Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8bd8ebd0-3552-3108-aa02-ab7386e4101b.roa
File:                     8bd8ebd0-3552-3108-aa02-ab7386e4101b.roa (raw, json)
Hash identifier:          HmJ4PDJ4si6NhQt2HGmwfvoI1mWAx4CAD5zhzKlGOLg=
Subject key identifier:   86:D5:A4:60:A7:59:83:FA:C9:22:B5:2E:B4:78:5A:E0:5F:C3:42:3B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B374373A85A8AA64F3D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8bd8ebd0-3552-3108-aa02-ab7386e4101b.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     701
IP address blocks:        216.233.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:37:43:73:a8:5a:8a:a6:4f:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=1d43fd38-92a7-4aa7-82d3-a5d10cb70b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9c:e3:24:36:a0:b0:e2:a5:1d:b7:19:6d:0b:
                    9b:16:bc:27:e5:f7:25:c1:3e:e8:50:c8:7f:82:a9:
                    70:9f:43:23:f8:62:5a:a2:6a:90:cb:4a:60:b5:4c:
                    c4:f3:4d:c3:ee:92:3d:2d:c5:29:c0:6c:f6:f3:45:
                    54:ee:d6:02:77:ff:6c:54:a3:cf:13:89:5b:00:68:
                    7d:2c:1e:b7:b2:2e:6f:d8:6d:cb:af:31:43:c4:24:
                    06:b3:bf:42:1c:5a:21:7b:ba:48:40:d0:89:38:f7:
                    21:30:c5:2a:e3:b7:d7:e9:3e:fa:06:85:49:fa:86:
                    f7:45:e4:47:27:fb:0f:fe:e0:d4:7c:d0:2e:44:c7:
                    db:30:5e:1a:a2:4e:c6:84:81:49:37:b4:bc:f4:75:
                    0c:24:82:d0:c7:e9:9a:5b:07:d3:16:44:27:2e:a7:
                    27:42:29:52:ac:ff:69:d8:b9:a0:4d:cf:7c:9e:f5:
                    b9:83:01:7d:d6:c4:c0:05:a4:b3:a8:42:96:82:de:
                    f7:1b:12:47:34:ec:77:bf:36:2a:a3:04:07:f5:71:
                    e3:dc:b1:56:93:ac:90:4d:2a:b8:f0:b0:44:5f:60:
                    24:51:ce:c5:ac:b4:36:6f:84:b5:25:0d:94:82:61:
                    dd:13:ca:d8:b7:3d:b2:4c:c2:2e:6e:f7:71:cc:f1:
                    b4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D5:A4:60:A7:59:83:FA:C9:22:B5:2E:B4:78:5A:E0:5F:C3:42:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8bd8ebd0-3552-3108-aa02-ab7386e4101b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.233.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:8b:83:45:d0:17:2f:7e:ab:e8:f4:75:3b:50:9b:ed:2e:4f:
         3f:fe:31:1d:01:cd:bb:ff:4b:85:6b:a9:3d:e5:cc:b1:b3:41:
         74:f7:55:71:fd:78:0b:4d:6b:24:a3:c1:db:80:17:c9:00:44:
         11:68:75:d6:e2:fc:04:34:2c:82:06:fd:83:1a:bc:5f:4a:4c:
         bf:a4:3e:65:42:e9:df:c2:20:33:75:c6:28:a2:b2:8b:1e:de:
         66:74:04:b2:ab:b2:2d:89:2b:be:cb:cf:17:1b:75:52:5e:0e:
         b5:53:62:ac:e6:34:52:18:23:bb:c5:f4:bd:db:e6:20:82:0a:
         48:ba:24:95:98:91:23:69:50:97:2b:85:07:0b:57:6d:73:b3:
         0b:3c:d1:73:7e:85:a4:6f:29:59:a1:20:fa:7d:b2:58:79:15:
         9a:b7:c4:af:ca:84:5a:11:79:a2:84:e8:12:f4:fb:a4:3e:d8:
         07:e6:b4:ae:f3:8d:01:ef:c7:9a:d9:67:9f:d9:9e:f0:8c:29:
         3b:51:ac:55:33:81:f4:08:6a:7f:b4:ec:23:bd:2e:6a:12:99:
         af:91:8b:04:97:4a:82:e1:8e:c2:b4:17:df:ef:5a:13:bb:83:
         4a:ae:1d:fc:31:92:cd:97:ca:ad:17:a0:97:34:7c:e3:28:b8:
         f3:f2:73:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 20:16:51 2025 by rpki-client