Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1df5db69-1c99-36cc-906a-9b6588dfce0f.roa
File:                     1df5db69-1c99-36cc-906a-9b6588dfce0f.roa (raw, json)
Hash identifier:          vgSRJZoB5QumKrarnJKD5+k2Esw4b/ke6/5EpG8ro/I=
Subject key identifier:   C1:9C:0E:24:DE:B8:B1:0F:05:EF:E4:D3:38:84:CF:2C:DE:70:92:33
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C24762F3E6305975E47C1C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1df5db69-1c99-36cc-906a-9b6588dfce0f.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     701
IP address blocks:        108.33.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:76:2f:3e:63:05:97:5e:47:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=15010839-be03-4ade-ac0d-c531d97effe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:16:5e:46:5a:ba:ce:5d:58:8d:79:78:af:dd:
                    bc:f5:2b:2b:36:d1:47:0d:26:3f:69:a2:aa:c7:a2:
                    04:c1:3c:27:22:34:08:04:32:12:40:ef:33:66:b8:
                    e7:9a:b2:65:11:62:8d:cd:51:02:9d:ac:6e:57:df:
                    b5:36:58:87:39:ae:66:c0:42:0c:39:e0:02:cb:b6:
                    c7:09:ae:d1:c1:1c:f9:7d:cb:a6:f9:d5:26:17:2e:
                    87:d9:83:47:9d:58:d1:e4:74:a0:fc:13:08:b4:fd:
                    5a:9c:55:1e:59:80:aa:47:09:b9:bd:c6:e9:88:f7:
                    f2:1e:19:ad:74:43:70:be:ab:92:ee:59:bc:f9:19:
                    42:18:a9:1f:e7:e3:41:65:93:63:0f:fa:45:92:8f:
                    02:ff:1d:fa:f5:15:57:b9:10:f5:9a:ba:25:6b:e5:
                    3b:66:13:ce:57:bd:ea:15:21:06:cd:b3:0b:7e:06:
                    51:db:b0:9c:1b:c2:4a:dc:54:6b:91:9f:9b:80:0d:
                    e7:18:8e:14:44:bc:c1:a6:93:54:d4:4e:b5:94:d9:
                    94:5d:41:d2:53:26:69:53:50:41:11:28:18:30:74:
                    72:dc:91:26:d3:66:89:98:91:a5:61:fb:25:7f:2b:
                    7d:28:14:32:10:c5:3f:bc:76:d9:d3:4b:d0:72:3f:
                    85:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9C:0E:24:DE:B8:B1:0F:05:EF:E4:D3:38:84:CF:2C:DE:70:92:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1df5db69-1c99-36cc-906a-9b6588dfce0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.33.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:3b:d3:8b:01:d4:f2:b2:f2:05:80:e5:c0:e6:1e:9b:33:ce:
         a3:b3:14:17:b9:4d:15:66:0d:ad:53:9d:da:06:8a:86:14:91:
         ae:f3:91:1c:c9:bc:5a:08:5e:64:86:07:f5:19:b7:db:56:7d:
         2a:d7:67:aa:02:aa:7f:fd:05:5d:c6:8a:39:94:d8:bb:bf:9d:
         5a:bc:d0:67:f1:1d:05:79:e1:9d:1e:e3:94:be:17:12:8a:f2:
         8a:da:1b:48:6f:92:4c:d7:4e:b3:c6:9e:74:7e:29:9e:23:c8:
         69:af:7e:a5:7b:a4:1b:0b:b2:3b:d8:c4:96:8c:ca:02:af:44:
         23:44:d6:57:51:36:e0:42:a9:62:cf:e4:6d:13:4a:51:a4:9b:
         f9:33:98:0c:4b:13:4e:5e:ca:93:b6:e9:8e:c1:99:61:bb:33:
         89:32:df:44:0f:cc:62:ae:79:7b:42:06:fc:83:5b:bc:d1:61:
         57:24:01:6c:f7:d4:10:87:04:9e:18:3f:ca:07:b3:ab:4d:e4:
         71:8f:9d:87:df:9f:41:a0:34:43:34:c3:50:f9:82:1f:34:7b:
         04:6d:a5:da:53:b1:0e:3a:b5:bc:0f:c7:d5:bc:fe:74:5f:2d:
         5d:9f:b3:94:31:5c:d2:8b:7c:95:b1:ed:fb:13:c6:a6:98:60:
         43:a9:13:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:42:28 2025 by rpki-client