Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87d68e8c-bbf2-3067-8b12-14221422daf9.roa
File:                     87d68e8c-bbf2-3067-8b12-14221422daf9.roa (raw, json)
Hash identifier:          r4TVDleKZnbfDQagoRoa6NyRh1dghByvT+oOOMZEg1Y=
Subject key identifier:   1D:7D:5C:D0:0C:45:3B:B7:F5:C4:5B:E1:5E:75:04:94:FC:0F:97:BA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F180084729F89390472EC520
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87d68e8c-bbf2-3067-8b12-14221422daf9.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     701
IP address blocks:        71.174.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:08:47:29:f8:93:90:47:2e:c5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=69268cb3-e6cf-4b1c-b8c3-904ebd993e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:42:5c:9d:ae:14:62:d9:ee:7a:8e:9b:36:07:
                    eb:72:7a:7a:2a:33:27:f7:ee:f2:2b:ba:99:c2:56:
                    d8:65:21:47:6c:15:11:2f:59:72:6d:37:ba:c6:cc:
                    c3:7c:63:63:b2:5b:5f:3c:dd:1c:69:6c:0e:29:32:
                    11:18:fe:f8:09:21:dd:e0:df:a1:11:c3:67:7e:9d:
                    a1:5d:71:28:0c:3b:7b:87:4b:0a:a6:bb:56:99:14:
                    3f:fe:58:93:90:3a:93:50:fb:2d:77:f3:f3:17:de:
                    05:32:8f:0c:2c:aa:b0:cf:7f:ce:1b:09:39:e4:35:
                    e5:81:2c:3c:60:fc:dd:70:91:ba:0b:e2:b3:cd:0d:
                    d2:ec:d5:d5:37:72:83:9e:27:35:96:d5:07:99:ad:
                    a7:19:c0:6a:32:16:9f:a3:84:a3:a3:a0:9b:d6:be:
                    66:7d:ef:36:30:c2:0b:58:29:c4:59:81:5e:5f:56:
                    9d:06:58:3e:eb:a7:6f:24:1a:88:00:ef:4f:cd:c4:
                    2c:1c:4b:7d:4d:f4:f6:c0:23:1a:bb:b5:98:4c:cd:
                    88:b9:b4:c2:52:fd:42:53:4b:1d:ec:5a:4e:fe:7d:
                    42:c4:1a:ac:df:6b:f7:a0:54:f8:74:e7:67:b6:bb:
                    bc:d1:48:12:8b:19:41:2f:35:2b:71:6a:63:3c:31:
                    7c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7D:5C:D0:0C:45:3B:B7:F5:C4:5B:E1:5E:75:04:94:FC:0F:97:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87d68e8c-bbf2-3067-8b12-14221422daf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.174.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:1e:63:5f:e6:1f:7e:5f:51:67:c8:32:bd:ab:63:83:25:25:
         bc:0a:84:7f:a6:07:a9:82:05:5b:bb:9f:0e:c8:94:69:40:ca:
         fb:0f:0b:8c:84:a3:06:2b:8e:af:1a:86:2e:41:96:06:35:3f:
         5d:23:07:f1:86:dd:6a:88:fe:e2:b4:a6:fe:dc:a6:3c:b6:1b:
         02:56:bd:19:bb:aa:f7:38:a0:88:77:09:3c:47:d8:37:ae:69:
         ee:e6:74:c2:24:46:96:b4:14:1e:4b:37:33:b6:be:d6:7e:92:
         a2:5e:e9:e1:b8:e2:c2:9f:30:5c:30:37:b1:1f:8a:c9:5a:b2:
         09:ae:65:e1:c0:b2:e3:88:7a:f3:12:c5:55:15:bb:ba:1b:bb:
         ec:47:c9:44:ce:32:f4:b9:d7:93:81:c9:49:0f:14:be:b3:33:
         65:bb:b0:2e:7a:25:d7:a0:03:c7:c7:bb:e1:9d:ed:0a:ca:6d:
         25:45:16:bd:db:50:91:1b:d1:cc:20:84:7e:ee:83:d8:72:99:
         a1:e4:c2:01:47:d4:1b:9b:ae:98:3f:d2:c2:89:3b:4f:ed:da:
         37:af:37:6b:92:e0:1c:6d:89:8d:99:93:26:a0:f2:c8:c5:27:
         db:54:68:9d:05:ef:83:ab:e4:f1:35:4f:85:66:05:70:16:b1:
         c3:d5:49:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:29:52 2025 by rpki-client