Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/502f3f18-d19c-335b-9014-e1b9b3488140.roa
File:                     502f3f18-d19c-335b-9014-e1b9b3488140.roa (raw, json)
Hash identifier:          xtftMjYB+gZ0mStpFYtTNv9ot84y/99WQsFtsnoJHv4=
Subject key identifier:   27:3A:48:8B:31:E0:8D:9B:B7:F9:12:B0:06:F1:67:A5:CB:EC:AD:B6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858490B4C2DD2B50F7069534F5740
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/502f3f18-d19c-335b-9014-e1b9b3488140.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     701
IP address blocks:        96.239.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:2d:d2:b5:0f:70:69:53:4f:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=cd0bae69-a72f-4edb-8c4a-fcb1ce3f9d19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:51:b5:7c:dd:d1:42:7b:4a:2f:fd:84:93:71:
                    fd:c1:c0:87:f6:27:39:40:76:c9:4f:dd:46:11:85:
                    23:02:a0:54:4b:ad:2d:6a:65:f4:57:ca:bf:3a:52:
                    64:18:f0:e3:31:b7:62:da:5a:69:94:ff:e8:e8:29:
                    16:1a:9d:35:52:ad:aa:f3:5c:92:33:5a:d1:ba:60:
                    70:f2:e4:44:67:3b:92:24:29:7a:8f:35:17:af:7c:
                    d3:70:a1:94:5f:14:d6:e0:c8:b1:1d:0c:e3:82:36:
                    32:03:8c:3e:4c:0b:bd:fd:5e:1d:94:a1:99:ac:92:
                    a3:e5:6b:a2:a6:00:2e:00:0a:1f:de:a8:ce:60:42:
                    28:38:1e:5b:b3:6f:d2:7b:9e:b7:44:b5:1b:55:1e:
                    80:95:97:69:9b:d6:9f:de:cc:b3:4e:b6:6f:3b:f9:
                    28:3f:18:46:4f:c7:9e:34:ca:04:fa:76:1e:dc:09:
                    22:f5:f0:c2:64:ee:1d:63:e4:79:8b:72:23:29:90:
                    a8:17:fc:b0:9c:2b:db:5b:4c:6d:53:5b:63:c4:ee:
                    21:d6:3e:20:18:08:37:25:9b:6e:d1:73:93:bc:a5:
                    24:03:b0:27:68:79:90:42:18:e8:98:14:ee:43:c0:
                    e5:c8:8a:9f:1e:4a:b1:d3:23:f6:07:cc:d6:c9:de:
                    d7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3A:48:8B:31:E0:8D:9B:B7:F9:12:B0:06:F1:67:A5:CB:EC:AD:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/502f3f18-d19c-335b-9014-e1b9b3488140.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.239.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:65:b5:93:7c:a9:ca:1d:f6:02:7d:4f:ea:ca:54:33:6c:f9:
         eb:29:c9:18:16:ff:78:48:a1:8a:98:7f:1c:5b:8e:08:77:96:
         a5:df:ed:c2:d1:24:6c:ad:25:40:22:24:cf:c7:1c:69:86:49:
         c9:e2:17:d4:6b:cf:87:03:b0:8a:c2:3d:8c:d6:90:3a:9b:a9:
         42:42:fc:81:a3:db:85:8a:93:a9:50:e9:c2:c5:13:8c:5c:4a:
         27:10:91:57:87:9c:97:98:5b:3a:b9:67:cd:7a:03:81:7a:9f:
         f5:85:ae:34:dd:aa:b7:04:33:66:7e:58:e9:90:ea:91:0e:78:
         c9:ee:64:74:e9:e9:91:f9:33:f5:c9:a1:8c:e3:7b:cd:62:b6:
         0e:c4:d7:f7:4d:c7:06:8c:3a:60:2b:eb:60:0b:90:82:31:b6:
         76:d4:82:a3:1a:07:be:f2:69:96:8c:16:44:90:e7:18:8f:61:
         65:db:8c:9f:70:78:cb:70:83:15:90:e3:da:d0:dd:c9:50:38:
         1c:3c:e3:9b:4b:30:41:ac:c6:5c:ad:54:e0:bd:77:eb:ef:0a:
         0f:7e:b8:ed:dd:cc:ca:57:b6:8c:c6:24:14:eb:37:37:f0:7a:
         0f:0f:6d:2a:41:af:78:f5:5f:3a:29:d0:6c:4e:87:e5:e0:4d:
         34:2b:bb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:34 2025 by rpki-client