Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a407a3d-6ec3-39cd-a792-3f9987e1f500.roa
File:                     2a407a3d-6ec3-39cd-a792-3f9987e1f500.roa (raw, json)
Hash identifier:          IvP1xw6nuA1Vg/pXQ6xvHJf1eUWib//V6UuJl76SEAs=
Subject key identifier:   DF:C2:98:B8:EA:57:96:BC:03:0F:B3:64:35:44:43:D1:73:50:26:F6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD23C0FD416114A7317B31D40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a407a3d-6ec3-39cd-a792-3f9987e1f500.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     701
IP address blocks:        173.50.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:0f:d4:16:11:4a:73:17:b3:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=f35f49e4-11d5-4a53-9c5a-dca74a330885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:02:29:e0:10:fa:c7:1a:f0:5f:1e:f8:94:4d:
                    d8:e1:76:80:b6:e9:26:5d:02:a2:41:25:1d:9e:47:
                    59:bc:f9:a0:46:ad:24:80:fb:a8:2a:f7:bb:a8:eb:
                    27:e9:d0:35:ad:96:a0:66:fd:90:c9:4e:5a:c8:94:
                    6c:1c:15:78:b3:1a:31:cc:b1:66:94:e4:2a:0f:d4:
                    dd:6e:26:31:65:6e:88:8a:80:d4:8d:0f:ca:68:54:
                    03:cf:50:36:ec:b0:85:e8:9c:bd:d3:85:90:dd:ea:
                    71:0a:09:05:d9:c2:f2:4a:88:14:a4:86:29:30:79:
                    a3:88:e6:b5:13:02:13:58:5e:00:24:27:63:8c:5d:
                    2d:d9:e6:22:f1:7d:c7:9f:5e:c4:37:69:5e:ec:f1:
                    17:01:b2:83:79:5b:a3:a4:3e:e6:27:de:ee:84:f3:
                    ba:0a:73:8e:6f:d1:3d:08:93:25:c0:2a:51:1f:84:
                    6f:f7:31:e1:fe:6f:2a:2e:f9:91:8b:1d:21:6d:cd:
                    89:7f:30:31:9a:8c:43:f8:a7:56:5d:56:2b:1b:0b:
                    47:24:d0:a8:61:9b:8e:05:da:a3:b8:b7:7b:85:fa:
                    fa:76:df:cd:21:c2:b9:70:3c:56:06:27:fd:0f:fb:
                    64:83:28:d0:0f:a2:f4:ea:37:de:1e:c2:3e:d4:3a:
                    fe:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C2:98:B8:EA:57:96:BC:03:0F:B3:64:35:44:43:D1:73:50:26:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a407a3d-6ec3-39cd-a792-3f9987e1f500.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.50.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:48:9d:d9:19:d3:b1:8d:66:eb:bb:72:2d:46:27:59:ce:ed:
         7a:0d:76:3d:da:68:75:4c:a1:1d:77:03:5b:e8:e7:2d:86:b3:
         e7:e2:a0:a3:5a:1f:b7:d9:8c:19:cb:b4:39:68:f8:73:90:9f:
         d9:78:90:e7:a7:27:c2:c8:9b:28:5c:bf:cc:09:83:4e:9c:1f:
         da:51:0e:36:b9:96:3e:71:b7:11:3d:1d:ca:e6:cb:73:96:8d:
         e9:a6:6f:d4:24:2d:22:60:f1:62:a2:19:12:f6:77:c2:3b:d3:
         0f:ab:ef:15:0e:05:a3:10:d8:7b:c9:60:b1:ba:99:b3:da:47:
         0a:57:3c:46:ba:34:d6:1f:ee:a7:5b:f6:f0:9d:dc:98:c5:f9:
         7e:96:91:67:56:be:0d:34:5e:cc:2f:8c:d8:f7:12:57:16:6b:
         17:af:63:90:0e:22:11:d0:73:5a:d1:65:62:c1:56:2c:1a:0b:
         bb:b5:e1:2a:b7:c6:9e:be:f8:93:d6:b3:a8:05:60:c2:4e:99:
         57:76:58:4b:e4:50:2f:de:d7:01:69:92:b4:bc:66:88:92:3b:
         ec:cf:2a:9c:64:6b:28:b3:ac:31:df:5f:ca:47:da:af:9c:a2:
         b1:e0:60:f4:11:d1:65:f3:74:2a:99:26:71:c7:d6:f1:93:58:
         b4:ac:f0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:04:04 2025 by rpki-client