Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f629e4f0-e525-3fb2-bcda-8a1b54ca0a46.roa
File:                     f629e4f0-e525-3fb2-bcda-8a1b54ca0a46.roa (raw, json)
Hash identifier:          /43oTOcPkYNuLn35WyLFyDHA/Icqx+oLEs2HouED/to=
Subject key identifier:   88:90:B8:CB:6B:20:94:FB:DA:91:17:3E:E8:F5:9B:47:A7:8E:8E:05
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C370DCA2FB9696D10D43900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f629e4f0-e525-3fb2-bcda-8a1b54ca0a46.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     701
IP address blocks:        151.201.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:0d:ca:2f:b9:69:6d:10:d4:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=e5c41731-39c5-4c3f-84e9-f51e0237754a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:60:f5:b6:e7:71:b7:b0:eb:9a:30:ee:46:6a:
                    10:29:34:21:1d:5d:c1:80:d3:44:ea:a8:a9:e7:78:
                    b6:be:b2:21:bc:1e:35:70:6f:42:13:78:c9:b5:21:
                    52:18:0c:ee:ba:7f:8f:85:ea:0d:8e:d4:4b:4a:78:
                    74:d4:9f:68:85:26:c3:88:8b:f1:0a:92:6e:75:9e:
                    5e:a5:02:c1:f7:12:73:13:dc:2f:39:e5:fd:4d:bb:
                    0f:a3:79:51:51:97:b0:e0:e3:eb:f2:16:03:a6:c5:
                    70:c4:18:b9:93:9d:00:e9:61:06:cf:19:bc:01:8e:
                    b2:21:b2:50:70:52:3b:34:1e:12:a3:51:62:8e:fa:
                    98:c3:dc:75:ac:3e:a0:75:49:4b:62:2c:b4:93:0b:
                    ef:26:a2:7b:78:cc:69:d3:5f:5b:0a:c0:00:ae:34:
                    56:7f:85:a3:21:67:23:8c:f9:da:85:84:c0:06:06:
                    f4:37:ec:4c:67:ce:9e:c3:0e:b5:df:b3:04:e3:8f:
                    78:65:ea:c2:60:a3:8b:f4:f2:73:ab:50:42:cc:7f:
                    83:ea:74:1d:59:6e:65:e8:97:c1:e6:f7:ac:8e:e5:
                    53:c9:50:f9:99:fb:8f:8d:ac:6b:d4:51:2e:46:49:
                    68:de:71:bb:ad:77:f9:e4:50:9a:c0:ac:1f:33:ec:
                    14:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:90:B8:CB:6B:20:94:FB:DA:91:17:3E:E8:F5:9B:47:A7:8E:8E:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f629e4f0-e525-3fb2-bcda-8a1b54ca0a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.201.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:d5:a3:ae:0b:df:5b:dc:63:0a:21:bd:70:e0:1d:21:53:73:
         2c:f7:45:37:ba:ec:b4:bd:f0:70:78:ae:a8:a2:3d:ec:a1:80:
         a4:dd:cb:44:09:8d:ab:fd:e6:7d:c8:d3:38:72:94:00:4c:00:
         96:f3:77:62:5c:fc:c8:b0:5c:3a:41:0a:f2:d2:cb:81:b9:8d:
         51:5e:7c:3a:c4:1b:64:59:49:03:44:22:b1:b2:ec:5a:91:65:
         99:9d:55:36:7b:f3:36:08:1d:3c:4c:a5:de:fd:74:ca:0b:18:
         b4:27:dc:c0:6c:2f:6b:36:41:34:e2:ee:e0:db:1b:c9:2c:71:
         82:2f:76:5b:2a:2e:69:6c:43:7c:d8:07:fa:10:8c:16:b6:c7:
         6a:00:ac:f5:c4:5a:88:0d:de:b1:f6:0c:1e:67:5b:24:27:6a:
         78:e1:a7:4c:8f:79:8e:cb:c2:1b:2f:94:1b:7a:2f:d8:e0:88:
         48:f6:10:57:a8:95:b9:f5:ad:7d:6c:f7:c6:65:65:e0:35:68:
         c7:1a:a4:19:4f:7a:9b:4f:c8:ad:5c:09:66:1a:f4:d6:a1:a9:
         b0:71:a0:88:44:d8:b1:27:af:6d:88:1f:ef:cf:16:b5:dd:5e:
         36:14:38:85:7a:31:c1:57:af:20:a2:59:60:85:3d:43:02:86:
         07:63:96:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 00:19:29 2025 by rpki-client