Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa4dc8d0-2d08-36f8-ae48-702a2d92ba08.roa
File:                     fa4dc8d0-2d08-36f8-ae48-702a2d92ba08.roa (raw, json)
Hash identifier:          tLLuSY8et5B+ovQ8L9eDrLU/08hHWNApyHp2gM5GTc4=
Subject key identifier:   B4:48:67:B1:C0:DD:A5:38:E8:3C:5A:8F:87:D2:88:8F:14:CE:67:38
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C24809DA5A200E411A43600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa4dc8d0-2d08-36f8-ae48-702a2d92ba08.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     0
IP address blocks:        198.133.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:80:9d:a5:a2:00:e4:11:a4:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=2defb273-6ea6-4d6c-b582-0c90808c7f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:aa:85:cd:84:c6:3a:5c:7e:c7:68:dc:16:a9:
                    55:fa:43:80:15:2b:e8:93:d5:c7:1f:65:b5:aa:06:
                    9b:ea:b3:65:03:f5:39:0a:23:63:7b:32:83:d9:c7:
                    a3:7c:b1:da:cc:a6:4a:1e:e8:03:d0:bb:bd:be:5f:
                    23:7f:11:63:d4:84:dc:be:ad:0a:38:d2:d9:b1:6a:
                    98:27:8a:ee:ec:b4:12:85:b3:13:5b:b2:71:7a:18:
                    ff:ed:91:3a:a2:71:f9:59:21:af:13:e5:f2:94:88:
                    8f:ed:c0:7a:74:95:a8:24:67:8b:fc:6c:d8:0a:3f:
                    50:67:6b:3e:f1:8c:41:a9:18:bf:aa:77:1c:d5:51:
                    b5:86:e3:86:db:0a:18:17:05:c3:fb:ed:aa:8f:b7:
                    95:2f:80:4a:d2:d4:5d:e9:49:a6:fc:1f:10:50:96:
                    37:95:50:42:f6:bf:fe:c1:00:be:29:4f:98:9c:81:
                    96:1c:28:13:54:1e:20:d5:37:b5:a1:71:c3:69:70:
                    8c:b2:49:36:23:31:22:8e:f1:e8:15:9f:75:75:b5:
                    97:2a:47:c4:66:68:62:f1:ca:c4:56:02:e3:cb:64:
                    eb:81:2e:6a:34:2c:02:3b:1d:9c:52:ff:1f:a2:ff:
                    15:7c:29:2b:a6:b5:69:67:0a:1b:ea:98:0d:e8:39:
                    56:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:48:67:B1:C0:DD:A5:38:E8:3C:5A:8F:87:D2:88:8F:14:CE:67:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa4dc8d0-2d08-36f8-ae48-702a2d92ba08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:2d:56:65:41:d0:fa:97:04:c9:eb:b7:7f:cf:b6:a5:92:81:
         69:74:5b:f1:9d:63:3c:32:51:f2:24:8e:ae:97:b8:be:75:e2:
         fb:cf:b0:3d:99:71:12:41:c6:00:31:58:0c:ca:56:7c:c7:c6:
         73:7d:5f:02:89:c0:a9:17:79:0a:39:0d:91:72:2a:92:15:b2:
         b6:70:cd:18:67:60:89:bd:52:d0:fa:67:16:58:6e:78:07:0e:
         41:a4:e7:54:cb:91:6d:51:97:fe:a1:86:f5:67:48:2e:5b:39:
         d7:c1:31:09:2e:e0:82:ce:8f:40:6b:19:6d:8e:d8:12:96:4c:
         93:7d:a9:d7:dd:cc:d8:04:35:bc:1a:35:0d:27:7d:a4:8d:3f:
         9a:d7:77:bc:71:fd:fb:05:af:e0:e7:43:04:7d:21:e5:2e:32:
         9a:47:b7:52:a1:12:90:51:58:92:96:ff:2d:4d:56:e2:3e:a9:
         55:67:41:ce:e0:43:5b:cf:88:19:84:98:32:f1:53:5f:9c:59:
         5d:37:41:3b:12:b4:38:02:89:65:c7:17:73:7a:fc:bb:b8:39:
         37:09:25:c9:93:76:ca:af:f5:c7:80:3a:ba:ab:dd:fb:a9:35:
         8d:a7:ba:41:59:67:33:04:76:5e:86:69:cf:d4:57:2b:80:15:
         68:ab:1f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:01 2025 by rpki-client