Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9365cc04-260b-366a-880c-ed4f9855f862.roa
File:                     9365cc04-260b-366a-880c-ed4f9855f862.roa (raw, json)
Hash identifier:          RO/7zduPJ4ETl1YEcFyCDYkYEBEdNu06zRYChmv9nUM=
Subject key identifier:   19:6F:2D:D9:90:61:DA:57:38:FC:B4:4F:28:E3:47:C6:DB:2A:9F:CB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F18003E58DA6B750CBD7D640
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9365cc04-260b-366a-880c-ed4f9855f862.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     701
IP address blocks:        98.117.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:03:e5:8d:a6:b7:50:cb:d7:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=f7c64977-aff5-495a-ae06-58c53c97a963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:37:a3:83:43:91:8a:fb:49:9a:71:fc:8e:2b:
                    c8:2a:c3:1b:cc:2f:a3:94:92:03:49:e6:23:dc:60:
                    5f:04:e7:54:5e:06:d0:3c:4c:98:94:f8:2f:7e:4e:
                    6d:fc:be:84:3c:5a:02:6f:50:fe:01:7c:da:30:14:
                    df:70:de:c0:5e:2a:50:99:46:9c:94:47:22:5a:c8:
                    bc:65:c6:d8:a9:6b:93:92:27:1e:da:91:d7:fc:b6:
                    73:f9:18:c3:81:58:4a:0a:a5:91:d8:88:d6:ac:ba:
                    d9:49:00:64:fe:f0:93:d2:69:e0:fe:12:58:cc:b9:
                    cc:97:66:59:33:27:77:d5:bb:13:89:20:f2:e6:4b:
                    56:7a:ac:5c:6d:6a:f0:a7:c3:e6:d7:0b:48:61:31:
                    6d:4f:dd:b3:f2:77:ae:f0:a4:17:9b:f8:ed:cb:b7:
                    65:c8:b6:70:c2:e5:52:3c:72:db:e1:6a:0d:a4:93:
                    aa:1d:cc:4a:f0:e2:dc:85:30:f7:63:b9:b2:9c:15:
                    81:a2:c4:d3:f5:6b:ed:3b:c7:28:ef:2d:0a:60:ca:
                    84:2d:a8:12:76:91:06:d6:a8:8b:5f:72:54:ea:44:
                    a9:47:f3:6f:8c:24:95:8d:03:33:b9:82:61:fb:4e:
                    be:33:50:28:48:e6:41:e4:e7:73:73:cc:79:01:87:
                    60:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6F:2D:D9:90:61:DA:57:38:FC:B4:4F:28:E3:47:C6:DB:2A:9F:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9365cc04-260b-366a-880c-ed4f9855f862.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.117.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:56:69:de:44:3e:3e:00:2e:2e:22:89:03:60:7e:24:25:b3:
         9d:11:45:13:71:a8:89:01:a2:10:71:09:86:58:67:82:47:7e:
         75:eb:ff:a8:55:fa:9e:a1:22:d3:96:ca:55:29:b5:54:7d:bf:
         07:0b:4f:13:7d:1a:5c:7a:b2:d4:2a:4c:f0:2c:29:03:5b:b4:
         b6:ee:68:d1:1c:0a:28:ba:16:20:4c:1f:1d:37:65:9a:8a:99:
         fc:75:f4:98:e3:36:3e:e5:b7:e8:08:aa:d4:9f:c0:ce:08:8e:
         8c:6b:bf:86:66:0a:c0:c8:92:1b:19:b7:cc:d4:eb:2f:41:17:
         5e:fd:10:15:f1:9a:c8:83:c0:71:ba:6a:64:29:af:43:32:1c:
         24:85:3b:f2:cf:98:58:ba:3e:b8:e3:38:18:ec:09:76:cd:88:
         a2:10:8a:5c:a6:49:d2:90:82:95:02:2c:4f:01:69:84:da:4a:
         f4:01:ff:71:bd:52:0a:17:2d:55:15:80:38:40:3f:11:be:dc:
         e6:30:11:3e:ad:57:00:70:fe:30:c1:f0:d4:fe:6b:95:38:c4:
         0f:e2:a4:13:90:88:2b:a3:3f:8d:08:be:97:60:28:37:cd:7d:
         e1:df:b6:eb:41:c4:c2:35:dd:5b:75:aa:a9:2b:c4:c9:cb:a7:
         1b:12:1f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:08:41 2025 by rpki-client