Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39f0cccc-a893-3721-820f-dabeb1d44cea.roa
File:                     39f0cccc-a893-3721-820f-dabeb1d44cea.roa (raw, json)
Hash identifier:          TVlSmoKc20XXoSIZ3V2praERILq0WluWBLeBeD3K+fo=
Subject key identifier:   AE:F6:A8:17:44:20:F0:32:E4:85:25:83:60:49:84:71:E7:6A:F7:64
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B0BA99416589ED9EE5A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39f0cccc-a893-3721-820f-dabeb1d44cea.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     701
IP address blocks:        151.196.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:0b:a9:94:16:58:9e:d9:ee:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=4e72a637-7c21-435c-9546-697bd9c5cf6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:20:31:b0:ba:64:e7:39:af:72:4f:0e:47:b4:
                    2f:5e:e3:91:a4:70:06:0b:92:61:31:90:db:ca:b4:
                    42:c7:ec:af:af:18:7d:a6:f6:c5:1e:72:ef:51:6f:
                    60:07:d9:88:6c:00:a0:b0:bf:5e:a3:bf:11:12:8f:
                    1b:2a:da:68:b4:d0:98:c7:3a:27:0c:97:62:05:63:
                    3f:80:af:16:c7:7a:34:70:b3:f9:87:cc:90:41:0a:
                    26:21:d8:20:3b:b1:54:f9:1d:38:de:31:08:85:84:
                    97:a6:9b:91:37:85:cb:95:62:d0:06:dd:8a:cf:49:
                    9b:71:7f:aa:bc:e1:38:d2:c3:4b:9a:ff:a4:1c:27:
                    44:bf:ff:54:32:c3:8e:72:66:21:66:60:48:bf:c3:
                    65:63:2f:e9:3d:95:65:82:ce:24:9c:f8:d8:f7:52:
                    f7:27:84:0f:63:f5:aa:f4:33:f3:ab:ff:f9:6f:35:
                    34:55:43:07:2c:ea:48:59:b2:5e:b1:e3:12:f4:65:
                    7b:37:b1:da:ee:c1:96:41:e2:68:37:90:01:a8:14:
                    db:44:3f:2d:ee:16:8d:ee:aa:20:2b:af:77:cc:ff:
                    42:49:5e:57:a8:ad:a9:bf:db:dd:ca:23:20:2f:be:
                    e5:65:fc:3f:97:e2:55:85:d9:1d:65:44:11:41:93:
                    32:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F6:A8:17:44:20:F0:32:E4:85:25:83:60:49:84:71:E7:6A:F7:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39f0cccc-a893-3721-820f-dabeb1d44cea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.196.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:61:b4:df:62:61:f5:16:d8:78:01:38:a2:26:a5:c6:a3:21:
         2f:19:16:dc:21:18:5a:fa:89:00:df:0f:90:68:4a:21:83:6b:
         f9:db:27:8d:f0:36:65:39:79:18:cc:83:dd:8d:7c:b3:93:ea:
         1e:f6:70:b5:ca:25:b6:95:85:6b:c0:e0:72:41:9c:05:08:51:
         36:e5:3c:55:0e:6c:f9:92:fc:1f:7d:7b:e0:1b:18:24:25:27:
         48:1e:06:19:b5:8f:dc:db:f5:41:84:b9:ea:42:17:b6:ee:af:
         4c:30:fa:c8:0b:e6:a2:6a:83:c4:46:fc:d6:69:08:94:e3:fc:
         46:79:e2:2d:43:b3:d8:78:2e:89:fe:85:93:39:35:7f:4c:f9:
         a7:52:8c:e6:cb:bc:b9:a2:2a:08:e3:fc:b9:d2:31:d1:a1:d7:
         53:08:53:24:15:43:40:ce:8d:5d:48:0b:e2:fe:87:11:4e:da:
         d2:17:3b:09:3f:94:96:3f:b6:62:89:59:8e:8c:5f:a7:83:b9:
         e2:6a:8d:38:e0:54:34:c7:6d:05:a0:a6:a6:ce:70:a4:be:b0:
         cf:73:98:1f:7d:10:ca:08:cd:49:c3:df:f4:6b:ab:a6:69:83:
         31:b1:6c:c4:34:2d:8b:3f:e8:d8:d7:23:67:ee:2e:69:2f:02:
         7b:35:be:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:44:04 2025 by rpki-client