Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b4f5a61-02dd-3a9c-8068-b0c56f98a216.roa
File:                     3b4f5a61-02dd-3a9c-8068-b0c56f98a216.roa (raw, json)
Hash identifier:          OIEAGhaMILDr16IlVfp7w2AtcyIh7Iwuss+raicS4is=
Subject key identifier:   96:11:95:7A:5D:4F:34:A3:96:FE:B6:C4:CC:E0:E7:CE:E5:25:4B:8E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A1173B2AF32941A98528D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b4f5a61-02dd-3a9c-8068-b0c56f98a216.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        97.212.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:73:b2:af:32:94:1a:98:52:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=0a64a62c-1574-45c1-a753-ed04863e40e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cf:5b:72:6d:f8:15:23:a1:7a:42:92:37:20:
                    05:48:d3:dd:d3:99:61:ab:0d:fd:4e:9e:c7:f7:6a:
                    e3:94:bf:8e:95:eb:d0:ce:04:41:d5:87:d9:1b:25:
                    f8:3e:37:4e:ec:c4:76:ef:0c:c6:70:4e:46:c9:39:
                    80:73:cd:bd:0c:7b:fe:11:fd:93:9b:ad:53:8a:50:
                    33:6e:f7:14:ad:29:8c:be:f5:df:24:55:e4:5c:32:
                    2d:81:a6:37:7c:73:56:c5:0b:2a:b6:15:4f:c2:bd:
                    fb:36:33:3a:49:78:e9:e4:e7:c8:83:d1:dc:ef:d7:
                    df:36:f0:af:69:2e:14:06:bc:24:fc:de:f1:9f:3e:
                    3e:ff:21:5b:12:65:ca:69:03:4d:b3:61:5f:8e:e3:
                    1d:fb:62:a7:d4:cd:53:e1:cb:98:6c:98:14:25:5f:
                    0c:d6:8d:05:f8:c0:82:25:4d:05:e5:77:60:dd:2f:
                    5f:b6:60:30:c5:32:29:33:15:93:34:e2:aa:73:c9:
                    2d:95:f4:90:4f:fc:2a:dc:a7:c0:e1:6b:9f:52:b5:
                    b0:21:0e:1d:c2:92:e8:5f:b3:f7:36:5b:4d:0c:02:
                    ed:8d:e5:5a:0a:d8:b2:2d:a6:aa:d3:2b:66:db:14:
                    c8:32:7b:d7:82:ad:73:47:55:ac:2c:82:66:6c:2e:
                    4a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:11:95:7A:5D:4F:34:A3:96:FE:B6:C4:CC:E0:E7:CE:E5:25:4B:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b4f5a61-02dd-3a9c-8068-b0c56f98a216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.212.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:e0:b1:91:2c:cd:b9:95:74:55:cd:a7:49:dc:d4:40:ac:ff:
         c9:d2:ec:9e:67:80:19:68:8e:b0:e1:63:e5:ac:7f:37:cc:93:
         aa:86:2b:6f:80:cd:26:20:75:9e:b4:3c:1c:87:02:d5:c0:0f:
         ad:3d:26:3c:b4:ed:65:0e:5e:20:ca:8b:be:7d:84:1e:df:83:
         bf:32:e1:48:a7:ac:66:6a:f3:95:e6:04:32:d3:7d:17:0d:90:
         a8:db:f9:62:02:e9:71:ac:bd:53:7b:87:3b:82:e6:b9:5a:21:
         e5:b9:61:ec:95:10:e1:ff:d0:58:af:f4:37:b2:d9:57:b7:91:
         bc:37:12:ee:f7:7b:44:0c:e3:5c:27:4e:fc:99:b3:73:4b:82:
         ce:d1:eb:67:c2:78:0b:48:0a:1e:fc:be:e3:5c:34:55:71:c4:
         6a:5f:19:f1:e5:18:6b:c0:47:6d:b2:0a:8f:18:e8:0e:10:05:
         5f:98:ae:f3:24:8e:91:60:de:0f:9c:54:3c:a1:2c:22:a0:64:
         45:fd:bb:b3:bd:ae:76:3e:94:9b:45:46:a0:a6:19:ed:e5:43:
         a9:49:2e:42:bd:cb:78:10:61:7e:20:0d:59:0e:63:44:e6:87:
         85:f9:37:fb:2f:27:16:6b:4d:91:0e:86:61:32:27:70:55:80:
         4b:e4:90:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:54:33 2025 by rpki-client