Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0600e2b0-1534-35e7-a21f-922488a91329.roa
File:                     0600e2b0-1534-35e7-a21f-922488a91329.roa (raw, json)
Hash identifier:          MwKqfoUc3e91k1Y5UU8xbit9qLBi0IRu/qmgc6Md2pc=
Subject key identifier:   D1:F8:EA:6D:7E:F2:4A:43:C5:00:0F:5A:C6:96:82:77:2B:25:BC:99
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849E2254118A80A73A3FC25B600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0600e2b0-1534-35e7-a21f-922488a91329.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     701
IP address blocks:        204.51.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:41:18:a8:0a:73:a3:fc:25:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=bb6495b1-30ae-4394-8c63-20a677a6c3e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a2:6d:60:77:23:f0:70:cf:e2:24:16:17:b4:
                    34:44:9c:f5:05:2f:be:f5:78:aa:bd:7e:60:10:b0:
                    8b:53:7b:c3:c5:a4:54:9d:0a:2a:8b:60:fb:54:32:
                    75:dc:f5:ef:71:3c:19:73:e3:fa:62:a9:fc:cb:3c:
                    8e:87:fc:75:1c:b8:3e:a8:37:be:64:31:e7:9a:9a:
                    93:e2:61:2f:dc:d7:74:87:7e:90:47:24:a2:ac:89:
                    a9:36:44:b1:35:47:a2:3c:c4:5e:3b:52:d6:25:3a:
                    1b:e9:db:42:27:18:09:30:77:31:c2:d8:e9:67:f5:
                    9a:25:ea:83:5a:2d:78:14:6c:af:ac:01:e8:b2:d9:
                    16:c7:b9:71:9d:22:8c:08:5b:a0:21:9b:f5:ef:53:
                    fc:8a:63:9b:27:b5:2b:82:0e:23:af:10:42:55:c8:
                    70:7e:0b:30:ab:9b:0b:af:76:4a:42:82:9b:2a:0f:
                    60:5a:08:e6:50:66:9c:90:d4:35:c7:48:d9:3b:2d:
                    64:a3:7e:ff:84:0e:30:d5:1c:56:05:d0:83:79:db:
                    ba:af:20:96:14:20:cb:4c:6d:00:e0:e6:7a:8d:29:
                    af:14:6b:6c:f5:79:e6:d1:e2:14:c4:1b:cc:db:bd:
                    0a:8f:14:ba:97:e6:d6:c2:57:5c:72:21:e6:66:93:
                    49:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F8:EA:6D:7E:F2:4A:43:C5:00:0F:5A:C6:96:82:77:2B:25:BC:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0600e2b0-1534-35e7-a21f-922488a91329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.51.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:d7:6c:bf:1f:22:9e:c7:4d:1f:5a:06:ed:29:21:00:d6:fb:
         74:43:07:c5:25:2a:ab:47:31:37:a5:d2:02:2e:ac:e7:b7:b1:
         93:1d:60:b8:73:62:3e:8c:21:e1:29:02:3a:de:3b:e1:13:37:
         5b:f4:bb:0b:32:e9:1b:a4:79:fd:c3:10:77:a7:84:8d:55:b0:
         72:dc:b8:ba:ee:88:eb:a1:12:c2:7a:06:6e:52:33:49:15:03:
         ba:ae:61:de:4b:e0:a4:3d:d5:e8:10:cd:91:a2:25:4e:ef:2e:
         7d:cc:68:c0:51:26:0e:4d:ae:b0:d2:5b:26:ff:03:0b:8c:0b:
         cc:d2:aa:02:09:88:39:e3:b4:ac:15:2c:34:b6:b1:09:5d:0f:
         2c:fe:27:6e:18:6b:87:fc:0d:66:d1:5a:69:5f:2b:1b:27:4f:
         da:b1:77:a4:8b:71:f3:73:e9:7e:fc:7e:c6:87:37:71:66:22:
         37:46:55:3c:81:f0:34:e0:1d:0a:15:c4:6a:fd:6f:4b:37:72:
         a1:e1:33:a1:b8:84:52:55:b8:e1:b6:7f:07:2f:5c:2f:0e:bc:
         36:f5:cb:9d:8f:89:95:06:be:fc:1e:72:37:ce:dd:16:01:58:
         90:2d:98:d4:62:d9:92:8a:49:67:ed:2c:67:8f:77:bc:11:ca:
         c8:e5:ef:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:49:17 2025 by rpki-client