Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1482b004-1b22-3e7a-8fe6-76c54591fd71.roa
File:                     1482b004-1b22-3e7a-8fe6-76c54591fd71.roa (raw, json)
Hash identifier:          TReumL67g/G5mMK4Xgi9Ja+wpi49NyfeC5r1uhY1NB4=
Subject key identifier:   21:BD:E7:7F:F5:08:33:52:A7:5D:96:BE:3B:00:82:47:D7:C7:19:AE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD23BDAF82D6056F9FDA6C280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1482b004-1b22-3e7a-8fe6-76c54591fd71.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     701
IP address blocks:        68.160.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:da:f8:2d:60:56:f9:fd:a6:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=48cc23be-d6f3-4b80-828b-4ca67942aee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:35:61:7a:d8:2a:c5:c4:35:35:42:5a:ba:94:
                    c9:95:fd:45:06:a9:ca:27:f9:d9:6a:24:f1:11:78:
                    2e:75:f4:7b:79:64:30:7e:ed:cc:d9:26:0f:62:34:
                    1c:f2:26:b2:25:3d:2b:80:ec:ff:ed:41:de:a9:36:
                    ca:a2:45:ae:ed:30:c8:29:76:0b:7a:01:01:a5:41:
                    02:3b:f7:0d:cc:5b:ae:26:f3:2e:94:34:2d:ba:5b:
                    0f:24:b8:95:a3:a2:7b:4c:ee:b5:8f:55:3a:74:01:
                    9a:82:0a:54:89:6c:8e:b2:bd:e2:8a:2f:e8:a3:fe:
                    df:d5:a8:72:b2:fb:c3:12:74:06:07:37:0d:fd:c4:
                    c3:ed:e4:d6:38:24:a8:ed:ec:07:fc:bb:7d:88:2b:
                    ff:4b:99:37:22:fe:c4:4c:af:c5:25:8e:bf:46:b4:
                    af:76:63:47:09:51:cf:0e:0a:aa:4f:b4:c6:20:64:
                    f2:47:c3:fb:46:03:61:33:ff:eb:75:b2:d5:b4:b4:
                    f6:28:79:15:db:92:45:9d:31:aa:ee:e9:72:a2:64:
                    1c:6b:9a:8c:0b:e8:52:0a:ed:05:6e:9a:0c:b0:45:
                    dd:24:5d:f2:4c:cd:e6:e4:08:a8:79:2f:11:d5:24:
                    48:88:33:7e:e3:6e:0c:65:d6:97:47:ee:59:9f:c0:
                    fd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:BD:E7:7F:F5:08:33:52:A7:5D:96:BE:3B:00:82:47:D7:C7:19:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1482b004-1b22-3e7a-8fe6-76c54591fd71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.160.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:28:5f:68:c6:4f:2c:73:ac:ba:5a:13:b2:77:35:f7:b5:6b:
         fe:ca:7a:59:22:58:73:ed:5e:31:a7:c6:29:89:16:13:7b:24:
         93:ef:47:63:fc:ac:39:0e:31:2c:23:48:bb:6f:d6:d1:67:2a:
         92:d7:59:53:71:68:91:6e:20:c7:37:fb:ef:f3:59:f0:81:5c:
         ca:cf:f3:26:75:ec:2b:46:59:a2:e7:62:7e:f5:fe:25:31:a2:
         5e:96:16:a1:f8:df:3f:17:78:23:70:a7:3e:ce:f2:20:f6:ab:
         58:fa:f3:a3:61:98:ae:6c:87:b9:12:16:df:18:90:42:f8:f3:
         99:5e:88:d0:29:d3:92:ef:ce:cb:ec:56:34:e8:f2:ff:a6:f5:
         08:0a:4d:ae:9d:67:98:56:00:b8:d0:f9:a3:de:53:fe:d2:b3:
         6a:ce:e2:db:86:d6:32:5b:64:15:06:bd:c9:4f:47:25:f4:ba:
         b1:fe:aa:d8:c0:40:29:cd:a9:91:0b:f9:8e:91:10:ad:69:32:
         25:0f:08:60:93:0e:24:d3:c3:e1:8d:ee:3a:0b:07:12:53:02:
         fe:d7:73:2c:fd:1a:42:2e:cb:a9:dc:d6:e9:d7:a9:0d:e2:78:
         f9:cf:d9:13:42:46:cb:22:a0:75:a2:1a:cd:2a:88:4c:ed:fd:
         41:4f:86:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:27:29 2025 by rpki-client