Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb5e9b86-7868-354d-96b4-064866f81ffb.roa
File:                     fb5e9b86-7868-354d-96b4-064866f81ffb.roa (raw, json)
Hash identifier:          1VioOFIBdoDm2FqnOIc46yJ91HiRHHqd0zUnHQorHog=
Subject key identifier:   99:DB:69:17:36:F5:B5:3E:01:E2:7E:98:DD:9D:5E:38:20:D8:6F:5E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD23BDAD9CCF7075388BA6840
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb5e9b86-7868-354d-96b4-064866f81ffb.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     701
IP address blocks:        71.245.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:da:d9:cc:f7:07:53:88:ba:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=6032165c-bc5f-4b91-aef7-2ebf67be016f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:32:43:55:2a:61:30:39:0f:91:d1:fb:87:02:
                    5d:98:62:e0:2f:70:d0:f7:54:a2:32:54:24:7f:3d:
                    81:7a:ca:25:c7:b1:dd:af:be:53:33:c1:a0:15:68:
                    f8:e9:fc:4f:9e:34:72:fc:8a:72:cb:36:6e:84:ef:
                    84:d6:7c:35:21:68:ca:ae:7e:4b:28:80:15:c2:6a:
                    01:f9:52:b0:21:3e:d7:70:a4:58:6f:4e:d0:88:3b:
                    d1:66:0e:1a:91:a6:44:ff:5b:c0:a0:2b:59:f2:c1:
                    09:aa:07:e8:da:c1:ed:db:6b:91:cf:d5:51:1f:c0:
                    11:72:20:35:29:c1:28:f2:89:20:ac:46:ae:cc:9d:
                    ce:9a:23:31:50:4b:86:d4:36:4f:a0:15:ee:ba:d1:
                    0a:91:8a:fc:de:38:54:39:a0:43:9c:aa:7f:40:f6:
                    0b:2a:fa:fa:6e:95:bb:45:b0:d2:94:c0:33:c7:60:
                    bc:8f:39:a7:7b:ef:b2:47:3e:2a:ab:50:b4:c4:07:
                    2e:d9:2e:a3:02:27:a4:1f:48:a5:bb:4f:38:7a:9f:
                    cb:b8:ea:7c:b2:da:4f:b2:4e:b5:a6:3f:12:08:80:
                    7d:b1:02:52:c8:75:0c:dc:48:6d:cc:db:fa:91:3e:
                    6d:3d:8a:b1:b6:f4:9d:f6:2e:9e:84:40:fa:99:af:
                    1a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:DB:69:17:36:F5:B5:3E:01:E2:7E:98:DD:9D:5E:38:20:D8:6F:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb5e9b86-7868-354d-96b4-064866f81ffb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.245.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:4e:4d:67:8b:9f:41:c6:06:50:3f:5f:f0:dd:3c:f5:5f:47:
         8a:77:7a:71:fd:ad:d0:66:d4:5c:4f:91:fe:93:c4:c4:8d:51:
         d1:2f:d0:2c:cb:e4:60:a5:1f:a2:04:25:ca:34:ff:ae:d3:98:
         9e:5f:b2:9c:7a:21:5f:cd:0a:90:7d:6f:5b:a9:e6:89:82:ed:
         3e:51:f0:35:3f:cf:39:5d:c2:58:49:e8:53:88:dc:1b:e7:ca:
         ef:39:de:aa:23:db:fc:da:4d:05:0b:6b:26:9a:08:5b:f4:90:
         46:bf:1e:ee:12:77:39:e6:d1:62:8c:38:ed:15:d3:c4:ae:19:
         7f:3b:4a:2a:21:e4:39:cf:c5:27:91:20:ad:0f:78:8f:b5:8a:
         4d:e4:bf:74:1f:7b:a0:f5:96:30:4f:31:c3:85:26:59:ca:50:
         d2:d1:ab:ca:06:3f:4d:6f:b4:a4:e9:39:0c:af:18:c0:7c:91:
         87:32:bc:df:53:91:f2:05:9c:78:a4:c3:cb:0a:68:c4:a3:65:
         88:93:4d:23:c8:3b:f9:7c:6e:eb:7f:7d:00:95:ee:70:79:bc:
         c3:80:9d:65:e0:d4:d6:2d:6f:f4:9f:e5:d4:05:c9:94:e1:77:
         eb:d6:a1:12:51:64:be:94:9a:10:93:4c:b3:b5:f5:71:2f:2c:
         b9:14:c2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:05:37 2025 by rpki-client