Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a34eb725-03fc-3835-b3ed-fce6d505d8b7.roa
File:                     a34eb725-03fc-3835-b3ed-fce6d505d8b7.roa (raw, json)
Hash identifier:          OAcMtmftJ4L/RgPyEnlQBcEiN1ckSI0HAR5OD/a7f18=
Subject key identifier:   CC:C5:25:62:11:88:A9:83:17:AD:B8:1D:56:70:84:46:8A:80:5C:12
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B36F67AFBD5B841B76C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a34eb725-03fc-3835-b3ed-fce6d505d8b7.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     701
IP address blocks:        151.199.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:36:f6:7a:fb:d5:b8:41:b7:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=697bcef3-2ed0-42cb-a505-baad5204ac1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3f:3c:ff:a6:3d:41:60:fd:c0:90:d4:ee:cf:
                    a5:06:d7:cc:17:b4:6f:b5:4c:a0:ee:a3:da:2d:b6:
                    8e:5b:1d:06:ea:f2:2a:d2:ba:dc:db:75:44:c7:1a:
                    81:04:d3:b1:41:0c:a5:8c:cd:a4:a0:b0:4f:ad:df:
                    ee:17:fd:54:83:ba:c0:1d:da:7d:25:03:a0:5b:bd:
                    97:73:4e:4f:e1:f5:fd:55:ea:b0:d8:b2:e1:85:bb:
                    5b:c6:d0:f0:b9:48:71:0e:da:0d:f0:fa:9c:59:60:
                    2b:25:d5:be:10:4d:80:ad:c3:6b:83:29:ed:2c:3b:
                    65:1a:45:27:4e:81:2a:38:90:8f:a8:0d:70:0a:d2:
                    f0:f8:6b:b1:a9:aa:cd:72:c1:87:48:c5:c8:d6:ad:
                    2f:58:52:48:44:af:56:ff:a4:d8:55:49:ed:fe:1a:
                    16:8c:3c:96:9e:4b:60:b9:ca:a5:ac:0d:ac:7b:ef:
                    8c:c9:7f:f0:a3:23:f5:2f:2e:f8:2b:94:7e:c4:4f:
                    1c:e1:16:4a:eb:af:92:13:bb:cb:35:6e:0f:89:0f:
                    e1:7e:f3:f0:83:da:14:23:44:2c:13:fc:7c:d3:05:
                    0c:f9:0d:f3:ea:90:e0:0b:2b:94:16:eb:46:a1:a3:
                    02:18:b3:7e:af:d6:f4:cc:31:25:9e:84:de:e2:a1:
                    93:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C5:25:62:11:88:A9:83:17:AD:B8:1D:56:70:84:46:8A:80:5C:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a34eb725-03fc-3835-b3ed-fce6d505d8b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.199.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:65:d3:e5:83:0b:81:2b:eb:31:12:52:75:84:6e:d1:8d:4e:
         56:ff:90:b2:6d:90:7e:ef:98:dc:ae:0c:10:0d:89:42:52:62:
         98:b5:91:05:e8:ac:1e:a6:85:1a:7c:63:20:d7:ee:da:be:cc:
         c9:74:5d:09:8d:d2:70:ef:2e:2e:1c:34:fb:d2:3c:27:01:1c:
         b0:f6:7f:47:c4:da:76:b1:3c:83:69:c4:40:6e:79:8e:c4:bc:
         b7:fd:7f:82:0b:e2:e6:61:6e:ee:ef:df:7a:70:77:89:d5:42:
         e3:a8:19:1f:98:73:ba:f3:c8:2d:71:39:ee:05:22:e3:4f:ad:
         99:12:f9:1e:5f:9d:3d:55:99:bd:b5:cb:ec:c3:c3:d5:5f:13:
         90:12:d4:d7:ea:83:39:b5:cc:a5:5f:22:b0:41:5f:12:16:36:
         6c:cf:a4:f1:9c:4e:bc:ea:29:1d:1c:ba:80:42:9e:f7:61:21:
         e0:75:a9:1d:f6:dc:3c:c3:04:d2:c0:d4:da:96:c1:fc:ae:c6:
         57:25:22:ec:78:aa:00:d1:c9:4b:a5:67:ae:bc:37:9c:5f:7e:
         1d:d4:d4:6c:b9:67:06:c3:1e:b6:6f:19:7f:5d:3c:2f:21:53:
         17:57:91:89:4c:b8:80:93:c3:55:48:2c:2d:51:9b:be:0c:42:
         02:dc:21:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 22:01:58 2025 by rpki-client