Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/926dbc4f-22bd-31f8-ad17-9580e943ea49.roa
File:                     926dbc4f-22bd-31f8-ad17-9580e943ea49.roa (raw, json)
Hash identifier:          Fe99RsTZNKbrtuEoBlsoSbaQIh5ArNhkEj1YTD2f75s=
Subject key identifier:   60:EE:57:0D:FF:39:52:A8:E2:D2:6F:92:24:A2:D2:3D:01:29:59:28
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C244D0104B4AD853270C500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/926dbc4f-22bd-31f8-ad17-9580e943ea49.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     701
IP address blocks:        71.250.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:4d:01:04:b4:ad:85:32:70:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=f8711a16-cfdc-42a1-ac7a-f14fd5f0c9b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:07:40:6d:e0:0b:99:56:93:45:dc:bc:b9:20:
                    a4:9a:c3:59:bd:51:85:4a:dd:fa:58:21:ee:a5:f5:
                    6c:a6:e5:58:fd:cb:57:a4:73:80:a8:04:2f:ce:96:
                    25:7d:7e:ae:c6:5b:fb:d1:35:ac:59:4a:3d:ca:af:
                    0a:9d:f0:c2:b0:8d:14:93:a4:c4:55:7f:45:73:f3:
                    d2:4a:15:b2:4a:85:03:47:00:a6:9b:18:74:8d:91:
                    9f:68:1e:0a:66:49:f4:a5:67:49:c2:f6:0f:78:e5:
                    fa:ee:a0:7f:6f:96:c8:a9:ca:9d:2f:c8:87:29:b0:
                    ef:7d:a6:3a:1e:7a:a6:6a:83:2a:5b:73:ce:53:18:
                    61:7f:ea:f4:db:47:ba:eb:01:b9:fe:5d:18:9f:da:
                    4f:65:23:3b:11:0c:97:f5:ad:ef:57:dc:5c:16:0c:
                    c7:4e:b2:49:da:d1:5d:6f:06:60:d3:0a:d0:1f:f5:
                    f6:9f:e1:12:1f:ed:24:d8:8f:f2:cf:c2:d4:49:de:
                    57:ec:89:be:31:c5:a7:89:06:f3:04:88:b2:fe:32:
                    62:13:55:da:77:9d:1d:32:ef:9d:e2:2a:c5:34:30:
                    30:ed:a7:51:d2:94:00:d9:c6:d3:71:07:61:3f:f2:
                    fd:f3:99:7f:50:48:58:82:d9:b7:a8:00:15:0c:48:
                    3c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EE:57:0D:FF:39:52:A8:E2:D2:6F:92:24:A2:D2:3D:01:29:59:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/926dbc4f-22bd-31f8-ad17-9580e943ea49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.250.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:99:b1:c1:cf:0b:7c:25:98:1c:35:43:bf:c0:c9:eb:59:48:
         1b:24:da:dd:3e:e6:a1:93:6c:6c:27:78:5b:2f:08:d3:56:08:
         fc:93:9e:3c:06:3e:80:62:c5:8b:92:8e:57:1d:35:0b:2d:e5:
         69:48:ef:c9:14:2c:70:d6:eb:7a:b9:ce:bb:4b:3c:12:86:65:
         dd:08:7f:14:be:59:aa:41:e9:cd:b6:44:16:1e:86:45:de:e0:
         03:1b:8a:47:f0:4f:f9:00:8b:cc:2f:44:87:30:92:65:ba:c4:
         55:d6:b5:0c:f9:c8:0f:24:b8:29:37:bf:cd:5d:08:7a:71:83:
         94:6b:9a:d7:09:70:8c:5a:cb:d5:ef:b8:fb:37:e3:7d:ba:d8:
         5e:11:13:1c:af:a9:a6:b1:da:10:df:be:bf:63:87:20:20:5e:
         fb:a2:19:79:f0:f8:70:5a:1b:b5:5d:a9:0a:51:6f:5f:f4:6b:
         43:86:9d:bf:b3:68:18:c7:e0:30:46:08:1a:b3:84:89:bb:3e:
         80:b5:d4:2a:c2:36:b8:30:d0:ae:4f:a5:0e:9b:d3:4d:28:99:
         30:1b:29:92:8a:20:87:66:11:f8:f7:b7:6d:48:ef:54:f0:23:
         65:26:2b:a3:72:bc:cf:fa:e6:1c:d1:91:a9:7c:e7:77:45:3e:
         23:e3:3a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:43:56 2025 by rpki-client