Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eb7ac9d6-caa9-3fca-b0d2-d3c3a6d3e44d.roa
File:                     eb7ac9d6-caa9-3fca-b0d2-d3c3a6d3e44d.roa (raw, json)
Hash identifier:          1j7e2mwyQK/WQ0o1RUJSVRewnp/JG44trTzvW0MPGQw=
Subject key identifier:   CC:A8:05:91:BA:03:07:C5:92:37:DC:26:B0:0B:0C:39:4B:F3:16:2E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD23BDC0B8F6F3490D4182080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eb7ac9d6-caa9-3fca-b0d2-d3c3a6d3e44d.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     701
IP address blocks:        96.249.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:dc:0b:8f:6f:34:90:d4:18:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=2fe69f3f-931c-4aae-a939-755c68fe1118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:de:63:7e:44:99:3c:f2:c6:47:a4:f2:8c:ec:
                    10:41:38:b7:4a:06:8a:c9:df:8f:a3:57:19:a8:03:
                    77:22:fc:cf:6f:67:44:c1:fe:87:0c:0c:99:66:23:
                    9a:b6:b3:4a:94:ea:5b:5c:4c:98:fc:15:c9:2b:36:
                    ea:d0:5c:ad:fe:92:11:7c:b8:d1:df:f1:ee:ad:39:
                    26:ae:e4:bb:e2:8f:74:03:b6:c0:40:c9:a1:3a:8d:
                    b7:9f:dd:59:c1:fd:f1:93:d2:8a:29:88:a7:ff:47:
                    e8:bb:c6:6b:0d:87:e8:69:24:ad:c6:e1:5b:86:96:
                    08:b3:c9:56:35:77:7f:5d:75:d2:fb:02:e8:10:f0:
                    fe:f0:03:51:9d:74:73:67:f1:fe:29:09:98:35:bd:
                    9f:be:62:8c:fb:ee:94:12:5f:b6:fd:3a:7f:b3:3f:
                    5b:9a:9a:d4:1a:08:c8:ba:49:11:1b:3e:3c:4a:ac:
                    b3:f3:7a:c0:9c:45:8b:64:2c:65:47:6c:a6:97:65:
                    a6:cd:cc:51:9c:a1:12:bd:25:ad:fb:b5:5c:8e:36:
                    5a:b7:7d:be:f1:69:c8:59:a9:1d:af:6e:ff:8c:cb:
                    70:1d:f6:b1:3e:62:f4:86:8f:b7:6d:d1:e6:d0:12:
                    e5:f6:c3:cd:f8:e3:60:c6:27:49:20:01:a5:63:ef:
                    46:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A8:05:91:BA:03:07:C5:92:37:DC:26:B0:0B:0C:39:4B:F3:16:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eb7ac9d6-caa9-3fca-b0d2-d3c3a6d3e44d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.249.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:a9:34:9d:ad:92:cc:bb:c7:b0:5f:11:f3:26:e6:a9:b0:79:
         42:b6:be:31:37:d6:69:0b:5e:e9:37:46:be:b8:6e:34:45:74:
         f0:c9:04:82:37:5c:a5:cd:e7:37:ef:7f:0b:e9:85:b7:29:2c:
         0e:96:79:8a:00:4f:3d:5e:ed:8c:72:15:31:af:a0:54:13:01:
         f7:30:9f:ab:e2:36:36:70:32:94:0e:b0:aa:8b:52:ad:0b:79:
         d1:2b:83:99:20:ba:91:48:41:f8:a0:23:77:0f:41:b4:49:cc:
         4c:29:20:ea:47:f9:da:18:4f:86:ac:4c:5f:bd:74:73:b5:67:
         e9:3e:49:05:a8:21:5e:17:07:6b:36:5f:3f:b8:66:eb:8d:d9:
         49:dd:7b:1a:e2:23:53:ad:c2:d9:f6:53:3c:ed:ce:1a:9d:ec:
         f8:2e:8a:aa:36:69:5f:14:7d:1d:78:40:49:ae:b7:ac:da:92:
         13:01:b3:23:4b:8a:d4:b6:85:4d:bf:42:fd:f4:c5:93:ee:2c:
         5f:26:c7:86:f2:ea:93:d3:08:3f:b7:c4:e2:97:33:a3:2d:bd:
         68:a9:a3:45:25:f1:81:35:17:4d:67:9f:f1:44:92:9b:8b:b4:
         ea:1d:01:7d:53:28:d2:33:a4:76:e1:be:ee:91:b4:fd:ab:75:
         b6:46:f6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:47:59 2025 by rpki-client