Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b52d204-3d79-3b97-ae2c-c81831973bde.roa
File:                     3b52d204-3d79-3b97-ae2c-c81831973bde.roa (raw, json)
Hash identifier:          xI5YA7s6wE4CNmiQJL40BC9HDSYi8mGEwFdBRmxEBbQ=
Subject key identifier:   73:72:A0:36:6A:78:B0:E5:24:97:07:13:69:75:41:F7:99:EF:C5:DB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F17FE254B741BE4116603360
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b52d204-3d79-3b97-ae2c-c81831973bde.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     701
IP address blocks:        108.31.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:e2:54:b7:41:be:41:16:60:33:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=c1fee8a4-a0d9-4469-ab97-23d2ab882fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:44:2b:e1:26:86:db:a7:01:d3:f5:a6:48:02:
                    1c:1b:2d:73:26:21:be:45:a6:c8:0f:1f:fc:37:f6:
                    b9:e7:d8:83:59:da:66:5d:cf:1f:a4:d7:79:17:9d:
                    d9:f7:13:57:93:2b:51:e1:c2:4c:62:33:4a:ff:a7:
                    5b:51:a6:09:61:01:ca:54:52:40:65:82:e2:cc:e7:
                    3a:a9:24:5c:f7:e4:6d:b6:04:47:3a:dc:d6:f2:8d:
                    62:8b:68:b2:06:68:71:94:d8:89:ee:70:6f:79:e6:
                    3f:8f:a1:0f:6f:87:f1:3e:3a:06:f0:39:69:54:71:
                    95:f6:57:e8:99:37:79:cb:da:de:85:c3:dd:f7:70:
                    16:e4:d1:9a:3a:01:b0:b2:e0:f7:ef:fa:68:60:52:
                    2c:48:d5:52:1b:30:cc:4c:39:24:d9:f3:56:04:64:
                    cf:eb:94:ee:ed:64:5e:8d:5d:9b:4e:39:80:86:67:
                    de:8d:ae:05:0b:66:a4:50:ec:77:d4:59:99:3c:e9:
                    4f:79:6a:42:98:55:d4:d7:e4:52:42:12:de:0d:da:
                    39:cd:e8:fd:b2:09:1b:6a:e7:cf:2f:31:f5:24:c8:
                    7c:b0:d1:3a:a6:0e:8c:4d:18:a5:92:dd:16:bf:77:
                    7f:f4:8d:15:43:3a:df:05:77:8b:59:0a:62:af:75:
                    b0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:72:A0:36:6A:78:B0:E5:24:97:07:13:69:75:41:F7:99:EF:C5:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b52d204-3d79-3b97-ae2c-c81831973bde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.31.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:9b:27:a2:90:f4:02:64:5c:c0:7e:f5:b0:db:df:6c:cb:2b:
         a8:51:ed:94:cf:a8:e3:a4:47:b0:c5:e2:50:d0:b9:d4:6e:1a:
         e8:c9:bd:6a:16:cd:63:9a:4d:cb:d4:c1:de:a3:c4:27:5d:4a:
         e9:62:d1:52:86:e4:05:f8:51:64:64:58:62:f2:17:ae:6d:a6:
         04:d8:fc:45:5c:24:63:18:1f:3a:68:99:ea:d8:f1:73:cf:28:
         4c:00:30:52:ea:2b:65:99:0b:e6:33:34:a2:c8:f2:96:e1:d3:
         e5:3a:79:88:29:9c:6c:e3:9d:30:15:e4:29:0d:0b:f6:5a:f4:
         f4:ed:c3:ae:0d:b7:1b:c8:0e:b8:bc:b4:f4:f1:24:69:3b:60:
         f2:06:7d:dd:67:4f:a0:53:82:02:57:d5:ce:3e:d5:8d:f2:f7:
         35:b8:66:80:03:6d:e9:43:31:e3:15:22:dc:da:3f:69:53:a5:
         64:e2:ab:9a:75:fb:56:de:3a:e4:ae:5f:4a:e7:32:5d:53:57:
         62:b8:eb:82:b3:15:cc:7e:f0:be:45:e8:f0:e4:9d:da:3f:c6:
         85:98:87:8d:0a:83:25:10:f1:23:95:ea:22:74:3e:e8:97:99:
         1c:12:b0:6a:51:72:a8:0d:42:7f:fb:35:06:02:b4:93:ef:27:
         b3:59:96:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:45:16 2025 by rpki-client