d3:bd:be:35:81:87:e4:d6:c3:e6:3a:6a:ff:
         1d:1d:86:28:cd:96:2e:ba:e9:2e:ce:84:39:cc:89:45:1b:4e:
         58:46:23:ff:cd:2c:dd:e0:06:92:25:11:15:c0:d9:a4:bf:e9:
         5f:f6:93:90:d4:37:e0:9e:a3:0e:43:fa:d4:75:ae:64:98:b6:
         f9:a7:28:dd:56:ca:43:2f:f0:2c:87:dd:82:fe:75:55:63:44:
         74:cb:11:4c:e6:e6:4d:d2:ce:8f:13:aa:5f:c5:ab:47:8b:b9:
         56:9f:ef:f7:37:58:a2:5a:0a:8e:3a:75:19:d3:f9:dc:71:eb:
         f7:e5:9b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:19:14 2025 by rpki-client