Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1bc48733-e305-3f54-9384-9f4de7c177c7.roa
File:                     1bc48733-e305-3f54-9384-9f4de7c177c7.roa (raw, json)
Hash identifier:          O6bqjWnOBnHR6RKBmKRXlQ+BRhsZsfjG3VsQIYGeqG8=
Subject key identifier:   6B:29:DF:61:66:7F:3C:9B:40:42:BB:A9:F9:AF:6A:B9:30:4E:D0:D3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD23C0929912FCC9D4516CC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1bc48733-e305-3f54-9384-9f4de7c177c7.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     701
IP address blocks:        70.17.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:09:29:91:2f:cc:9d:45:16:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=f9515008-f96e-431e-b518-e908db84dc94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:97:ac:02:87:92:9d:ae:5e:c2:a1:9c:15:c9:
                    aa:e6:2b:7d:f8:df:72:0e:ca:35:05:37:6b:01:29:
                    93:8a:1a:eb:2b:55:77:c8:5b:fe:fa:88:eb:f6:e0:
                    c4:37:6a:b2:fa:56:a5:b5:08:f3:07:c5:33:e4:8c:
                    b9:82:c2:b1:02:08:b9:3f:60:4d:4f:5f:fc:4c:c7:
                    39:33:42:1c:3a:bb:20:f9:dc:02:1b:20:86:f5:0b:
                    61:4f:a4:12:95:3f:fd:7b:2d:6a:b3:a2:a5:6c:b6:
                    57:f1:fd:56:3d:77:56:1e:26:00:b2:80:6e:89:74:
                    dd:67:d9:2e:92:39:73:98:79:4b:90:b5:02:5f:00:
                    b0:90:d0:7c:a9:2a:4d:e3:52:04:b3:07:94:62:98:
                    b2:c6:e8:50:0a:c1:22:05:53:50:14:4b:bb:cd:0d:
                    be:2d:ff:88:16:aa:25:e4:ce:b4:16:b1:af:0a:e2:
                    c5:f9:c6:62:5d:2a:09:b5:04:b2:3b:5b:ef:03:f7:
                    40:a1:be:2e:fb:25:4f:ef:d1:c9:82:eb:cb:43:0c:
                    84:26:45:58:43:46:ef:30:b9:5b:2d:77:14:01:1e:
                    75:1b:a7:7a:78:6c:a5:80:42:10:c2:60:f1:da:1f:
                    ca:3f:39:18:da:70:c2:4f:40:cd:c2:e4:81:ce:99:
                    57:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:29:DF:61:66:7F:3C:9B:40:42:BB:A9:F9:AF:6A:B9:30:4E:D0:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1bc48733-e305-3f54-9384-9f4de7c177c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.17.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:da:4b:43:2f:bc:40:38:ce:16:be:d6:bf:8a:02:e5:ac:f4:
         d3:d6:dc:ca:81:c6:75:0d:06:8f:32:a6:a9:36:40:3b:91:21:
         75:c7:6b:8d:4b:48:03:d9:3b:a8:01:bc:b7:0a:27:e3:98:5a:
         33:50:59:14:6a:80:9f:c3:a4:8d:a5:c2:d2:70:0b:7b:f9:b8:
         75:58:11:f4:d0:92:37:37:56:9e:5e:88:93:c5:a2:23:26:f8:
         2b:2e:d8:2e:af:79:89:67:6e:a1:0b:b0:71:27:58:4d:65:76:
         45:19:f0:54:4b:f2:76:1d:c8:c6:a5:ea:e3:4b:45:36:65:64:
         0e:a5:9a:02:0b:b2:7f:8b:e9:09:5f:24:8d:da:4a:65:4b:38:
         82:0c:b3:da:01:ee:bc:f5:3f:2a:19:6f:13:6a:00:7b:94:40:
         17:20:e8:7d:5d:55:16:29:69:11:55:a9:88:1e:8f:62:bd:a7:
         8a:c5:40:da:c9:d9:19:cf:fc:ff:ae:0a:d0:67:01:6e:cc:c3:
         1c:1a:43:de:c9:4a:b1:83:a8:8e:f5:ae:74:d0:7f:00:5d:fe:
         1d:76:50:53:5d:af:ae:1c:d9:f9:9b:73:d2:85:b0:11:99:ca:
         f3:32:d5:c1:ee:06:0b:b2:f5:cd:25:31:dc:c4:03:31:9c:a4:
         1f:c1:3e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:11:03 2025 by rpki-client