Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be735685-067e-32e1-980d-0d33feb69b8b.roa
File:                     be735685-067e-32e1-980d-0d33feb69b8b.roa (raw, json)
Hash identifier:          92hU915+5HAOjjVhEUiW9baZDYmLd2plDWJKoEohZmc=
Subject key identifier:   81:73:F8:A1:EB:3F:2D:7D:CF:C5:E2:2F:EF:85:A8:BF:31:DC:53:F8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858490B4C2D8A9F8C265E264B1680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be735685-067e-32e1-980d-0d33feb69b8b.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     701
IP address blocks:        96.233.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:2d:8a:9f:8c:26:5e:26:4b:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=cb2dd7da-871e-4377-b455-d85daeec85b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7c:24:3a:10:c9:61:0d:d8:58:fb:6f:61:8a:
                    73:2f:ff:33:18:3c:0e:7d:cb:3a:a8:05:78:80:a1:
                    ed:43:53:07:e7:cd:ea:72:7d:8a:26:ed:e1:73:fe:
                    6c:cd:b7:7e:4b:88:19:b8:17:7e:73:58:2b:f2:4d:
                    d5:99:98:e5:bd:0f:91:24:ea:0f:c6:f9:53:31:db:
                    08:b6:65:be:f8:08:c7:4e:39:92:01:c5:c5:4a:fe:
                    b0:b0:58:cf:19:cc:59:f1:5d:39:5a:b1:c3:3d:d0:
                    cb:5a:78:b9:b7:f2:38:47:40:dd:7c:c2:01:24:8e:
                    f1:ff:95:b0:9e:36:19:1b:26:bf:18:7a:3d:70:29:
                    f0:52:ab:2f:77:af:e6:c4:4f:fa:ac:dd:b3:02:ff:
                    2b:e3:c3:6c:e3:7c:ad:e1:ee:1c:80:7e:0f:fa:a7:
                    a5:92:d0:42:79:bb:68:06:cd:16:a4:2e:d3:ed:60:
                    e4:73:0a:d6:32:ad:be:58:48:71:39:25:ac:a7:02:
                    ae:2f:7f:b9:4b:30:1e:8d:ba:11:f9:e5:b1:5d:53:
                    aa:99:9d:2a:9a:b1:d1:63:b0:e4:f3:f3:8f:9a:81:
                    e6:33:90:ab:89:60:9e:72:63:59:3a:96:90:12:19:
                    e4:12:97:c1:20:b0:08:df:91:75:cf:f2:29:6b:ce:
                    ed:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:73:F8:A1:EB:3F:2D:7D:CF:C5:E2:2F:EF:85:A8:BF:31:DC:53:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be735685-067e-32e1-980d-0d33feb69b8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.233.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:5d:7e:c7:e9:b2:34:cd:d5:19:48:ef:dd:c6:8f:81:d3:90:
         a4:b2:ba:a8:6b:09:f9:f3:bb:80:16:79:0d:3d:ef:ae:22:02:
         46:74:bd:3f:b0:5a:7c:8d:3e:74:9f:e7:8e:0b:fd:25:dc:03:
         5a:07:ae:b7:77:96:a2:d7:a6:ad:3a:28:26:e4:c5:59:84:18:
         61:b5:55:bb:ba:e3:b5:b8:72:0e:cd:66:dc:c7:f8:0a:10:6b:
         44:ba:81:82:10:9b:88:0f:12:ef:5f:a8:4b:64:be:63:65:3e:
         d5:1a:4b:c7:3a:f8:93:ea:63:3e:cc:03:3d:59:fd:f1:16:bb:
         ff:3e:9a:5e:0d:13:92:9a:e3:a1:85:bf:b4:45:3a:97:1b:f5:
         60:8f:57:0e:cb:dd:40:48:5c:e7:f6:09:7a:da:40:37:b1:ab:
         75:ee:2c:9b:b1:83:7f:f4:0d:71:5c:59:dd:f0:c5:25:13:b6:
         bd:7a:d9:30:3a:6a:da:79:02:ca:ec:8c:17:84:d3:74:a5:89:
         9c:1c:ab:6b:57:92:4f:23:96:82:95:9c:9a:1f:bd:0e:ce:d7:
         42:f9:1c:00:69:db:d9:b1:e1:9a:33:70:3a:b3:6a:cf:d9:b2:
         13:1d:c3:9c:8c:f8:d2:94:e1:7c:89:17:d9:a6:f5:75:52:a1:
         ac:d9:f8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:47:24 2025 by rpki-client