Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24b693fa-84cc-373f-a590-6a09229ceda9.roa
File:                     24b693fa-84cc-373f-a590-6a09229ceda9.roa (raw, json)
Hash identifier:          p9yhvUlt/esb9cOkzZ/04k+hK66t7EONuoV+SwJvZrI=
Subject key identifier:   A4:33:DF:3B:66:6E:ED:77:80:50:B4:6F:AB:50:46:F8:99:94:CD:5A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849D7AFC963A29684152BCE4BC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24b693fa-84cc-373f-a590-6a09229ceda9.roa
Signing time:             Tue 13 May 2025 19:06:48 +0000
ROA not before:           Tue 13 May 2025 19:06:48 +0000
ROA not after:            Mon 11 Aug 2025 19:06:48 +0000
asID:                     0
IP address blocks:        209.47.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d7:af:c9:63:a2:96:84:15:2b:ce:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 13 19:06:48 2025 GMT
            Not After : Aug 11 19:06:48 2025 GMT
        Subject: CN=84d6b726-808b-4226-804f-0901a007d0d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:73:32:4e:c6:bc:15:08:fb:22:6a:dc:ce:7c:
                    56:eb:9f:83:07:4f:24:80:e1:b4:61:5a:56:a6:da:
                    af:37:4d:04:c3:6c:07:02:aa:6d:f5:47:64:2b:9e:
                    88:b4:82:1f:eb:0e:f2:fb:02:08:30:4e:2f:9f:f0:
                    64:c6:8e:e2:76:9b:ae:ef:22:a2:e6:23:2b:56:92:
                    f9:75:c0:3c:3e:fb:d1:46:ae:77:f5:5e:f9:f4:82:
                    df:85:7a:a2:86:70:e4:44:19:7b:30:73:9d:4d:43:
                    f4:28:df:87:e4:01:8a:d9:0b:66:2e:1b:16:62:c1:
                    57:fb:36:06:af:93:48:b1:12:8b:b3:a0:5f:fb:32:
                    83:a4:31:a2:ee:96:9b:16:5e:e1:a4:df:61:9a:1f:
                    56:fd:03:04:f2:d9:ad:61:6f:f2:14:d4:03:be:32:
                    6b:75:b4:a2:d7:f1:c2:ca:75:85:17:ae:d4:43:dc:
                    33:44:a8:9d:32:6a:98:df:7a:f8:db:2c:32:bf:d4:
                    e7:3e:13:8a:ba:9d:dc:b2:57:12:bf:5b:93:6f:91:
                    2e:cb:8d:43:5e:d0:da:c0:dc:37:2b:57:e1:7e:69:
                    81:ae:18:e4:0d:9d:36:71:d7:c5:92:1e:89:aa:5b:
                    17:50:ac:20:5f:15:5d:8b:fc:b1:ea:d1:87:d0:4f:
                    26:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:33:DF:3B:66:6E:ED:77:80:50:B4:6F:AB:50:46:F8:99:94:CD:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24b693fa-84cc-373f-a590-6a09229ceda9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.47.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:da:97:6d:a3:58:b3:c9:d5:53:e0:f0:cc:68:ba:2b:16:9f:
         05:c3:9f:fa:ef:f7:57:45:67:d9:cf:fc:f1:a4:58:46:14:a3:
         ad:61:00:4a:76:4b:17:c5:00:d7:4b:66:e5:3c:77:aa:2a:7d:
         83:b2:14:89:ae:15:6e:9d:a5:09:9a:5d:4d:26:6e:c4:96:79:
         e0:64:64:b2:f7:20:ef:50:8b:18:df:f5:9a:bd:5e:7a:e1:85:
         50:3d:27:0e:95:11:7c:80:5f:f0:26:8a:7b:80:0e:a3:a8:7f:
         ec:cd:bb:55:11:ca:19:ff:7f:17:41:e1:d9:32:d4:71:72:c2:
         b8:27:23:85:26:12:6f:b1:52:fc:39:9a:9c:66:a0:82:43:55:
         12:a5:7a:38:b6:64:c8:ee:61:b2:08:c8:22:5c:f7:c8:0f:67:
         dc:01:83:8d:2c:56:45:ab:86:22:1b:24:5e:26:1b:e0:a7:9e:
         70:26:b4:d1:6c:02:7a:2c:85:97:db:06:12:14:71:7a:52:3e:
         0c:b4:0b:28:d4:b1:bd:3f:09:aa:a2:4e:e4:72:b7:64:7b:db:
         77:f3:ba:15:3e:34:87:01:42:9e:01:a3:e7:8b:09:02:98:eb:
         f3:0e:5a:43:df:3b:ba:eb:8f:1f:b9:b6:e6:b3:8b:8f:e6:12:
         f8:e8:f7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:19:24 2025 by rpki-client