Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08100ade-7c8f-3a03-b2e2-d0a8cf277f38.roa
File:                     08100ade-7c8f-3a03-b2e2-d0a8cf277f38.roa (raw, json)
Hash identifier:          4n3GiVJVfQh/t1QA7wmfFsevIrsSh+dvbioINfNpuKk=
Subject key identifier:   9B:F3:4D:2C:2D:A5:82:E4:62:48:8B:83:BD:B8:B6:5D:0B:DD:45:36
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849EA8538429EC359ADC06DE340
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08100ade-7c8f-3a03-b2e2-d0a8cf277f38.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     701
IP address blocks:        71.255.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:38:42:9e:c3:59:ad:c0:6d:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=cedf06a3-7e80-459b-8773-e36253437179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:38:af:a0:7e:d4:24:f2:7d:09:f9:a4:bb:b6:
                    03:74:e4:27:e3:66:99:38:a5:63:8f:d7:cb:fe:07:
                    b8:42:78:72:f1:50:9a:5c:19:73:75:ae:e2:23:41:
                    84:e1:fb:77:97:93:b1:28:cf:74:a9:c5:31:cb:8f:
                    60:15:62:d6:0f:de:a8:ed:a0:6f:5b:81:2a:12:3b:
                    4e:c5:e6:f9:8a:62:ef:01:fa:e1:f0:9f:fe:d6:d7:
                    86:81:ce:3b:4b:ee:88:6f:74:36:35:e2:f2:e2:c0:
                    48:17:b7:f6:84:c8:1c:c5:42:32:b8:53:22:b3:2a:
                    c9:e5:c1:62:07:e6:5a:12:ca:46:66:bf:a8:79:95:
                    69:85:ed:c0:02:61:52:47:03:fd:a0:bb:8a:82:a4:
                    c9:a5:10:a9:80:5e:e9:4c:f3:58:7b:41:00:6b:8a:
                    77:fb:c3:c5:e2:06:bb:21:3e:4e:55:21:37:b9:80:
                    cd:60:98:03:24:55:79:17:78:9a:7f:c0:db:8b:40:
                    69:5c:ee:d8:ee:da:7f:64:c9:33:ce:0f:7b:03:82:
                    b7:5a:94:7f:74:56:29:bf:ef:ba:43:77:7b:49:e4:
                    ad:f3:3e:79:5e:ad:49:22:d0:cd:f4:9e:a0:7e:26:
                    ae:d0:46:00:19:f5:29:51:0d:09:25:76:a7:e7:04:
                    60:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F3:4D:2C:2D:A5:82:E4:62:48:8B:83:BD:B8:B6:5D:0B:DD:45:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08100ade-7c8f-3a03-b2e2-d0a8cf277f38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.255.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:33:92:7c:c6:30:00:fa:dd:bb:6e:15:5b:ea:bb:32:74:9e:
         3c:c9:7b:fe:30:56:52:03:09:b5:21:66:37:ca:cc:fa:01:22:
         93:82:c5:97:24:0c:a8:b4:86:86:b9:de:a2:78:63:58:dd:64:
         f8:5a:f4:eb:2d:15:8d:a1:ee:f0:19:3a:ba:24:17:4f:72:8f:
         1b:72:48:ff:f5:66:65:e4:6a:d6:9c:db:07:7b:ed:95:0a:bd:
         76:aa:9f:37:7b:7b:ff:55:c1:1a:f8:6b:1d:23:8e:3c:3a:f7:
         4b:27:80:e6:a0:df:dd:5f:b7:56:74:4b:8f:1b:71:ca:ec:fb:
         de:0b:b3:33:47:eb:95:4f:a4:14:b9:43:ca:72:9d:2d:90:3c:
         4b:e5:c3:b5:6d:c8:02:d2:61:b0:f7:cc:17:cf:41:a3:06:0c:
         bf:2e:19:f2:bb:43:d4:92:04:85:00:a9:e2:19:29:ee:8e:c2:
         05:dc:93:a1:0f:ae:19:79:ab:e3:70:a2:24:0f:76:5f:d1:b0:
         ac:19:1d:92:2a:81:fd:ef:b7:10:6a:27:01:c8:27:60:12:ed:
         c0:fc:55:7f:f3:d5:10:c8:d2:b2:47:c3:2c:79:2e:1d:1a:e5:
         0c:8b:c7:2c:00:40:07:18:6e:4f:bc:f6:b7:79:b9:04:cb:23:
         c8:c8:bb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:16:05 2025 by rpki-client