Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f30f6aa9-81ab-32b1-90c5-d2fae0cf63fd.roa
File:                     f30f6aa9-81ab-32b1-90c5-d2fae0cf63fd.roa (raw, json)
Hash identifier:          eQ0xAzfAz2THiy0vgQ0TtnItYeDeiSI2J58MDP+Kbcc=
Subject key identifier:   0A:F4:A8:CE:90:F5:53:C0:54:8D:D8:C1:D0:19:EF:98:EF:93:FA:DE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858491246F5CD776FC973DC89A880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f30f6aa9-81ab-32b1-90c5-d2fae0cf63fd.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     701
IP address blocks:        96.253.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:f5:cd:77:6f:c9:73:dc:89:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=cceca8fa-4400-4d98-9ab1-0f8b48817004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3a:d1:cf:8d:41:9d:5d:b9:c5:dc:1b:9d:63:
                    88:30:63:e6:39:a7:00:15:70:fb:02:d9:7b:3e:5c:
                    87:f9:c5:a2:17:7b:4e:5f:e5:af:05:0e:a9:f6:da:
                    c8:f2:13:c9:30:a6:3f:f7:6a:93:e2:61:47:53:fd:
                    f5:ec:be:13:53:8a:26:90:d1:aa:c8:28:4e:19:13:
                    b9:0c:ae:49:3a:21:e7:d7:f6:84:f6:ad:a1:32:8c:
                    c8:55:da:1f:c9:89:d5:76:99:24:c8:f4:58:31:77:
                    c4:a1:10:69:01:f4:e0:fe:31:1b:50:9a:55:fd:15:
                    c7:2d:fc:3f:f7:7f:73:83:18:a4:c9:d9:e9:1b:be:
                    13:82:4f:e0:3b:d5:f9:30:9c:fd:28:41:67:90:ca:
                    22:7b:5a:3d:ab:f8:eb:2f:7d:64:98:f0:16:3d:0e:
                    5a:7c:e6:74:b7:24:f6:cc:b5:3a:f6:3f:c3:e5:ab:
                    75:4e:c3:b1:55:0d:64:4c:a1:6c:87:c2:66:e1:be:
                    a1:52:d9:ec:28:57:a0:1a:d0:e9:4e:9a:9f:02:f6:
                    3e:9a:db:55:b0:ed:4a:ce:2a:d8:11:80:95:43:2a:
                    fa:4b:f9:60:c9:38:66:01:ec:20:55:7e:d7:22:b0:
                    0b:6d:8c:a3:49:79:5f:ac:03:ea:c6:17:b8:04:b2:
                    75:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F4:A8:CE:90:F5:53:C0:54:8D:D8:C1:D0:19:EF:98:EF:93:FA:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f30f6aa9-81ab-32b1-90c5-d2fae0cf63fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.253.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:01:83:a9:46:07:83:35:77:39:ce:75:0b:fc:44:43:22:20:
         70:6a:f8:c4:fc:0c:44:9d:aa:ae:d2:7b:4e:a1:a5:e1:39:99:
         be:3f:2c:11:f0:49:f5:f3:b5:96:21:38:2a:5a:34:6f:71:92:
         5d:f0:ad:20:06:38:ec:f8:e4:15:33:02:f2:2b:2b:ba:ac:b4:
         44:f8:9d:81:39:1f:6e:2b:d2:a3:b8:b4:4e:dc:69:36:e7:7b:
         fa:2b:a0:d6:8e:12:3e:d4:94:85:2e:5b:cf:08:02:b7:0d:64:
         c7:61:ba:d3:ba:58:85:5d:7c:5b:ae:54:ef:5e:c6:11:13:00:
         77:bc:9a:ba:2a:a3:65:33:33:8c:e4:0b:34:c5:62:be:06:ae:
         20:7d:20:26:79:8b:4f:7c:d7:09:38:79:4d:ed:fd:51:11:fb:
         74:1a:a4:37:fe:51:f0:bf:7e:28:76:70:d0:0e:f2:50:ea:41:
         53:b4:31:32:62:fe:64:1d:06:b5:2a:4e:eb:bc:62:5e:ea:55:
         aa:fa:c4:2a:68:c5:f2:07:08:fe:27:01:d4:9a:51:32:87:bf:
         c1:07:ac:bf:4f:58:6b:09:01:53:be:74:d8:04:17:85:ee:6c:
         f7:b2:d2:14:df:71:2e:99:21:1a:fb:2f:94:27:9e:c7:f4:bd:
         b4:0b:ed:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:50:10 2025 by rpki-client