Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/450bc5ce-6f8f-30e9-aa47-acb805a09111.roa
File:                     450bc5ce-6f8f-30e9-aa47-acb805a09111.roa (raw, json)
Hash identifier:          HldmKL/mfpJtX0jKHMAISpY6KNDx3x8UJJkZXT2vfuw=
Subject key identifier:   07:D6:60:3F:A1:ED:5D:C7:39:C5:1C:71:6A:51:50:5A:63:71:5E:E3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858490B4C3271039B9C6C69A649D0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/450bc5ce-6f8f-30e9-aa47-acb805a09111.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     701
IP address blocks:        96.236.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:32:71:03:9b:9c:6c:69:a6:49:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=cb29f9c2-16fb-4a39-93c7-d56efcd2b34c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:23:c6:5d:10:e5:2f:0c:54:1e:f7:df:ac:67:
                    0f:d4:44:d2:5e:9f:40:48:f6:78:c3:66:62:62:3a:
                    ce:be:ac:c7:70:10:2d:cb:cb:53:70:de:ab:3f:6d:
                    cd:84:73:01:96:ec:e8:af:3f:3c:1b:83:a7:01:ca:
                    7e:ea:56:fe:c8:07:7f:7d:2e:a2:32:d3:61:56:88:
                    9c:88:b4:e0:bf:71:af:3b:eb:60:f8:be:29:22:a0:
                    0e:4e:33:78:a7:31:c7:6f:e0:11:3d:2a:33:0f:82:
                    ad:2c:28:ba:73:11:d8:d0:66:0b:9b:15:09:34:9e:
                    19:3c:f7:05:8d:f7:80:4f:0e:70:b7:63:78:48:4a:
                    fe:9a:85:c9:7a:c2:a2:92:5d:96:0e:72:db:ca:33:
                    8a:7a:03:0e:3d:8e:a3:06:10:e3:3a:6c:ff:ee:1b:
                    6c:47:49:64:c8:4b:47:19:92:0c:22:9e:ee:06:a4:
                    9e:62:77:d8:18:ad:60:07:d3:f2:b0:c3:3a:a4:91:
                    2b:70:dc:0d:85:ce:d6:08:ac:43:f4:79:dd:5a:7d:
                    e4:a6:2b:31:88:6c:fe:84:87:a8:5e:c4:06:e0:87:
                    34:5b:a9:35:78:42:39:3f:a5:7e:f7:7a:2d:4f:04:
                    d6:b6:4b:2d:83:b9:96:1c:d8:68:c2:47:61:29:1a:
                    ed:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D6:60:3F:A1:ED:5D:C7:39:C5:1C:71:6A:51:50:5A:63:71:5E:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/450bc5ce-6f8f-30e9-aa47-acb805a09111.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.236.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:3e:94:52:03:a4:66:cc:1d:ca:63:1e:75:36:49:ee:36:58:
         06:3b:56:d5:47:4e:11:8a:2a:60:b3:60:3d:c6:d2:60:06:b7:
         d0:69:25:3a:6a:e4:51:b5:92:5e:93:df:9a:d6:34:c4:e4:2c:
         96:4c:8e:f2:e1:10:e7:68:9c:48:49:0b:f5:2e:bb:2e:6f:74:
         a3:3f:91:5e:69:df:a0:54:5b:a9:e3:1b:bb:bc:ef:25:c1:ab:
         77:78:24:7d:78:57:c9:f9:83:4d:25:f4:5c:30:e6:62:44:00:
         5d:9c:74:61:2d:50:65:87:4c:57:62:b4:4e:6b:92:4d:ca:d6:
         59:c7:a8:13:b2:66:13:7e:10:ba:35:1c:29:5f:81:b3:21:77:
         94:41:59:f5:21:a9:d8:83:2b:eb:2b:22:37:8b:56:88:ed:ba:
         ad:ab:03:b6:4b:dd:2a:8b:25:9c:da:ad:20:29:bb:47:4e:32:
         b1:66:50:af:6a:6f:07:d9:bb:22:d2:1f:53:ff:5c:d9:44:a4:
         dc:a3:f2:b9:13:b6:d5:49:2a:8f:53:19:b4:b8:2b:c7:48:86:
         66:20:dc:c5:e1:78:5d:f9:62:ea:f2:34:95:48:e4:3a:d1:03:
         57:99:e2:4b:2e:66:b6:c8:58:cd:38:37:b9:61:88:28:72:7f:
         ee:fe:7a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:44:13 2025 by rpki-client