Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f02a931-c90d-3cb3-9e85-262f00936df5.roa
File:                     0f02a931-c90d-3cb3-9e85-262f00936df5.roa (raw, json)
Hash identifier:          70bWzZTz1gqYB2+meQ50SBsBDUmxDym7hg09wGmpJwE=
Subject key identifier:   00:1A:FD:B8:88:BE:F5:4E:CB:23:5C:F6:5D:DA:A2:A3:C1:2E:45:92
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849E22543633E3E342019B27B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f02a931-c90d-3cb3-9e85-262f00936df5.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     701
IP address blocks:        151.200.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:43:63:3e:3e:34:20:19:b2:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=c5b68682-255c-4f88-b34c-da4977378529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:79:0e:64:ab:0c:c7:1e:af:b7:28:af:82:85:
                    09:2c:c6:1b:85:f2:cf:81:4e:27:d3:6b:18:a8:67:
                    34:d7:57:4e:20:8e:85:3f:88:f3:c5:dc:b5:7f:92:
                    2d:71:9a:cc:10:e8:78:4d:e3:58:25:04:e6:95:8b:
                    a0:3f:f7:72:5d:38:5f:82:8b:26:46:ce:22:14:96:
                    f3:7f:4c:67:a3:03:6c:9f:1b:bd:e9:8a:0f:fc:0f:
                    91:8b:1b:53:5a:7f:ab:70:4e:00:58:c4:82:fe:21:
                    ac:f6:2b:fb:26:cf:1a:95:cc:14:cc:55:3f:3c:79:
                    ad:ee:1c:9a:9a:fa:46:a6:22:ab:b3:c4:f0:1f:73:
                    a3:51:6a:26:9d:45:34:f1:32:54:05:42:8e:cc:0e:
                    0d:69:47:1e:71:5f:8a:d6:83:f6:e9:97:80:60:81:
                    14:f2:dc:8f:0b:91:b8:2c:43:9c:37:4b:f7:fa:ca:
                    8c:62:c5:bc:d7:4d:df:f5:d7:2d:08:18:d6:af:d8:
                    d9:23:5c:18:fd:51:e7:51:fc:20:3e:77:a5:57:7a:
                    3f:1a:4f:01:9e:94:28:f9:3b:c5:8e:d3:8a:f5:9b:
                    b3:3f:bd:31:8a:1a:d5:ac:ed:a9:31:8a:03:8a:ee:
                    90:9f:83:56:4b:75:f3:da:60:a7:c3:eb:ae:05:6d:
                    d6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1A:FD:B8:88:BE:F5:4E:CB:23:5C:F6:5D:DA:A2:A3:C1:2E:45:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f02a931-c90d-3cb3-9e85-262f00936df5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.200.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:d4:84:2b:85:91:4a:b0:74:ed:44:23:ed:ed:84:12:87:30:
         fb:0f:83:43:70:f5:1a:27:7f:ed:65:4c:01:d3:64:e7:5c:e3:
         4b:a9:24:1e:82:e4:01:e1:c4:6d:98:20:3d:35:72:c3:f8:f9:
         61:19:5e:88:25:04:20:07:34:9e:ca:f9:42:6e:e7:4b:40:83:
         35:4b:25:07:9d:66:6f:ab:58:f3:f2:72:81:e2:0d:13:82:86:
         0d:00:21:db:f0:9a:07:19:58:0b:0d:a5:3d:e3:51:8f:1d:f1:
         98:fa:d5:35:44:04:33:44:a2:fb:b6:27:dd:07:33:b0:86:54:
         d6:c5:20:3b:86:73:db:ad:c4:81:27:3c:b5:e9:a6:dd:bd:f4:
         e2:ec:f7:90:80:11:73:9f:84:70:58:fd:b6:83:57:f0:5f:2a:
         f1:bd:9a:01:88:fe:22:0e:14:2e:42:38:5c:74:83:b6:7f:c9:
         40:4e:79:a6:77:42:67:13:c1:68:51:b0:7d:66:fc:26:2e:bc:
         d5:8f:b5:d8:26:92:a9:8f:6b:2c:0d:99:62:c7:70:47:d0:4e:
         0c:63:08:94:a2:77:bd:9f:a0:49:c5:81:2d:af:d6:ff:11:31:
         11:de:4a:39:6c:6d:3b:6f:62:76:29:41:d6:b2:71:bd:bd:60:
         b8:ac:39:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:40:34 2025 by rpki-client