Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0c89c9f-bd3f-3145-818a-c7366acbfc23.roa
File:                     c0c89c9f-bd3f-3145-818a-c7366acbfc23.roa (raw, json)
Hash identifier:          hCOPgWp/6kDOAaKMxd8TNfZzBbCkRIN5iOB6D9ykRos=
Subject key identifier:   96:AB:18:52:30:9D:47:75:76:E0:BE:4E:1D:95:20:4A:D5:17:E1:A5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858491246D7046415406064F35480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0c89c9f-bd3f-3145-818a-c7366acbfc23.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     701
IP address blocks:        108.41.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:d7:04:64:15:40:60:64:f3:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=6fa46776-a2c0-4ce1-b3bd-b10c4fa46e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c7:af:54:ff:ce:39:1a:d7:2a:3f:de:43:85:
                    aa:c6:58:9b:4b:50:e4:53:81:38:cd:44:e7:a3:48:
                    0b:7e:99:71:a9:8e:b2:d6:9e:47:c8:4e:55:32:dd:
                    c1:69:38:77:48:e5:77:c3:55:27:40:6f:4d:0a:14:
                    b5:d2:7e:15:e4:14:a3:2b:d6:95:a2:a5:36:11:82:
                    ba:31:af:4b:25:7d:b6:86:ed:82:01:39:d0:af:f0:
                    c6:f7:13:d4:72:f1:b3:3a:f8:08:2c:03:4a:ae:71:
                    c3:00:5a:f5:1e:e1:78:9d:fc:ec:86:d6:cb:0a:dd:
                    fd:f0:18:e2:17:dc:dd:98:65:12:45:91:e6:5a:6f:
                    ef:ea:83:2c:ba:18:7c:b6:41:fe:de:9c:68:1c:c2:
                    d8:f0:02:81:94:19:06:fc:45:cc:c3:bb:de:0d:ed:
                    c9:ec:74:ff:17:ff:d5:d5:44:12:90:0e:40:1c:39:
                    09:f1:5b:a9:bf:e8:05:1b:ec:cb:de:3c:d7:d6:fb:
                    3d:f5:a8:36:5e:e1:83:b8:e4:3c:f0:d4:0f:ac:f7:
                    07:c2:56:93:b2:71:9b:51:3d:55:25:c4:5a:88:07:
                    f1:d3:9a:a7:78:2c:08:90:5f:a4:88:f7:77:20:4c:
                    3a:22:68:96:6e:7a:64:0c:a6:ab:57:bb:c9:ce:51:
                    98:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AB:18:52:30:9D:47:75:76:E0:BE:4E:1D:95:20:4A:D5:17:E1:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0c89c9f-bd3f-3145-818a-c7366acbfc23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.41.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:d9:e6:9a:ec:fe:ff:da:c1:7e:7c:96:8a:fd:7e:0a:a2:a8:
         90:2c:d7:fc:eb:cd:d0:a6:97:3d:cb:e0:13:39:78:3e:75:a6:
         a2:9c:28:6e:79:4d:2e:d7:cf:c7:98:e8:94:f3:8a:ab:bc:0d:
         4f:c0:0e:98:9c:01:13:b3:81:a2:5b:23:d4:12:7a:18:e3:41:
         76:ab:05:46:ba:1b:fe:f0:c7:4e:15:f4:18:47:94:76:08:57:
         8d:c5:02:a7:b3:f8:54:1a:d8:30:8c:60:fa:53:eb:4d:76:e9:
         99:11:9e:f2:08:0c:aa:5a:86:cb:d7:f2:87:72:e5:ea:fc:2b:
         be:55:2f:1a:ea:3b:0d:16:38:a1:02:33:6d:c2:37:45:34:34:
         4e:da:1a:95:cf:a5:79:3d:be:9e:e8:63:2b:e6:ef:d0:aa:1a:
         81:1d:8f:28:73:a7:0a:13:b6:b3:4a:c5:32:49:20:a8:dd:09:
         5a:a2:da:2a:5b:b3:e0:85:00:0e:09:07:6a:86:26:44:65:18:
         33:a6:74:1d:b8:3f:75:ef:64:58:94:30:75:8d:47:67:d7:d8:
         7c:3a:9c:94:5c:e1:6c:b8:2f:4a:c2:1f:14:fc:91:da:c1:d4:
         e5:04:a7:46:47:50:d9:7d:28:9e:7e:41:a3:b6:da:70:7e:ff:
         d8:d1:40:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:47:23 2025 by rpki-client