Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a7ea751d-5913-35d0-ae6e-a29f648fca42.roa
File:                     a7ea751d-5913-35d0-ae6e-a29f648fca42.roa (raw, json)
Hash identifier:          Zfh8yky99XjiA0m0hOalyomnB4NPxxISp1uJWrcGO5U=
Subject key identifier:   A4:F2:52:D7:8D:67:91:0A:AF:39:E5:CB:68:E5:49:F4:2E:6E:DA:7E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849C904F6C8CC14668691DC50A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a7ea751d-5913-35d0-ae6e-a29f648fca42.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     0
IP address blocks:        208.242.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:f6:c8:cc:14:66:86:91:dc:50:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=9a7f3c77-fa2f-4211-beab-6fcb63567b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:43:07:0f:e9:80:77:61:3b:9f:a5:cd:9e:ce:
                    9a:dc:e3:98:85:46:63:7e:e1:8a:7b:6c:3b:58:a0:
                    51:ba:e9:5b:df:16:b2:4f:4a:f0:75:b0:71:5c:d8:
                    0d:46:4e:40:26:85:f5:56:8a:58:27:aa:7c:5e:36:
                    d9:bf:a4:f5:19:14:da:74:2f:8d:82:8e:79:46:4a:
                    ef:ac:d8:ad:c8:3d:9f:7a:4e:2a:d6:e2:88:76:52:
                    18:ef:04:96:eb:9b:82:2f:07:4e:d8:93:8b:a0:3a:
                    95:77:15:fa:48:65:b6:c7:b2:50:7a:68:aa:da:de:
                    40:22:8a:12:f3:f7:0a:d6:15:b7:ad:e6:06:cf:27:
                    e5:8c:03:08:bb:b0:66:74:7d:6b:2f:44:0f:66:01:
                    b9:2f:fa:35:bb:43:f9:ea:cb:50:ce:d8:dd:1a:51:
                    77:6d:7f:8d:82:66:4d:c1:23:52:3f:4e:25:c9:ac:
                    60:96:ae:32:60:a7:3b:c5:6c:a7:a1:96:24:57:1a:
                    29:f7:d2:a3:f5:bb:f5:68:6a:df:93:60:e0:75:81:
                    44:bb:8f:f3:f7:67:71:25:94:ae:15:98:07:a1:c7:
                    f6:06:88:19:d2:6a:c4:cb:b3:2f:36:d4:ee:cc:4f:
                    83:4a:87:5d:c3:03:ef:99:9a:a0:39:95:09:c3:fd:
                    56:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F2:52:D7:8D:67:91:0A:AF:39:E5:CB:68:E5:49:F4:2E:6E:DA:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a7ea751d-5913-35d0-ae6e-a29f648fca42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.242.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:22:8b:8c:9b:bf:ad:8d:b6:71:f5:f9:32:ca:23:47:73:8c:
         08:ad:aa:43:79:b0:bc:c0:e5:6d:8c:be:92:55:f9:9c:63:71:
         bf:c2:4d:74:cd:75:c5:4c:14:65:72:4a:b8:7b:aa:72:5d:ef:
         f8:92:ba:ed:17:f8:34:d3:23:db:6a:ce:e3:71:61:e1:04:e8:
         f3:6b:fa:4c:5d:45:09:ec:65:ed:0a:fc:33:e7:02:64:5f:2d:
         2b:61:89:8d:80:bb:d1:b8:69:0a:15:5b:37:19:e8:ab:dc:b7:
         9f:a1:db:82:6a:09:21:0d:50:91:d5:2b:c2:7c:d9:cd:45:36:
         42:47:76:13:25:35:6e:7a:dc:ee:6d:cc:fb:6e:1c:ef:98:ec:
         54:4e:fb:6a:7b:9f:bc:a3:0a:1b:7b:5d:23:e3:87:ed:67:5d:
         69:5a:9f:73:df:1d:79:69:60:7a:9c:9c:ca:0a:1f:71:64:ab:
         2e:43:36:83:4f:22:3d:1d:03:dc:74:52:a9:5a:32:e8:f3:66:
         90:0a:02:b3:f2:2b:e8:1e:f8:5e:69:d3:63:2e:35:1d:3a:73:
         34:4f:82:5a:fe:54:bb:38:c1:4e:8b:fa:0d:6b:d7:d2:91:8c:
         92:12:8f:60:86:5d:6e:c6:a9:d4:c9:8f:84:e7:22:a0:d4:43:
         18:80:0a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:36:17 2025 by rpki-client