Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b1601996-b300-33cd-a7c7-720d86412bf5.roa
File:                     b1601996-b300-33cd-a7c7-720d86412bf5.roa (raw, json)
Hash identifier:          zd7JRoO2ef7mWA0xall0F+tNw9J7+uF4ht/K4F8EAXg=
Subject key identifier:   D4:04:EB:EC:20:09:64:91:39:36:EB:96:54:58:81:20:B7:4F:8D:BE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858491246F31C738A96521646BD00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b1601996-b300-33cd-a7c7-720d86412bf5.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     701
IP address blocks:        71.245.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:f3:1c:73:8a:96:52:16:46:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=3a91bd6f-210a-42e3-ac09-61812eceab90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7c:f6:80:74:83:d8:eb:d8:87:3b:e4:fc:11:
                    e7:61:2a:2d:72:d8:61:f1:7a:18:dd:03:17:cc:b6:
                    69:09:80:ec:35:48:78:8d:2f:4f:6f:ee:47:d9:cf:
                    b0:34:66:91:bd:02:d5:a8:dc:42:0c:f4:8b:ab:cd:
                    bb:25:04:3f:28:75:f4:f0:3a:53:c2:9e:33:bd:af:
                    93:16:21:99:df:5f:14:20:c9:51:a7:05:d1:5c:51:
                    68:0e:7d:b2:58:bb:ae:95:84:e3:44:28:e8:3e:e6:
                    c2:0a:d7:93:af:24:8d:66:93:87:41:ff:85:b1:46:
                    0b:22:72:11:6b:bb:03:af:78:3b:85:2e:53:1f:e8:
                    fb:9c:2c:f5:0c:da:df:95:cb:46:86:ce:f7:9f:9f:
                    d5:50:82:ac:14:2d:42:1a:35:4f:4d:e7:7d:b6:70:
                    fd:af:13:2a:9b:cf:2a:d1:b1:bb:b3:06:7f:71:2d:
                    ab:3a:e2:04:26:7a:08:39:f2:1d:b9:05:6b:8c:bb:
                    62:c0:2e:d8:45:c9:cd:f0:45:60:3f:96:1e:8a:b2:
                    a7:1a:44:3a:e9:89:c0:95:65:b8:b9:6f:53:2a:d2:
                    f6:4b:e4:7d:01:3c:c6:53:e7:94:22:22:73:7d:7b:
                    95:a0:3e:e2:3d:57:c8:c0:ef:32:ff:9b:21:d3:f7:
                    c0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:04:EB:EC:20:09:64:91:39:36:EB:96:54:58:81:20:B7:4F:8D:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b1601996-b300-33cd-a7c7-720d86412bf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.245.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:72:f0:d3:9d:ba:ce:89:3d:5f:16:7e:6c:08:a8:e9:2b:60:
         d9:71:49:f2:d7:7a:21:6f:ef:09:48:76:5f:67:b1:cc:81:9a:
         fe:e7:12:03:0c:9f:8d:db:56:0b:a7:00:3d:df:aa:ed:8f:83:
         34:ee:5f:59:61:f1:7b:02:96:13:0b:88:b0:a1:af:85:d2:a9:
         84:15:28:e3:79:dc:bb:74:39:5e:e3:1e:28:7b:4c:73:f3:83:
         f7:44:98:16:a6:fc:88:bf:a5:0e:b5:86:66:49:3c:ae:d6:fd:
         cb:21:c5:4f:34:93:d2:c4:8c:ac:a7:dd:88:20:a3:64:a1:0b:
         6d:b5:fb:09:c7:b8:9d:1f:18:de:c0:46:5e:10:2a:02:e5:f2:
         90:e1:cd:da:b9:c9:51:c1:9e:24:7b:89:3e:be:63:9c:1f:24:
         8a:47:db:af:5c:14:ae:f8:06:ba:10:ec:8e:28:38:e5:34:8d:
         6f:95:4e:e3:aa:5c:3b:e2:f6:aa:d2:92:55:ce:21:01:8d:a4:
         a9:dc:4b:87:03:a4:8c:ec:2d:fa:2f:ce:7b:99:e0:d4:1a:29:
         74:1c:b3:c7:f6:2e:93:75:d6:2d:85:cb:17:d1:50:8f:ea:0b:
         87:f6:db:5c:9c:54:d7:57:a8:db:1b:d0:e3:73:51:3f:e3:9f:
         0b:84:99:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:21:55 2025 by rpki-client