Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/750ca266-da8c-3c53-8750-93f2412bfc8f.roa
File:                     750ca266-da8c-3c53-8750-93f2412bfc8f.roa (raw, json)
Hash identifier:          5Y4gE+E+KlJ7fMNsjA+dlqhS9DTMZyuEgk1+ySz3Qqw=
Subject key identifier:   05:4C:9C:7D:87:B9:A3:EF:F6:22:D4:27:83:AF:0A:78:09:B5:7B:BB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A00DAE2B92AB579B2BFABD940
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/750ca266-da8c-3c53-8750-93f2412bfc8f.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     22394
IP address blocks:        141.207.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:e2:b9:2a:b5:79:b2:bf:ab:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=683bcc68-9704-4a48-9e51-c62c2361a520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:20:79:9d:04:4a:1f:f5:8c:65:e1:fe:24:68:
                    f0:9c:27:c9:60:85:f1:a8:cd:77:76:fb:13:13:fb:
                    aa:6f:d4:88:2b:fb:c0:f0:8c:d6:c1:88:4a:d3:74:
                    e0:b0:d8:99:53:9c:97:56:eb:8a:76:d2:8d:36:5f:
                    9a:05:6d:1e:63:b1:f2:17:d2:71:3e:02:33:17:b2:
                    41:c1:b5:58:9e:88:eb:4e:d6:b0:b5:48:49:ca:dc:
                    17:5c:ae:5c:fa:ab:a7:35:a8:2a:8d:13:55:fe:c2:
                    55:95:54:27:b3:1c:f8:b5:3c:df:c6:34:ee:df:b2:
                    9b:0b:a8:da:01:8b:d7:20:b8:82:30:1a:de:ca:a3:
                    a8:48:a7:31:af:4b:d3:e2:c2:9e:dc:cb:bf:f4:63:
                    f9:91:fc:da:17:a0:9a:cd:60:46:a6:a7:26:1a:70:
                    9b:ac:14:6c:11:c0:19:be:30:de:3f:df:76:4b:7c:
                    78:9b:76:1f:84:05:f9:50:90:d4:78:d3:2c:08:1a:
                    12:4d:d5:90:b9:70:de:0b:69:b5:1e:00:97:80:e1:
                    3e:75:c6:0d:25:4d:1f:dd:6c:5d:6f:a3:02:47:35:
                    0c:85:26:a8:96:6c:4a:ba:fb:9c:23:22:ca:05:18:
                    38:02:da:a9:23:1e:13:3b:17:20:03:84:c8:67:8d:
                    1b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:4C:9C:7D:87:B9:A3:EF:F6:22:D4:27:83:AF:0A:78:09:B5:7B:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/750ca266-da8c-3c53-8750-93f2412bfc8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.207.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:76:66:6c:9e:a4:f6:0f:f6:8e:c4:9b:e4:35:1a:88:3b:80:
         f9:6f:a8:f2:72:09:e2:38:b4:c2:27:54:f0:06:96:ae:b6:fa:
         70:05:0b:02:b7:b8:7b:0e:43:8d:63:67:f6:b5:23:ed:54:bf:
         bc:da:47:ca:dc:fb:14:45:24:dc:ba:3b:c3:64:69:aa:9d:dd:
         b7:07:7e:47:49:9b:da:91:44:b5:b6:8f:c0:04:90:ce:fe:62:
         93:4f:96:fc:0b:82:7f:7f:ec:de:b0:c7:6d:c8:76:c2:08:c1:
         a5:55:93:98:b9:75:f3:24:da:5c:64:21:1e:8f:1a:41:16:45:
         68:4a:04:cb:7d:86:e6:c8:52:e1:02:51:25:56:62:f8:01:e3:
         40:94:e4:60:99:12:d5:36:a9:c9:94:0e:53:ec:b1:77:1e:bd:
         d4:64:59:af:4c:36:4b:d5:24:1b:d0:3d:98:b3:df:71:e8:1d:
         ea:20:02:62:ea:33:7c:1a:61:c6:d3:1f:47:1a:7e:e2:41:b1:
         0c:e9:8d:0b:af:2f:c6:3b:e4:c3:18:89:da:38:22:51:36:84:
         5a:c2:dd:38:f3:5d:4d:50:62:a1:3b:9b:ae:70:71:02:81:e7:
         05:2f:b6:61:af:c5:35:d3:5e:d1:96:f5:a7:26:07:57:4a:6f:
         fc:77:b3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 08:09:39 2025 by rpki-client