Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f629e4f0-e525-3fb2-bcda-8a1b54ca0a46.roa
File:                     f629e4f0-e525-3fb2-bcda-8a1b54ca0a46.roa (raw, json)
Hash identifier:          tQArbHuTTsAa1L/28xS3HLDc1FNwrFbMSNmiYSrslCo=
Subject key identifier:   C2:CB:BA:21:51:DA:EF:97:29:22:02:30:27:54:8D:72:87:45:D5:5E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C24769B212274D88EE7A280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f629e4f0-e525-3fb2-bcda-8a1b54ca0a46.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     701
IP address blocks:        151.201.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:76:9b:21:22:74:d8:8e:e7:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=6bccf206-85fc-4f18-a7d9-4b9423aebef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c1:d7:1b:d3:e2:c5:a3:54:68:2f:30:0f:0c:
                    5f:f9:d9:fb:f1:50:4d:65:e9:7f:fc:96:31:9e:a6:
                    30:00:23:80:f1:34:e9:54:19:22:9d:c2:d9:4c:e8:
                    90:81:45:5e:29:cf:75:6a:cb:a4:2e:ab:c5:e1:df:
                    c6:1e:1d:b3:1c:5c:e4:ad:59:0d:c9:60:e8:7a:cd:
                    2a:7e:16:c4:3b:7e:c0:0e:1c:47:0e:65:b1:59:a2:
                    ba:91:a4:c1:e8:8e:4d:d8:94:b4:2d:5a:2f:e3:bf:
                    75:f8:0b:08:a0:ae:3c:1b:4a:ae:7c:3c:cf:0f:5a:
                    5c:22:32:86:a6:d7:0d:a3:c0:0a:40:6b:e6:c2:c4:
                    1d:9c:07:d6:ac:db:a0:dd:b0:89:86:e0:a2:3a:5e:
                    ce:3c:7b:28:43:5e:03:d3:79:95:b0:f1:7c:c1:f5:
                    b1:1c:1e:85:38:df:21:af:10:47:79:a2:57:55:dc:
                    aa:d2:7f:cb:a6:56:16:e3:d8:8f:74:16:a0:e8:f4:
                    a4:1d:95:ba:2e:01:ee:25:0b:38:9e:53:89:55:f0:
                    a5:ad:8a:d0:0c:b7:45:56:be:31:2e:a8:1f:3b:75:
                    5a:fa:51:9d:5f:a3:29:10:eb:a4:d5:e2:a5:b1:75:
                    d8:2e:f9:35:d9:68:cf:04:26:59:ea:2f:0f:4d:71:
                    54:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CB:BA:21:51:DA:EF:97:29:22:02:30:27:54:8D:72:87:45:D5:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f629e4f0-e525-3fb2-bcda-8a1b54ca0a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.201.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:a0:ba:67:61:fd:bb:2c:da:4f:26:2d:86:8b:49:20:66:98:
         cd:91:36:e5:42:87:c3:3c:76:94:49:c1:84:64:01:6c:96:2b:
         7f:df:8b:1f:7c:89:66:dc:b9:cf:72:f0:6a:a7:92:45:f0:9e:
         9d:0a:d1:e2:fb:5a:bc:99:2b:92:24:5d:3f:8c:62:bd:2f:89:
         d8:35:e1:3a:97:2c:24:a0:e4:e4:0f:90:89:51:41:70:63:31:
         7e:1f:3a:d3:77:58:08:ee:e8:63:5f:c6:01:3c:c5:b4:e2:ca:
         eb:8a:1c:8f:ec:72:56:45:37:a0:45:f6:c5:38:6f:55:91:d4:
         64:8b:94:b1:e0:54:fa:b6:f4:f3:42:07:ff:d5:74:93:c6:d2:
         76:cf:8b:1c:5f:d9:89:dd:fd:dc:d8:ec:4b:fc:26:ab:9a:67:
         5e:be:32:fd:c1:c4:33:49:6e:61:e0:8d:8d:83:d3:b3:ad:15:
         9d:fe:1f:ad:2c:93:16:36:c9:0a:64:26:88:79:6a:75:87:44:
         6e:95:cf:af:4c:2c:b6:eb:c1:ae:fb:76:49:1b:27:86:5e:02:
         29:48:72:26:52:e7:2f:70:c4:98:2c:db:d2:d0:ab:68:37:f5:
         1b:df:93:df:43:fc:a2:12:c2:83:ba:a3:b8:39:a8:e1:76:4d:
         5e:52:eb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:37 2025 by rpki-client