Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/193ce67c-e8ce-3ee9-b560-55b35788f0f5.roa
File:                     193ce67c-e8ce-3ee9-b560-55b35788f0f5.roa (raw, json)
Hash identifier:          UuxJIvxKqzcS04X81Gfttbyp76H0CFkMJHwFKpJ6SaI=
Subject key identifier:   B9:3D:B0:56:14:C2:F3:A2:4C:D7:1C:C1:E0:ED:14:3B:43:E0:76:13
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A00DAE153EADBA3BC604DFB50
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/193ce67c-e8ce-3ee9-b560-55b35788f0f5.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     22394
IP address blocks:        141.207.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:e1:53:ea:db:a3:bc:60:4d:fb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=20d7d527-e77e-4307-bb16-932bdf99cb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:05:4d:08:4a:76:ac:98:1e:a6:1d:07:20:50:
                    a2:c0:99:d0:b0:8d:27:12:68:fb:9a:e6:48:7c:30:
                    92:26:07:6f:af:2a:de:a7:e4:04:51:00:a6:24:df:
                    e0:65:da:f9:cb:17:03:f1:44:cb:4e:0b:22:f3:ff:
                    0e:e4:31:05:c4:5a:dd:d6:ab:b4:32:be:0f:1d:37:
                    0b:00:9a:e1:cf:d4:4e:c0:d8:a4:ff:56:36:c9:7c:
                    f7:01:ee:ca:8b:82:50:31:a9:18:08:ba:ac:9c:42:
                    fb:5e:2e:f7:f6:ef:99:e8:a1:c1:3f:92:e1:5a:e3:
                    8f:00:a3:98:84:46:91:87:0e:48:98:a2:e2:f1:68:
                    e6:d2:ed:64:1a:ad:4c:c5:69:8b:fa:9c:52:b3:0e:
                    98:92:60:f7:be:12:74:fd:ef:98:2b:49:d8:15:cb:
                    7c:37:84:e2:df:c9:ad:05:5a:a5:88:5a:e7:7c:f6:
                    68:bd:2c:52:69:04:58:7d:9d:e7:9b:6e:b8:78:38:
                    59:2a:a5:1f:b0:9e:a8:77:46:94:fd:8d:ed:b6:d8:
                    cb:04:89:d0:5f:30:dc:3e:de:80:bb:22:ea:e6:2d:
                    95:ea:86:dd:68:ad:7f:5c:06:55:ce:4a:8f:42:e9:
                    26:5b:06:8f:7e:aa:8b:58:43:7e:87:6b:08:5f:9c:
                    cf:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:3D:B0:56:14:C2:F3:A2:4C:D7:1C:C1:E0:ED:14:3B:43:E0:76:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/193ce67c-e8ce-3ee9-b560-55b35788f0f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.207.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:2b:0b:f7:a8:32:eb:e0:46:d9:33:81:34:29:61:a4:51:55:
         bf:48:44:bc:06:8a:ea:c6:07:15:5c:e9:87:82:d2:9c:ab:5c:
         41:65:ff:38:64:65:3d:4c:85:eb:05:57:bc:c3:11:44:86:af:
         00:1d:01:5a:b7:06:47:0d:79:71:98:4c:89:d5:35:97:5a:30:
         ce:24:e7:7f:d6:97:38:ba:3f:cb:e7:cc:11:db:67:f4:94:26:
         90:6d:11:ad:2d:bc:9a:39:58:bc:3b:a0:d0:7c:08:89:1d:98:
         ef:82:1d:84:13:40:57:8a:d2:6e:af:e9:9a:fd:5e:93:d1:d7:
         6a:49:58:fb:d0:aa:fc:22:29:aa:c8:18:64:f3:2b:d5:b0:f0:
         8c:07:39:c9:c0:a7:fa:91:87:79:cb:94:98:8a:11:f5:c1:76:
         a7:12:e7:0d:be:31:f8:73:69:a0:88:86:96:1f:24:9d:b2:d5:
         87:ea:5c:63:cc:4a:04:51:cf:f8:7e:fd:28:ec:a5:2a:94:07:
         c7:ab:54:4a:c7:e4:24:0e:0b:99:cd:19:0d:cc:bd:a6:6a:73:
         78:3d:64:22:b3:dc:98:a5:a2:fb:5a:30:43:08:ad:54:e6:e2:
         8a:1f:93:d6:c8:36:32:51:a7:7d:37:e4:f8:52:a1:f0:83:8a:
         6d:9e:1f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:52:32 2025 by rpki-client