Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee681e62-b53f-3d25-ab59-924f75337775.roa
File:                     ee681e62-b53f-3d25-ab59-924f75337775.roa (raw, json)
Hash identifier:          Dov9V6CY3Untbp2zpwAxbjZadN+cf7rJ5fsH7vkVWMg=
Subject key identifier:   2B:19:62:20:F7:A8:85:EE:DF:13:FC:C6:F9:1B:DB:3C:B9:0B:99:86
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A126D44FFB7EF8085A95D4FC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee681e62-b53f-3d25-ab59-924f75337775.roa
Signing time:             Tue 03 Jun 2025 20:05:29 +0000
ROA not before:           Tue 03 Jun 2025 20:05:29 +0000
ROA not after:            Mon 01 Sep 2025 20:05:29 +0000
asID:                     3855
IP address blocks:        199.172.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:12:6d:44:ff:b7:ef:80:85:a9:5d:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  3 20:05:29 2025 GMT
            Not After : Sep  1 20:05:29 2025 GMT
        Subject: CN=f3781705-3385-494a-b30e-ae9305594eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1d:21:d4:35:52:38:ce:bc:38:24:49:6c:2b:
                    0a:81:e7:f6:83:23:eb:de:7d:8b:74:64:13:11:53:
                    9f:68:f4:cc:d8:e3:0f:e5:8d:12:7d:ac:a4:ee:f4:
                    cb:22:13:a6:c8:65:fd:d3:57:15:0b:f6:b7:bf:28:
                    29:10:bf:ee:e7:23:44:9f:b6:aa:c1:45:90:e0:58:
                    00:7c:4f:eb:7c:0f:e7:6c:da:a2:64:f0:d6:4c:55:
                    12:40:0f:20:47:0a:f3:61:90:4d:e0:86:4e:fa:82:
                    bc:4a:b6:d7:e0:c8:6f:b1:7b:a0:06:ea:3d:eb:a4:
                    e7:8c:e2:bc:03:ae:6f:83:1c:1e:e2:32:ed:75:59:
                    fc:ca:fa:c6:65:16:19:8a:87:d7:0c:73:a6:85:dd:
                    d3:53:42:87:c6:e6:61:75:92:36:69:b0:23:a6:74:
                    17:1f:ec:f5:91:9a:72:15:59:34:71:31:63:fc:c4:
                    27:15:b7:7c:c1:7b:c9:ea:36:be:a2:45:a7:11:1a:
                    c9:f9:b1:ef:23:6e:85:b0:d2:85:67:ee:e9:09:73:
                    8e:93:8b:03:7d:93:ac:2c:e2:3a:71:c2:c3:de:80:
                    69:f1:60:70:5b:2c:d7:30:79:be:85:69:8b:6b:3a:
                    ff:95:62:47:29:dc:39:7b:82:51:c7:04:00:65:57:
                    38:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:19:62:20:F7:A8:85:EE:DF:13:FC:C6:F9:1B:DB:3C:B9:0B:99:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee681e62-b53f-3d25-ab59-924f75337775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.172.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:dc:34:b6:e3:cd:63:34:4e:4d:d4:62:f3:b9:c9:34:c5:f4:
         d3:00:c3:e9:7e:2b:52:e8:7c:42:de:e5:80:b7:fe:1e:0f:6c:
         38:92:a0:99:3f:6f:69:e4:c0:59:73:bd:77:8f:97:75:b4:ee:
         c8:36:86:fb:4b:b2:7c:62:8b:bc:0c:86:bb:b0:9d:31:2a:c4:
         09:a9:36:b0:51:21:ca:84:cc:95:99:f8:09:f1:a7:7e:04:e5:
         37:98:4d:fe:80:52:d9:ef:04:d0:70:6b:9b:11:77:57:9f:69:
         b6:2e:ae:45:f6:be:b3:28:bf:6c:29:2b:5c:71:a4:d5:df:d7:
         5f:81:83:ec:0e:bf:fc:7d:23:76:d8:20:ed:c7:43:44:dc:8b:
         b4:b1:29:86:22:f4:bf:ab:97:54:55:ae:91:94:43:eb:72:0c:
         63:20:ab:31:24:71:1e:39:57:c8:7e:76:78:a5:fa:10:30:b1:
         c6:6c:9e:bc:bb:86:b2:6d:18:ee:21:17:65:bf:59:ef:dd:b0:
         68:91:f8:44:1f:69:c0:8a:28:57:63:b3:bd:27:98:6d:09:17:
         a3:65:31:79:bf:a3:78:fc:dc:15:77:85:0c:91:57:ae:9b:6a:
         ee:f4:6a:ae:69:83:16:19:7c:ac:2a:f4:c5:fc:6c:4e:ef:ee:
         93:3f:f9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:12:00 2025 by rpki-client