Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6cda68f2-90be-38cc-b5fd-71993ce8bc30.roa
File:                     6cda68f2-90be-38cc-b5fd-71993ce8bc30.roa (raw, json)
Hash identifier:          WcvBUkkT6uy0LLZ72QOu2OF3QAspouiWS+eVO3Fu1Ps=
Subject key identifier:   2C:C5:45:69:0E:3A:F7:3D:CA:BF:16:3D:AE:64:F3:53:62:F2:12:A9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C244A7BE10EA9AB64DDB340
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6cda68f2-90be-38cc-b5fd-71993ce8bc30.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     701
IP address blocks:        151.199.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:4a:7b:e1:0e:a9:ab:64:dd:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=1219a83d-7611-4260-98bc-fca18b102e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5c:87:70:b1:62:e2:8b:71:d4:0d:41:05:4e:
                    92:1e:80:80:00:8e:c5:03:b8:46:65:17:e1:7d:ba:
                    3b:ee:e3:93:0d:c8:bf:f6:b5:e3:d7:0e:dc:1e:77:
                    e0:91:eb:2f:2b:59:e2:30:34:8b:c6:83:f5:5d:aa:
                    8b:1f:06:64:4f:f1:d6:1c:e4:ff:b0:77:66:66:35:
                    0d:4c:72:31:b1:3b:4d:d8:34:57:29:c7:81:c0:6f:
                    f6:71:32:bc:d3:19:a1:9c:63:10:8e:1f:51:2f:7d:
                    5a:a4:36:89:70:c2:d3:e0:a8:9b:1b:ee:4d:d9:17:
                    39:12:d6:e5:44:27:1f:ed:d8:e6:54:7c:2f:9d:72:
                    0b:9c:2e:10:d5:7d:f8:0c:2c:4a:ee:2d:be:47:2a:
                    3c:94:c2:a3:78:1b:a8:ce:6a:52:44:4a:9c:07:80:
                    db:8d:17:03:21:47:54:49:4a:7b:52:df:73:fb:10:
                    40:f6:d7:46:20:89:b6:84:fd:99:fa:1e:59:0c:fe:
                    94:93:cc:44:e6:5a:6a:c3:16:dd:0b:bc:40:98:87:
                    a5:0a:a7:0f:10:c6:64:19:f8:c3:86:c2:a6:24:87:
                    20:1d:b2:7b:a9:07:d4:8a:a6:8c:81:d1:67:f7:75:
                    ba:2a:d5:7e:98:ac:42:86:5b:3e:01:31:f5:ab:7a:
                    16:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C5:45:69:0E:3A:F7:3D:CA:BF:16:3D:AE:64:F3:53:62:F2:12:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6cda68f2-90be-38cc-b5fd-71993ce8bc30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.199.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:c8:20:af:4f:66:90:93:22:61:0a:73:dd:be:41:7a:28:6a:
         1d:40:44:9b:5e:4c:29:70:ee:6f:e0:37:3d:3e:fb:0c:24:91:
         08:d8:03:18:64:60:2d:5b:15:5a:66:2a:c8:0b:b8:a2:20:c3:
         01:f8:09:5b:2d:c0:4c:5f:0d:7f:b3:e1:78:9b:b5:b0:da:ee:
         9b:5c:55:69:7c:1f:e1:b3:25:8b:13:d8:97:99:f5:71:d5:21:
         15:0a:1c:35:c7:52:29:d2:6c:7b:81:3f:2f:88:c6:c0:33:94:
         65:bd:bb:2f:56:7d:54:6f:e5:8f:e3:15:56:70:dc:ca:04:25:
         2d:61:21:e1:f5:f5:a6:e7:d4:69:4f:35:da:89:5c:9b:ab:ad:
         55:3a:ad:ac:9f:36:34:94:99:60:5f:d4:2b:fa:df:73:ee:f9:
         c2:25:87:f4:3d:48:57:f7:d1:bf:f2:35:a0:ea:7f:14:3b:97:
         55:32:13:e0:82:03:bb:cb:d4:91:5d:55:0f:5c:89:0f:e1:af:
         c7:d6:bc:c2:d0:c1:62:f9:2f:45:a3:c6:50:5e:a8:7a:7a:e1:
         55:9f:6a:79:93:bb:03:52:ea:f7:45:dd:b5:63:40:fe:85:b4:
         fc:91:05:ff:2c:62:e4:cb:89:4f:1a:27:34:8a:bc:81:d9:85:
         e8:40:07:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:13:28 2025 by rpki-client