Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c6fb5d6-0880-3574-becd-789004c0feca.roa
File:                     1c6fb5d6-0880-3574-becd-789004c0feca.roa (raw, json)
Hash identifier:          +DzFqox+EnuwRuV7vyUcnFl0rNGI7siLtKqaGP/+gQY=
Subject key identifier:   A4:36:A2:B9:35:85:2A:1A:13:B2:90:80:64:CD:3F:44:0C:9A:F9:77
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD23C10925E97BDD0D60CCE40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c6fb5d6-0880-3574-becd-789004c0feca.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     701
IP address blocks:        141.149.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:10:92:5e:97:bd:d0:d6:0c:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=dd7be77f-f11b-4a5f-ba70-82199895ebfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:75:bb:58:f6:c5:14:e6:52:cc:0a:1f:b3:76:
                    39:89:71:ed:64:4c:bc:3a:f2:4a:1f:8f:a2:a9:02:
                    ac:0c:55:b1:17:9f:82:3f:15:88:77:95:3f:fd:51:
                    78:e0:26:b6:8d:18:9f:c2:57:59:88:d1:89:ee:1b:
                    5e:fc:17:88:c5:9c:df:98:a6:0f:9e:87:da:15:a3:
                    1a:1c:cf:fa:f8:25:dd:43:f5:d9:4b:b8:3d:6a:cd:
                    b8:47:58:ee:74:4f:1e:69:3d:01:18:14:19:96:ee:
                    0f:e4:1a:20:9c:42:ce:31:03:c2:b1:db:0d:f7:40:
                    c9:0a:3a:fd:9e:f3:7e:1d:5c:f8:95:40:58:9d:7d:
                    01:6b:f8:71:2e:65:02:90:17:16:f3:18:28:a2:21:
                    5e:3a:eb:8a:b1:c3:ac:87:61:2a:1d:c6:c7:d5:c6:
                    b9:19:c1:39:7a:9f:5c:eb:7f:f3:24:af:36:3b:d0:
                    b5:6c:8b:5a:36:a3:5d:63:51:30:14:54:02:57:c4:
                    5b:e0:c4:1b:d7:99:ee:05:29:11:5d:46:55:91:f5:
                    ec:19:ed:8d:10:16:ca:4f:49:65:7f:0e:53:af:eb:
                    e4:1b:e3:77:01:cd:94:eb:12:24:f1:3a:23:d3:51:
                    1b:99:0c:58:e0:4e:51:03:06:ed:de:04:e2:4d:5f:
                    87:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:36:A2:B9:35:85:2A:1A:13:B2:90:80:64:CD:3F:44:0C:9A:F9:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c6fb5d6-0880-3574-becd-789004c0feca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.149.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:8b:93:f1:21:96:c0:47:03:2f:a5:be:8b:32:eb:25:0f:21:
         e3:6d:40:52:cc:f1:dd:6c:6e:f1:13:e8:d2:57:1f:fa:50:23:
         96:bd:86:64:2c:22:a9:fa:04:47:9d:62:ca:f6:bb:87:a2:a9:
         70:45:95:b1:5d:7d:4e:83:1d:3a:34:5a:92:86:08:b1:d8:51:
         65:2e:18:01:98:32:1e:dc:ff:5c:04:d1:af:70:c4:5c:de:d2:
         ff:f2:fa:e9:a2:2e:ad:44:4f:36:f2:d9:5c:46:5f:61:61:47:
         cd:19:3d:47:e5:88:90:a8:d1:ab:ff:8d:b1:1b:29:0e:ce:b0:
         0d:55:64:1a:3b:df:2b:ce:f4:2c:c8:4e:e6:b9:e2:f1:83:c4:
         e0:21:60:73:7d:bb:fa:f1:17:c3:bf:c4:18:84:48:da:2f:f0:
         02:4f:30:a7:81:b0:4a:78:4a:64:10:60:ff:08:72:b8:d1:80:
         bf:8e:9d:d1:04:e2:8c:b5:08:e3:58:4d:d1:58:b2:2e:7c:46:
         45:ab:0b:69:ed:e7:c9:bc:da:b4:ff:f1:c5:50:9f:ff:6c:93:
         27:3b:c3:df:18:0b:3d:9b:7b:73:be:b9:82:25:ca:1b:dc:24:
         b9:e7:14:b4:61:d4:70:5f:77:19:9f:47:5f:0c:c6:53:ec:05:
         5c:c9:81:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:23:35 2025 by rpki-client