Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d188354d-1790-3892-b006-629884cdeb6e.roa
File:                     d188354d-1790-3892-b006-629884cdeb6e.roa (raw, json)
Hash identifier:          gHCYw4AT06YhM6RK5vwNy5ox7YrVKculeUgtDwGWXTM=
Subject key identifier:   F5:4D:76:01:B1:8D:E0:87:38:A3:8E:52:69:C3:6E:27:15:E9:D1:4D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849EA852B04DF6652BB17454B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d188354d-1790-3892-b006-629884cdeb6e.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     701
IP address blocks:        96.241.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:2b:04:df:66:52:bb:17:45:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=8fd67441-241e-49d3-bcb7-9932da7a25d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:36:41:36:95:3f:d5:a0:ab:d9:75:f6:2c:4b:
                    a6:99:98:d3:80:1d:9b:d0:7f:f1:c4:a0:e0:81:83:
                    1e:2a:86:16:04:a1:4f:eb:7a:a8:c0:56:ee:52:51:
                    8c:26:61:0c:30:a6:42:8e:6f:66:c5:a4:b8:fb:92:
                    d4:c4:07:71:16:70:96:30:12:28:dd:9f:b9:e0:b1:
                    72:a1:b2:60:8a:82:db:24:e2:aa:99:47:07:41:66:
                    0a:98:f8:a8:56:1e:4a:e1:56:59:fb:fa:83:ef:95:
                    4d:c4:0e:2e:6f:af:f3:32:5c:b2:61:ba:f0:7f:1f:
                    cf:05:b0:ee:ed:13:c9:d4:6d:8c:e3:95:d0:97:88:
                    3b:4b:af:b4:26:6b:db:7e:9e:bd:91:98:02:f3:f0:
                    53:12:bf:2d:7c:5a:c1:37:a8:54:ce:48:43:6c:42:
                    48:67:2f:cc:af:4d:f7:45:07:a5:1a:96:8e:8b:73:
                    b6:e3:24:90:67:4c:68:78:b9:34:07:b3:c7:6a:70:
                    e7:ee:86:ba:85:c4:e7:1d:d8:ba:21:7c:c8:99:08:
                    a0:f8:e5:2a:ee:91:32:44:6f:0e:4b:51:19:78:f4:
                    10:da:88:7c:bf:d3:ee:f4:03:cd:dd:05:1d:d1:73:
                    8b:37:da:34:4c:42:e8:71:4a:39:a3:98:23:8b:4a:
                    70:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4D:76:01:B1:8D:E0:87:38:A3:8E:52:69:C3:6E:27:15:E9:D1:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d188354d-1790-3892-b006-629884cdeb6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.241.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:bf:32:4b:fe:2f:19:29:7f:92:92:c0:eb:ef:ad:f2:1d:f5:
         c3:f7:9d:1b:ee:b1:e9:fa:ce:38:4d:46:7d:b7:0c:c7:22:51:
         70:e3:a5:03:38:1c:84:b0:aa:55:39:ac:b3:dc:48:5a:f9:93:
         8e:43:3b:a4:b0:b8:46:96:db:8d:ee:be:08:24:12:61:5a:ab:
         d3:22:56:f0:3e:96:ae:88:59:7d:d2:03:71:a3:88:23:79:7a:
         99:42:e4:e5:64:5d:aa:a3:b7:a7:55:8b:5d:a8:1e:8f:47:e7:
         18:92:fe:dd:cf:07:28:5a:dd:f9:4f:b8:40:8d:78:79:bd:16:
         c6:a1:eb:54:24:62:ed:8e:10:3c:10:46:7f:c3:46:61:06:cd:
         80:a0:11:2a:2b:3a:1d:07:81:60:54:a6:a9:21:76:46:9d:b5:
         18:35:d4:d7:7e:2b:7e:5b:01:9a:70:4b:aa:29:b5:46:0c:c3:
         29:33:13:09:ba:c0:06:e0:98:78:09:e9:08:9d:8a:64:51:0c:
         56:00:7f:6b:2a:90:06:36:87:33:cb:2a:db:fe:c6:6a:7c:e0:
         56:ba:cc:2b:23:46:6f:62:86:d9:90:8e:d2:f0:cd:42:ee:b2:
         89:3e:93:4e:ca:40:1b:34:35:3b:f2:8a:30:a5:39:55:fc:d2:
         21:35:8a:0a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnqhSsE32ZSuxdFSwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk
OGZkNjc0NDEtMjQxZS00OWQzLWJjYjctOTkzMmRhN2EyNWQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDZBNpU/1aCr2XX2LEummZjTgB2b0H/xxKDg
gYMeKoYWBKFP63qowFbuUlGMJmEMMKZCjm9mxaS4+5LUxAdxFnCWMBIo3Z+54LFy
obJgioLbJOKqmUcHQWYKmPioVh5K4VZZ+/qD75VNxA4ub6/zMlyyYbrwfx/PBbDu
7RPJ1G2M45XQl4g7S6+0Jmvbfp69kZgC8/BTEr8tfFrBN6hUzkhDbEJIZy/Mr033
RQelGpaOi3O24ySQZ0xoeLk0B7PHanDn7oa6hcTnHdi6IXzImQig+OUq7pEyRG8O
S1EZePQQ2oh8v9Pu9APN3QUd0XOLN9o0TELocUo5o5gji0pw1QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPVNdgGxjeCHOKOOUmnDbicV6dFNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDE4ODM1NGQtMTc5MC0z
ODkyLWIwMDYtNjI5ODg0Y2RlYjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYPEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEADb8yS/4vGSl/kpLA6++t8h31w/edG+6x6frOOE1GfbcMxyJRcOOlAzgc
hLCqVTmss9xIWvmTjkM7pLC4Rpbbje6+CCQSYVqr0yJW8D6WrohZfdIDcaOII3l6
mULk5WRdqqO3p1WLXagej0fnGJL+3c8HKFrd+U+4QI14eb0WxqHrVCRi7Y4QPBBG
f8NGYQbNgKARKis6HQeBYFSmqSF2Rp21GDXU134rflsBmnBLqim1RgzDKTMTCbrA
BuCYeAnpCJ2KZFEMVgB/ayqQBjaHM8sq2/7GanzgVrrMKyNGb2KG2ZCO0vDNQu6y
iT6TTspAGzQ1O/KKMKU5VfzSITWKCg==
-----END CERTIFICATE-----
Generated at Tue Jun 10 15:56:37 2025 by rpki-client