Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b231feb-36a3-3410-bd81-3149f25c8a96.roa
File:                     6b231feb-36a3-3410-bd81-3149f25c8a96.roa (raw, json)
Hash identifier:          liB4KRdQxEsqEFOtfGkDEEvqzcvdy8XhxYFfAptSDrI=
Subject key identifier:   1C:6C:3B:7F:65:52:7A:3C:86:C3:1C:E2:49:96:70:6B:3C:39:1A:2C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849EA853A1928D66836368991E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b231feb-36a3-3410-bd81-3149f25c8a96.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     701
IP address blocks:        71.125.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:3a:19:28:d6:68:36:36:89:91:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=f5deb019-dd6a-4f11-8768-93a5ed364a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5d:d2:e5:fb:20:ed:c3:5d:62:2d:f2:e7:49:
                    47:7b:70:ca:51:8f:39:a1:52:3e:c7:35:b5:89:da:
                    c3:9b:53:1f:11:f6:85:2f:08:2f:2c:8e:f2:b0:40:
                    d9:de:33:73:26:ee:cf:f6:89:aa:57:45:6c:ec:5e:
                    99:15:9e:fc:0d:ae:6a:91:58:42:bf:97:1f:c4:0f:
                    64:6a:7b:fd:1e:38:30:1b:c2:e8:6e:ad:34:5f:a3:
                    2b:1b:01:d8:0a:70:83:86:e2:c8:c3:70:40:9b:e2:
                    38:8a:2e:1e:5a:d7:a3:db:cc:43:46:c4:9a:22:76:
                    55:04:19:7d:b3:00:0d:07:f8:ba:ca:05:e6:40:cd:
                    9b:40:14:fb:bc:05:20:5a:2f:bb:2c:05:12:98:2f:
                    13:c4:13:bc:91:d3:4f:2c:73:58:53:ce:98:33:e6:
                    ee:d0:c8:f9:e9:20:67:46:b8:9f:4b:18:ca:28:5f:
                    27:7d:1c:db:cb:5d:46:d3:30:bb:2a:9b:0c:db:5c:
                    e7:e3:10:5d:a3:59:e5:23:49:bf:e7:82:a9:a7:51:
                    89:db:75:ca:56:32:da:c9:ad:d3:a9:c2:7a:00:87:
                    74:80:8a:9b:cf:61:8f:26:5b:00:e0:90:a0:3f:a5:
                    06:bc:cd:d1:77:87:59:a3:04:fb:db:61:60:cf:2e:
                    cd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:6C:3B:7F:65:52:7A:3C:86:C3:1C:E2:49:96:70:6B:3C:39:1A:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b231feb-36a3-3410-bd81-3149f25c8a96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.125.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:92:0c:79:08:5f:b5:f7:77:ee:2e:36:92:2c:f1:00:d6:b3:
         16:42:66:80:6f:4b:94:cb:70:bb:a0:f4:bb:8a:df:48:89:15:
         61:3c:af:70:8e:e3:7a:da:30:fc:40:e1:a0:6e:ee:67:52:ab:
         55:f2:8b:3a:ec:c5:2d:9a:6b:0e:ed:e7:a6:ce:fa:84:e3:a5:
         9d:19:6d:47:4d:32:0f:47:df:14:f7:4f:91:48:cf:e0:86:fd:
         a3:7a:13:1e:aa:07:48:0b:23:b0:4a:c7:3f:c6:7c:6e:52:b3:
         04:29:d4:60:7c:73:d5:5c:98:a7:68:32:9c:55:b3:1c:e7:8a:
         73:52:5d:88:91:28:3b:9b:db:f1:83:9c:7c:62:4e:b5:60:89:
         1f:3e:44:2f:4b:63:6d:dc:1a:91:b1:56:76:7a:3a:87:c5:96:
         fb:76:28:17:0e:55:77:f2:e0:7b:e8:17:e4:01:ac:4d:a4:17:
         1b:21:73:7a:be:af:10:93:49:92:94:cb:1f:71:5f:86:33:c3:
         1e:ea:66:81:da:6f:35:41:0d:05:65:7d:c7:81:85:36:ff:54:
         70:94:46:cc:50:a6:c4:5c:5c:22:b2:9e:5a:d7:23:7f:e7:5d:
         88:0c:21:e0:fe:2d:d9:a9:d0:91:91:45:8f:64:a9:25:4d:96:
         43:a1:6f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:52:05 2025 by rpki-client