Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4420b90b-5dab-3b7f-88b5-a02607a95c83.roa
File:                     4420b90b-5dab-3b7f-88b5-a02607a95c83.roa (raw, json)
Hash identifier:          oHQ3ogZgPHvZkQOkSJakTSaox7eeoXiWrvoSnTK8ReY=
Subject key identifier:   71:B5:AB:1C:63:45:D5:6B:4A:C0:71:C4:E5:79:44:49:F9:2A:E6:CA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F18006DBFEA1EBCC8752C380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4420b90b-5dab-3b7f-88b5-a02607a95c83.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     701
IP address blocks:        68.238.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:06:db:fe:a1:eb:cc:87:52:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=228d7ca9-bc76-4058-a336-6ba0c456e51b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a0:82:41:60:3a:4d:83:31:3c:54:06:3d:c3:
                    3c:23:18:35:79:9c:3c:c9:27:0c:74:bc:d7:ac:1b:
                    db:02:1c:0b:c3:27:e9:42:13:78:ce:07:bc:67:fb:
                    bd:e8:dd:47:b6:4f:e6:7b:38:a6:7b:66:ba:2f:15:
                    0d:df:5c:c7:c1:49:95:0a:d5:b9:81:04:47:ce:12:
                    b9:1d:6a:c3:8f:12:09:b6:ec:51:58:e2:d2:80:97:
                    6d:6a:97:51:3b:4e:bd:a5:68:2d:dd:37:76:0c:e7:
                    12:3c:9a:77:b7:e0:8e:0c:45:a3:5e:0a:55:5b:86:
                    47:7a:7d:79:98:9c:e3:4b:a8:42:c3:60:55:f5:a6:
                    1c:b7:50:db:78:93:5e:5d:06:f6:d5:4f:46:1c:fd:
                    41:7f:c7:29:ab:3e:ca:e7:f2:85:78:68:77:31:3d:
                    8f:1b:97:bc:17:e0:f0:7a:36:ab:71:13:e3:7a:12:
                    75:e6:85:7c:33:dc:e2:36:4e:61:a0:3d:54:38:a0:
                    13:f0:33:a6:2d:8c:70:8d:6c:1d:7d:eb:cd:54:f9:
                    58:17:4e:30:13:55:9b:ac:b9:17:00:d7:d0:2f:fa:
                    b9:a9:44:21:60:1c:9b:3f:a3:c6:e6:58:46:3a:6e:
                    6e:29:01:ea:98:75:2c:ae:d3:a6:ac:ab:d5:ba:ae:
                    0f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B5:AB:1C:63:45:D5:6B:4A:C0:71:C4:E5:79:44:49:F9:2A:E6:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4420b90b-5dab-3b7f-88b5-a02607a95c83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.238.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:4e:42:f8:ba:72:20:8e:38:ea:6d:ae:77:4f:3c:4c:ec:4a:
         82:a2:1e:e8:e5:43:08:17:f9:f1:3c:e0:83:86:70:73:fd:d6:
         cc:8e:98:1d:a5:e2:03:a5:62:cc:de:1b:fa:a9:48:63:82:c4:
         db:95:96:2a:d9:94:ac:b7:6c:48:50:2d:4e:fd:68:8e:0b:9d:
         f7:19:7f:37:a3:8f:e8:a0:14:32:e7:1d:45:72:47:50:2b:aa:
         85:b4:bc:24:4d:5a:b9:44:e7:97:6b:61:3d:2e:ed:e0:02:02:
         5b:bf:98:f9:1b:1d:5e:02:c7:4f:78:b7:15:a0:93:c8:56:01:
         fe:e9:6d:4b:18:9f:73:2d:a0:95:75:c4:f0:ac:bd:f5:0e:17:
         85:88:69:cb:f3:6a:67:f3:6f:d5:54:84:d6:46:7a:54:73:fa:
         d3:6e:3e:17:fc:aa:9f:9f:84:d6:bf:b4:d9:95:7e:57:47:e6:
         29:1c:bf:25:56:dc:1e:02:15:25:ab:05:be:e9:ff:08:ec:76:
         8f:30:8b:a4:a5:e7:8f:f1:6b:bd:78:b8:c2:b3:79:39:fa:ac:
         04:39:1b:f1:65:e0:c0:74:c5:68:78:cd:3b:33:a5:62:80:af:
         53:69:c2:b8:24:ef:3c:96:e4:d4:96:03:62:ba:db:ea:d5:a5:
         bb:f5:16:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:45:22 2025 by rpki-client