Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b4fdb02-2686-327a-9202-080a0e6307f1.roa
File:                     3b4fdb02-2686-327a-9202-080a0e6307f1.roa (raw, json)
Hash identifier:          5U/n0xhEbVEG/afWaVrKZUxTq8rs7kVAfuHF2rpen3o=
Subject key identifier:   89:E0:0C:54:F5:4F:FD:63:FE:0D:A1:1F:68:41:4A:46:5E:26:E9:B0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B079FC63655F1755359F0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b4fdb02-2686-327a-9202-080a0e6307f1.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     701
IP address blocks:        151.201.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:07:9f:c6:36:55:f1:75:53:59:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=6b61a13d-4035-4f2e-a3a1-e31b9dc441ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c3:57:77:3c:c9:46:8b:c6:74:a0:ae:e6:8b:
                    b1:af:ad:f5:63:d3:9a:74:37:81:5e:42:e4:d7:69:
                    d5:83:00:2e:e5:0c:91:83:94:c4:06:9b:34:7b:c3:
                    3a:46:50:81:60:00:48:50:1e:77:f8:16:2c:3d:a4:
                    7f:de:83:58:d3:f8:32:53:d0:22:89:40:f8:14:f8:
                    ae:90:cc:f9:2a:77:e0:a8:be:24:d4:ed:e6:f6:06:
                    e6:15:2a:0f:d4:3f:1f:55:78:b2:29:1e:eb:d0:36:
                    a6:d4:59:b6:f5:5b:c5:9d:84:1b:59:c1:fa:cc:0a:
                    0b:b9:55:3c:ad:80:07:e2:a5:be:32:c9:e1:48:a9:
                    fd:bc:a0:31:2b:0c:1d:d6:41:ac:1e:b4:4b:7f:e7:
                    6d:83:b2:cd:a2:3b:8b:a0:14:78:3b:13:0a:4f:77:
                    e4:70:da:26:cb:be:04:0a:32:16:c8:52:9c:d8:6c:
                    e1:8f:6f:1d:ba:7f:e2:ab:cd:e2:4a:ff:cf:3f:c0:
                    5d:45:40:b7:1d:6b:2c:e8:ad:24:33:7e:83:59:0e:
                    56:c4:20:a0:46:f2:a8:9a:27:1a:55:f5:b8:ad:04:
                    69:25:39:7e:18:b3:b6:d9:04:cb:27:53:0a:15:7a:
                    51:3d:30:90:67:ac:6a:6d:3f:49:ea:0a:d2:8a:6e:
                    6e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E0:0C:54:F5:4F:FD:63:FE:0D:A1:1F:68:41:4A:46:5E:26:E9:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b4fdb02-2686-327a-9202-080a0e6307f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.201.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:d8:36:e5:5a:90:ce:99:70:bc:2a:82:59:d6:86:68:cc:11:
         f7:b7:1b:6f:28:ba:00:7f:21:a1:98:2e:57:01:52:5f:41:cf:
         35:d2:35:a3:c1:b5:b7:e8:7b:32:02:2d:11:c5:ae:ae:de:e1:
         bd:e1:37:3a:51:ec:1a:34:57:d9:c0:4b:96:a6:a5:72:d4:46:
         40:3e:3a:9e:05:bf:c7:65:03:bd:ea:8b:e8:76:49:72:80:b6:
         72:32:8e:3b:fb:a1:7b:45:66:88:15:f2:d1:07:90:56:20:41:
         c6:79:5c:0a:c5:45:f4:e0:8f:b5:44:e9:a0:ca:b0:9b:f6:ac:
         21:f1:5e:ec:63:30:4d:91:08:e8:86:55:5a:47:23:4c:ea:86:
         c4:8b:1c:2b:02:2f:b8:d0:6d:d8:9a:13:6d:8b:ff:84:0f:af:
         dc:bd:fa:38:cc:89:d3:3c:92:12:91:2a:8d:25:57:b4:45:86:
         12:68:50:12:58:63:a8:92:41:15:0e:75:4e:06:b1:5a:e5:83:
         91:82:7a:00:e1:ce:b4:b6:86:c6:0b:ee:fa:66:cb:bd:86:b0:
         20:ee:68:5a:29:83:12:42:fd:86:29:53:12:89:0d:e1:4a:d1:
         ab:d8:9b:43:a1:08:b2:c1:79:f1:b0:ea:a6:17:3e:a2:57:5c:
         32:04:72:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 22:02:43 2025 by rpki-client