Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/05ac5bb5-aa6b-39c5-9599-3b20a0cdf546.roa
File:                     05ac5bb5-aa6b-39c5-9599-3b20a0cdf546.roa (raw, json)
Hash identifier:          Nac41jpteG7sF2RGpAqZhzyfeG+nqYHkOHW9Ym84FJs=
Subject key identifier:   F3:1C:0E:03:A6:B5:1B:12:78:04:5A:A0:F3:66:3E:0A:3C:6A:E4:B8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD23C1509AC1D27D787BFD780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/05ac5bb5-aa6b-39c5-9599-3b20a0cdf546.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     701
IP address blocks:        173.73.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:15:09:ac:1d:27:d7:87:bf:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=44602a52-43e1-43a4-a4af-dd7a7403d20c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3b:80:fc:66:df:0b:66:52:ef:12:b1:05:88:
                    ff:c5:87:0d:a0:54:06:b7:fb:bf:5f:8e:87:b4:62:
                    03:d0:10:34:7d:5b:cc:7f:55:8f:85:01:c7:80:e5:
                    64:39:8d:95:8d:76:f2:51:e4:7d:81:7a:91:88:9e:
                    fd:38:49:92:96:49:f9:a0:3a:2f:60:40:65:d4:7a:
                    c0:8b:6d:4c:ec:f1:63:60:fc:f3:4e:af:58:c9:b9:
                    dd:65:6d:2c:75:52:c2:28:a7:5b:e2:1f:a1:70:4f:
                    14:3b:f8:cd:58:6c:63:30:74:cc:2b:55:22:a4:f1:
                    14:34:cf:e3:23:b9:d6:c1:40:84:a5:5b:5b:dd:14:
                    82:ba:5c:80:00:83:7e:19:0a:64:b9:50:21:d2:57:
                    38:f6:9c:64:18:0f:ed:fc:6d:b6:27:c5:65:6e:f1:
                    31:5c:29:8e:ed:f9:03:91:b4:b5:dc:35:c3:96:c3:
                    2d:c2:da:28:23:8a:2d:66:80:d3:44:c6:cb:ec:c2:
                    8a:8f:c4:34:87:dd:5f:44:75:b2:2a:21:27:49:6b:
                    ae:6a:be:02:8a:6a:21:22:67:62:25:a0:94:2d:74:
                    8f:ae:43:f0:74:bf:28:9d:89:d6:a9:86:be:da:45:
                    8f:2e:89:10:23:8e:2f:52:1a:45:1a:d4:3c:05:98:
                    5e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1C:0E:03:A6:B5:1B:12:78:04:5A:A0:F3:66:3E:0A:3C:6A:E4:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/05ac5bb5-aa6b-39c5-9599-3b20a0cdf546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.73.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:14:26:e2:ae:82:d7:d6:5c:cf:bf:e4:a3:41:3d:04:78:8b:
         c5:4e:bd:aa:69:13:e3:72:37:39:99:08:af:23:b1:ef:6f:53:
         bd:db:32:c0:1f:a2:90:ca:a3:c2:c3:60:57:a4:7f:e6:79:a9:
         2b:51:45:99:94:55:66:dc:fb:23:a8:9e:43:fc:a8:f9:cc:74:
         0e:a7:a5:f2:98:32:0f:7c:32:47:50:a7:6c:3b:38:b8:2b:89:
         c1:82:64:af:6a:ea:2b:a6:58:7a:a8:b2:d1:ad:a6:a5:f3:6a:
         42:93:43:d4:0a:25:1c:54:c7:59:37:0c:f0:75:b4:2e:fa:d3:
         37:2a:5e:a1:3d:02:1a:c4:25:e5:92:c3:44:7e:4e:1f:b6:a0:
         df:fa:6c:02:a9:87:a1:d0:57:49:22:86:a2:98:b9:df:8f:66:
         d5:f9:11:ad:07:c3:93:4b:35:6f:0a:b6:6b:2d:f4:b9:f8:ab:
         e5:22:14:16:75:69:b6:40:da:c2:7a:89:cb:71:35:1d:c3:a1:
         d8:9a:9a:18:27:d5:d9:c0:b0:66:ca:36:86:bf:31:1f:09:03:
         c0:23:93:88:85:75:7d:80:44:32:3f:2e:98:78:05:63:1f:ac:
         f7:e4:a1:3d:72:4d:16:86:59:5b:d8:75:af:69:bc:c4:8e:e0:
         96:e5:37:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:20:17 2025 by rpki-client