Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4fc5629c-bb44-38b4-a93c-d82d25e7cfcd.roa
File:                     4fc5629c-bb44-38b4-a93c-d82d25e7cfcd.roa (raw, json)
Hash identifier:          74dyBtmPp8KqfOnl5nEb2gMaMn9TC5l0BlWcinqYVYU=
Subject key identifier:   23:B3:17:4C:8F:E2:52:6A:1C:E1:DB:4E:A9:27:C0:F5:41:38:D7:CB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849E225481C15EBD8F2400F4460
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4fc5629c-bb44-38b4-a93c-d82d25e7cfcd.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     701
IP address blocks:        165.117.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:48:1c:15:eb:d8:f2:40:0f:44:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=027f6b36-2eeb-4d5f-ad35-c97c4e2e4ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1b:96:a9:38:be:88:86:df:18:12:4b:94:07:
                    92:1e:23:25:25:b5:16:4c:7c:81:d2:29:d4:07:35:
                    27:25:51:d8:c0:e5:c2:20:c0:cb:04:a1:4b:77:16:
                    84:d0:74:c2:c0:fe:72:4a:c5:6b:c3:2f:96:17:dd:
                    48:da:04:18:7c:64:ae:f3:6b:5b:d1:4c:a9:2e:c4:
                    53:26:5c:30:95:64:0b:a8:bb:4c:6b:f4:db:c0:cb:
                    56:dc:f5:96:fb:34:02:c0:4b:e5:1f:4f:52:fc:35:
                    28:3e:95:6d:f9:14:7d:6d:d9:69:2e:6e:d4:fa:37:
                    9e:2d:44:86:25:57:ac:d8:2e:7e:65:66:f0:b5:c3:
                    72:c3:d0:d8:4b:14:d9:b4:2e:71:b2:c9:36:1b:d5:
                    43:0f:62:a4:c8:5d:a5:fb:af:94:d3:c3:a6:c1:dc:
                    f6:00:8e:54:71:a0:73:13:a0:8b:cc:2c:9e:b1:7f:
                    2e:32:7f:0b:3f:d1:13:8f:ba:e2:d4:f9:e6:e2:4b:
                    0c:b9:c3:6d:26:f7:7e:cc:30:e2:3f:aa:16:2b:de:
                    76:83:5b:fb:bf:6a:dd:e8:a3:de:92:de:3f:de:61:
                    26:f4:ea:b9:65:89:86:a0:c4:65:76:ab:d6:43:01:
                    ee:0b:9f:18:5c:85:db:2a:61:75:fa:c3:22:19:b8:
                    8e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B3:17:4C:8F:E2:52:6A:1C:E1:DB:4E:A9:27:C0:F5:41:38:D7:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4fc5629c-bb44-38b4-a93c-d82d25e7cfcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.117.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:5e:92:6b:4f:bb:58:e3:80:ee:94:ef:6d:78:12:82:1a:76:
         50:1e:b0:c5:f1:de:8e:78:ca:d1:2a:a7:cb:aa:19:cb:d4:ad:
         39:fc:0f:c4:72:aa:71:dc:b3:6b:a7:7f:aa:70:04:b0:58:04:
         f1:89:2e:ea:f7:bc:82:05:d1:a8:8e:f5:3a:04:34:ec:f0:4b:
         99:98:15:8d:01:82:56:78:43:47:e4:86:57:5a:f3:e6:6f:d7:
         75:af:45:68:6a:04:11:dc:dc:f2:1d:fd:8d:c7:13:92:f7:60:
         16:0d:b3:d2:6a:46:0f:d5:80:52:89:75:d0:11:59:53:6e:b1:
         0a:2f:09:a0:5f:2d:f4:57:37:84:9b:60:62:56:55:4a:5a:4a:
         4f:a2:c6:f8:f9:27:b3:36:10:8d:37:b0:d7:c8:de:4b:75:41:
         cb:30:4f:c3:4e:40:24:96:41:f1:ac:5d:29:96:a2:89:01:25:
         51:b0:60:31:73:79:15:53:ff:73:f1:db:dd:31:9c:26:83:cb:
         30:76:5a:d8:2b:9b:49:90:66:c3:c6:82:4d:89:c7:b6:d8:e0:
         21:6d:59:d0:2b:a4:72:7f:62:9b:51:57:5d:33:2e:a7:6d:fb:
         c6:f4:8d:c0:fd:52:73:be:00:b5:1c:f2:8e:41:13:4b:b6:fb:
         09:95:09:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:21:08 2025 by rpki-client