Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbde8d70-0f57-3229-b406-03351a5f8311.roa
File:                     dbde8d70-0f57-3229-b406-03351a5f8311.roa (raw, json)
Hash identifier:          T3U2FAnXcDw0KNus174w4sKkqFoT8/gohBGXqL/Zt1k=
Subject key identifier:   9D:32:12:48:5D:D7:E3:A3:B7:65:E8:83:13:4E:05:B6:0C:FA:D5:F4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD23BE4D3A3D5EE87E27E3800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbde8d70-0f57-3229-b406-03351a5f8311.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     701
IP address blocks:        173.56.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:e4:d3:a3:d5:ee:87:e2:7e:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=a5592837-bd5c-4c94-adae-b6cff4dc240c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ea:a4:7d:32:68:06:71:41:d1:f0:83:86:dd:
                    72:72:14:17:b9:f8:be:b1:80:3d:45:1b:2a:1e:4f:
                    e0:1f:0a:fd:ea:90:e4:8c:dd:ed:42:c9:99:14:44:
                    bf:23:03:f8:e5:67:60:08:ce:ff:0c:f1:dd:d3:42:
                    c4:b8:83:8d:b0:74:a0:9c:dd:2f:d0:c1:59:95:b6:
                    78:75:b2:99:bd:90:da:36:58:f2:05:c4:8d:a3:b2:
                    40:f4:ca:a7:b7:2e:c7:54:43:91:84:a7:dc:7d:02:
                    e3:51:f1:c2:53:eb:12:8c:3a:7b:65:16:75:6b:c9:
                    77:ce:b1:9b:0d:7f:c0:f0:86:b2:00:f5:fd:81:c6:
                    f9:b2:f7:0e:5a:64:85:52:6c:05:28:90:e7:2b:a7:
                    e6:82:ec:97:01:0f:50:59:b4:bb:94:d8:42:ab:43:
                    f8:06:ef:77:a5:20:96:26:d4:cf:1d:a9:f2:e1:a5:
                    38:83:b3:01:a3:04:50:18:a3:a8:e7:13:40:53:cb:
                    1d:82:5c:91:e3:2d:a5:65:2f:41:6d:0a:e2:6f:ab:
                    42:fa:05:81:3f:24:b3:b1:a5:1b:45:6e:ed:ff:b5:
                    8d:68:d7:70:e5:7a:af:93:f1:82:45:3e:61:aa:a9:
                    f8:6a:6c:db:9d:c0:ec:65:87:46:19:ef:e8:2d:5a:
                    51:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:32:12:48:5D:D7:E3:A3:B7:65:E8:83:13:4E:05:B6:0C:FA:D5:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbde8d70-0f57-3229-b406-03351a5f8311.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.56.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:3f:57:40:72:5c:3b:9f:f3:03:38:4d:68:39:53:b7:5d:51:
         51:a6:fa:3e:e3:8a:c3:ba:be:04:0f:58:c4:a0:91:2d:69:6a:
         c9:ed:e1:2f:b8:bf:3a:80:5a:79:3e:aa:24:fb:ff:27:6d:c2:
         e1:81:d7:ab:4e:03:20:71:8e:2e:06:bb:ae:bc:54:67:22:06:
         12:ca:e6:95:42:6b:43:26:bd:16:d8:62:29:0f:a9:b6:0e:b8:
         2f:da:6e:49:31:bc:b7:fe:0d:72:82:71:f7:15:e0:3c:bc:de:
         be:2c:74:96:ab:d5:84:38:41:25:08:69:82:97:49:58:f9:4d:
         fe:a8:1d:34:de:cf:3e:6d:cb:35:14:05:b0:a5:d0:04:29:f9:
         3e:eb:38:88:4e:0b:c2:58:a3:15:87:26:a2:a0:52:0f:e3:1d:
         df:a5:ad:f9:ef:e8:49:ea:6b:04:8d:b6:cb:2e:bc:c3:67:3c:
         4f:ee:b2:ec:fa:60:8f:f3:99:40:96:f0:6d:31:8c:05:67:b8:
         97:09:bd:18:15:57:08:a1:04:82:a2:f4:f3:74:a2:f3:b3:bd:
         57:fb:e6:6a:6b:fc:fe:b7:7a:98:26:b5:50:a9:5a:4b:3b:af:
         ad:55:2d:4b:8e:60:55:c1:26:0e:ea:d5:d7:27:76:5a:3d:96:
         fe:e2:dc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:57:24 2025 by rpki-client