Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/77748d0d-6c3e-3619-9b82-d6cd757edb7e.roa
File:                     77748d0d-6c3e-3619-9b82-d6cd757edb7e.roa (raw, json)
Hash identifier:          Q3aioMK1K81Lv9mo72TfdAp4gbLggM7fzYyETXCNGZc=
Subject key identifier:   5F:D3:8E:21:D0:61:B6:BB:C8:C8:97:49:95:35:A0:CD:73:5A:72:79
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B0E810EF91709F2129070
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/77748d0d-6c3e-3619-9b82-d6cd757edb7e.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     701
IP address blocks:        71.250.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:0e:81:0e:f9:17:09:f2:12:90:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=686ed116-97c7-4386-80fc-424af4c7b256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6d:0b:26:8f:d4:ed:f6:07:c7:f0:7d:bb:2e:
                    45:af:9f:0b:dc:57:b8:48:fc:f9:e6:92:9a:81:2a:
                    ac:15:12:d2:8e:cf:6e:90:c7:af:d8:29:1e:51:a4:
                    aa:91:fe:63:eb:48:0e:10:58:7f:2f:51:48:ea:06:
                    01:42:dd:c7:07:4d:6c:a9:26:74:e6:e8:f5:24:f9:
                    8d:51:7f:3f:68:be:50:44:72:6b:cd:92:3b:13:2f:
                    bd:0b:de:19:c9:86:64:9d:70:eb:a6:30:b6:59:a0:
                    eb:e1:6d:ea:70:98:b5:d0:0c:c9:e6:7b:79:85:39:
                    43:87:a3:ed:ba:35:c0:e5:8c:88:81:8e:45:e8:83:
                    d5:dc:bc:ed:fa:9c:2e:9b:f9:37:f2:f7:e2:87:72:
                    23:c0:e1:32:55:6a:b5:ce:38:e7:ef:6a:1f:cc:eb:
                    1e:57:64:01:a1:e5:ad:60:96:15:3c:b5:5a:44:ad:
                    d4:16:fe:d1:94:f7:25:8f:d8:4f:8c:1a:b3:3c:c0:
                    cf:aa:11:56:66:68:42:62:9a:42:7c:f7:b0:35:a1:
                    5b:04:8b:de:65:9b:b9:4e:1b:8a:34:cf:d0:a0:00:
                    d6:f8:79:0c:fd:6d:6b:46:73:0f:13:20:1b:c6:f0:
                    74:a9:07:d3:81:17:f5:ce:9c:59:ab:d9:e4:ad:26:
                    d0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D3:8E:21:D0:61:B6:BB:C8:C8:97:49:95:35:A0:CD:73:5A:72:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/77748d0d-6c3e-3619-9b82-d6cd757edb7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.250.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:57:85:1c:6c:2c:1a:46:f9:75:a3:00:09:17:4d:db:cd:0a:
         0a:7b:5a:cf:3e:53:59:5f:56:88:a6:f9:a8:e7:66:e5:a4:5e:
         2a:3e:ef:46:06:24:6a:15:8c:2b:56:c4:5b:55:1f:21:2c:2f:
         3d:1f:80:22:52:b5:78:e9:92:66:52:05:ca:db:b9:e7:53:a2:
         37:a4:b1:d7:7a:67:ba:47:55:32:c6:9c:d2:60:98:7e:48:8c:
         2c:5a:2b:1b:ca:4e:31:fe:f6:0d:4f:71:e7:9a:21:e0:14:72:
         c3:52:48:34:7d:b2:7c:7b:b6:1a:7a:bf:9d:ef:00:f0:90:d6:
         4c:65:0e:0e:94:b4:8f:f7:86:d2:29:59:8a:85:aa:06:fe:9e:
         cd:15:d7:1b:57:7f:59:f4:87:34:46:3d:34:14:90:22:35:39:
         1e:d9:51:b7:9d:8a:af:1b:a5:fc:d5:2d:47:39:56:74:b8:1d:
         ae:1f:b2:0d:41:ad:b9:46:7e:81:d2:ca:67:32:fe:ed:8a:cd:
         18:50:07:cc:1d:e9:5b:8f:b0:c2:54:58:72:cf:f9:bd:87:46:
         a4:c3:36:0b:6a:38:3e:fe:fe:78:2a:ed:4f:2e:f7:cd:66:b8:
         aa:46:a3:7e:0d:27:a7:d0:14:04:0e:1f:77:55:71:c2:7b:ae:
         71:3f:38:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:35:23 2025 by rpki-client