Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e57b15dc-7a6f-3cf2-9056-f45813b67ae8.roa
File:                     e57b15dc-7a6f-3cf2-9056-f45813b67ae8.roa (raw, json)
Hash identifier:          V+KuBv8SYSoVRzTly5tAR3OgawM48kn2KhQbRdOgFJE=
Subject key identifier:   5B:34:38:66:73:45:7F:54:3B:5F:5E:60:29:C3:8E:28:2D:AE:55:AB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F17FFF107FC250A428350840
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e57b15dc-7a6f-3cf2-9056-f45813b67ae8.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     701
IP address blocks:        71.251.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:ff:10:7f:c2:50:a4:28:35:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=e2da260e-097d-45c1-bbcb-041ba1c2031c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cd:8f:ab:40:ca:d7:2a:56:10:ef:83:e1:51:
                    da:1e:9f:81:5e:79:b8:2d:c5:4d:6f:89:aa:a9:6a:
                    83:b9:26:07:d5:fc:35:d4:31:71:7f:5a:74:29:bb:
                    fd:68:34:06:50:f7:c7:09:a1:18:7e:5e:19:9c:5d:
                    0a:7c:a8:db:0e:98:2c:79:26:42:95:94:50:63:be:
                    3e:f8:64:47:8d:38:61:5a:dc:f2:3b:f2:3a:c8:bc:
                    91:b5:20:48:56:5a:81:26:fd:72:58:71:d9:d8:5b:
                    88:47:1e:81:8f:40:a2:05:39:56:fd:ed:c1:31:5e:
                    bc:2d:d8:32:30:a5:fa:8e:fc:b0:c9:48:73:39:4a:
                    9c:d8:f9:3d:40:ca:3b:a9:03:46:ed:1d:df:d5:77:
                    3a:c7:2d:8d:4c:a3:71:6d:77:f4:e4:01:3e:2a:59:
                    2f:e7:53:9f:fe:6a:77:a1:26:8f:75:a5:dd:4a:b2:
                    f5:30:f7:e8:4f:15:18:25:6f:87:36:86:1f:92:3a:
                    dd:84:4e:56:88:90:1c:66:47:17:67:ba:ce:05:40:
                    bf:f5:2c:53:99:8d:19:30:a2:94:1e:21:b7:bd:06:
                    66:9e:c1:c1:74:ab:c1:ed:f4:7d:f3:2b:6b:89:80:
                    5d:86:45:78:2b:37:86:94:d1:63:07:00:96:b8:77:
                    80:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:34:38:66:73:45:7F:54:3B:5F:5E:60:29:C3:8E:28:2D:AE:55:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e57b15dc-7a6f-3cf2-9056-f45813b67ae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.251.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:a8:b8:58:b9:6f:8d:1c:ae:7e:db:3f:7d:d8:d6:93:91:75:
         c5:68:6f:64:4a:d8:55:3e:84:33:75:e9:c4:53:f6:a0:05:ac:
         22:c1:46:a5:d6:3b:47:cd:da:c2:40:d9:aa:7e:c4:3c:bd:65:
         98:42:37:9d:92:59:d0:e9:76:c0:25:3b:15:bc:f9:7c:f5:a8:
         c1:42:b8:bb:07:a8:c3:7f:a0:26:4d:63:db:b8:82:b7:d5:3b:
         e6:25:4a:19:9d:fc:92:d0:6f:e0:a3:44:4d:01:b9:3d:32:2e:
         ca:59:01:a3:53:6e:93:5b:33:75:83:2b:f6:c3:67:e7:89:c5:
         a1:ec:42:ce:76:40:0e:86:9c:f5:35:8e:21:89:5a:ba:26:18:
         b0:ba:77:e8:28:ae:f9:f8:8f:fd:55:21:bb:24:b6:8f:d6:c6:
         0b:fa:aa:5f:ff:df:ae:a8:2a:a3:98:e7:95:84:d8:b7:da:8d:
         7e:74:65:02:58:d8:41:24:1c:db:cf:b7:34:47:ad:9d:52:cc:
         10:14:8c:44:43:10:a7:47:59:38:42:52:38:31:91:bc:75:5f:
         95:9a:0e:a5:2f:60:0b:27:40:52:d5:b0:13:48:b8:58:3c:50:
         14:37:b8:31:f1:54:7e:3f:7a:e4:23:44:cd:d6:0d:1e:b1:a9:
         8d:c2:2d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:43:05 2025 by rpki-client