Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9cb744e9-dff2-36bc-85e4-100956d71cd3.roa
File:                     9cb744e9-dff2-36bc-85e4-100956d71cd3.roa (raw, json)
Hash identifier:          SRtGRkgailWOuyJNK5U9ibFWrUXu13IzaVNBxH2D+tU=
Subject key identifier:   65:54:97:28:C9:62:31:46:E0:A4:D3:76:EF:58:3F:D5:7F:76:60:D4
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584A374ACF477AF9142D65667B60
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9cb744e9-dff2-36bc-85e4-100956d71cd3.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     19795
IP address blocks:        208.73.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:cf:47:7a:f9:14:2d:65:66:7b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=56ef0299-de43-43a5-b932-daefea0d4965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0d:00:02:98:a7:ad:21:d8:6e:45:44:3d:66:
                    0a:b8:e7:7e:28:9c:1c:93:70:7a:7b:6c:6d:3c:d4:
                    f6:5b:37:e9:06:d6:84:ed:98:bf:82:7a:00:3e:4d:
                    3b:bb:f0:79:6c:04:97:f2:5c:1d:ba:e7:83:2a:ab:
                    03:b3:17:21:8f:17:dc:56:20:ea:ec:92:24:63:95:
                    83:10:81:31:ac:ed:e5:30:66:e2:34:59:3b:7f:f7:
                    86:5d:1b:7c:d3:25:5b:4b:c6:06:e7:e0:e3:0c:a9:
                    5e:3a:e4:62:12:6f:8d:11:26:a4:85:e0:3c:96:cd:
                    02:9d:a7:c8:42:94:e4:fc:8f:19:95:94:f3:53:ec:
                    44:f9:5d:88:55:00:4c:4a:ae:fc:45:77:ce:e6:0c:
                    84:68:31:4a:95:27:b2:67:d0:68:e0:80:93:ad:af:
                    5d:d9:14:d8:08:35:f6:2d:f5:22:e8:20:e1:59:d8:
                    fa:5f:c4:0e:7e:45:77:4e:f7:ed:74:35:fb:8c:ad:
                    6f:bb:c5:9a:14:ce:06:29:f4:f2:e0:82:02:2b:86:
                    00:b7:35:53:41:4a:25:4b:07:58:3f:07:a0:66:e1:
                    58:43:90:ac:39:56:88:23:f6:73:2f:ad:d5:26:b2:
                    e0:7f:19:76:78:34:b2:f3:33:2f:30:1b:4e:08:31:
                    5c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:54:97:28:C9:62:31:46:E0:A4:D3:76:EF:58:3F:D5:7F:76:60:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9cb744e9-dff2-36bc-85e4-100956d71cd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.73.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:37:ac:ae:02:19:f1:81:ec:6b:d0:3e:3f:fe:62:21:48:5a:
         fa:9b:3d:21:11:de:7f:03:cb:f3:66:58:fa:ad:3a:cb:a1:60:
         66:eb:e5:55:a2:b7:33:bf:83:9d:5e:07:20:3a:35:cd:b2:2a:
         b7:03:b5:7a:5b:f8:62:26:ab:d6:a7:0b:d2:bd:d8:b4:75:3b:
         92:ae:90:a4:51:22:9e:92:0f:a1:92:bf:8c:6f:a0:6e:d3:d8:
         41:d0:ff:0a:b5:83:aa:73:78:d7:b3:55:1a:c7:cf:dd:1f:b5:
         b5:b8:24:b2:be:6a:ad:4f:6f:6d:5d:6a:76:ee:75:26:c8:50:
         46:bf:6e:8c:f3:ff:e9:eb:8c:99:46:ca:a0:84:d8:50:9f:f3:
         4e:bb:39:9f:2d:f3:3f:30:c1:cc:6b:9b:de:51:13:f3:d2:0e:
         a7:a9:ce:a0:bb:35:2c:50:48:cc:29:fc:f5:4d:e8:a3:f8:d0:
         6e:1b:8f:3f:bd:97:d9:ce:85:3c:42:8f:53:49:52:da:0f:e1:
         f3:e3:9c:b7:83:99:28:98:31:d0:d9:37:74:ad:d8:74:ea:a3:
         cf:a0:35:5d:a3:8e:0a:72:de:77:7b:be:57:c9:8c:56:2c:97:
         ed:ee:ed:aa:38:80:19:b0:e0:8a:cf:6b:97:14:3e:3b:a7:1c:
         7a:64:e6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:40:07 2025 by rpki-client