Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/785694eb-73f8-3522-a96b-8d8c8ea431b8.roa
File:                     785694eb-73f8-3522-a96b-8d8c8ea431b8.roa (raw, json)
Hash identifier:          W0mKUs2BLJ8DnIPYJO8SB1L65XraViVQO64StEsQ7hU=
Subject key identifier:   29:7F:0C:2A:E5:08:A6:BF:A3:13:15:E0:5F:60:EA:7E:88:94:E1:E2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858490B4C2994DC1BFDE2AD100E84
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/785694eb-73f8-3522-a96b-8d8c8ea431b8.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     701
IP address blocks:        96.239.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:29:94:dc:1b:fd:e2:ad:10:0e:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=a8c1d32e-893c-4f82-bd2f-1fabd6302c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:08:86:65:e4:57:54:7f:da:c0:70:2b:1e:98:
                    ed:55:37:ee:28:e2:90:90:f0:8c:f3:cf:d8:c3:d5:
                    37:6c:b1:9e:c9:2c:9b:9b:0f:70:d9:57:a7:82:e6:
                    d3:08:89:ee:50:94:25:1e:0a:6c:34:0d:d6:94:7e:
                    2c:d2:9f:38:3e:bd:57:ad:35:62:a0:56:ea:11:27:
                    10:7e:45:bf:3a:1f:54:ac:eb:c0:ed:2b:f7:9f:3d:
                    37:b1:bf:f0:70:07:dc:ff:df:ca:e7:a1:8c:d4:72:
                    9e:9b:ac:ce:4f:3c:33:e2:01:81:13:b3:3f:09:90:
                    28:a7:70:f1:74:b8:ed:68:fd:42:d2:b7:31:1b:1c:
                    7d:8d:56:9c:c7:5f:9e:98:fc:78:72:3f:78:b6:07:
                    46:c5:e5:6f:d0:85:cf:ea:9d:e4:71:61:f5:94:64:
                    ed:6f:fd:70:8c:54:51:72:cd:83:30:21:2c:72:65:
                    6e:52:87:4e:40:63:95:e1:f6:5a:26:46:7c:1f:29:
                    27:55:81:2a:1d:91:81:af:9f:94:73:df:c9:0c:43:
                    e1:9f:b3:c0:73:f8:80:28:de:9d:85:e6:18:37:7d:
                    65:46:f7:f7:97:c6:a3:a1:72:65:9f:36:6f:75:13:
                    16:1b:f7:15:61:4f:b8:06:b8:b8:1a:52:99:36:4a:
                    a3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7F:0C:2A:E5:08:A6:BF:A3:13:15:E0:5F:60:EA:7E:88:94:E1:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/785694eb-73f8-3522-a96b-8d8c8ea431b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.239.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:24:32:0c:65:ba:97:b8:c3:ce:1f:50:19:49:3a:e9:30:0b:
         92:16:fa:f9:fb:87:01:90:6d:f1:b6:08:89:af:b6:e1:6e:cb:
         e9:41:67:ec:58:c7:11:8c:b3:90:59:70:fd:5e:f4:03:cc:f4:
         f8:c0:75:25:e8:cf:36:bf:f0:fd:49:94:a5:31:8d:64:7a:d3:
         85:95:df:fb:93:02:06:df:a9:e8:b8:a1:43:36:74:f4:48:29:
         0b:da:46:c1:6f:77:19:4e:a7:c6:d8:b5:8b:ec:de:b0:49:66:
         4c:34:74:28:0d:da:74:6e:9f:6f:b7:58:31:2a:c7:cc:d6:de:
         e9:8f:9e:8e:f5:32:55:a0:ce:d0:0b:db:e8:3a:c0:60:6b:f4:
         9d:36:17:e0:b9:77:93:49:9c:a1:6b:10:19:c9:37:a3:9c:3e:
         53:2b:bf:47:8c:10:d2:67:fe:54:a8:32:d9:d0:b3:7c:e6:d9:
         01:d0:41:f7:ae:1f:11:66:51:85:15:7d:31:e7:01:57:5e:da:
         26:fe:06:62:0e:ed:97:a6:50:67:3f:c5:6f:92:fc:12:29:bf:
         b6:3d:0e:2e:fa:4b:9f:3d:e3:61:ab:41:77:b9:d5:7b:b4:16:
         87:73:83:ac:bb:08:78:fa:25:11:56:e1:fd:60:2c:e3:3a:a4:
         d1:52:ca:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:44:13 2025 by rpki-client