Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87618e35-5125-3a43-9bc1-fa27174b3c50.roa
File:                     87618e35-5125-3a43-9bc1-fa27174b3c50.roa (raw, json)
Hash identifier:          IjvNIgc9yzanpom8Y98pKXbxsik53sOgMtCsfCEiODE=
Subject key identifier:   D6:DD:3F:3B:C8:4F:A4:EF:F5:DB:E7:CF:F6:CE:77:42:A7:2A:91:CF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD23C13E82A7427F9C1C15D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87618e35-5125-3a43-9bc1-fa27174b3c50.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     701
IP address blocks:        130.81.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:13:e8:2a:74:27:f9:c1:c1:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=e19d2488-7d2e-4625-bb60-167a5d4d417e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8a:33:99:1b:ec:1c:ad:e2:c0:a6:61:58:b7:
                    97:89:ac:be:41:04:30:43:5b:5e:9b:32:85:bd:22:
                    41:3b:29:6e:86:fa:61:32:63:b9:2f:67:9c:da:e5:
                    7e:e0:4d:b8:4a:fa:ee:4c:03:d1:33:21:d8:68:3f:
                    75:c0:9f:d7:de:d8:38:36:66:f2:79:33:ad:10:cf:
                    29:ed:03:d2:43:e4:75:85:47:25:7d:ab:d6:62:1d:
                    c9:cf:3d:a3:ec:50:39:89:45:54:85:39:0b:5e:60:
                    ba:7f:19:68:38:69:8f:99:c5:d1:df:83:e5:13:f5:
                    05:48:90:cc:c1:12:60:13:0f:69:a7:de:1e:df:e7:
                    1a:2b:21:eb:ec:1b:7d:37:88:81:a7:dc:cc:3f:56:
                    c7:71:05:1c:cc:53:9c:c0:9a:29:44:a1:e4:c4:14:
                    84:f9:6c:d0:19:83:46:2c:9d:20:58:4d:f3:6f:eb:
                    c1:68:09:e4:cb:1e:7a:f7:44:46:0a:dd:b7:cb:98:
                    e8:94:bd:4c:40:e2:54:4d:fa:90:bb:73:06:97:d3:
                    14:80:e2:fd:49:fd:7d:35:d3:f9:96:f8:db:f5:b7:
                    7e:b4:e0:21:d2:91:30:f0:0f:e3:b2:dc:e3:e9:9e:
                    cb:26:4c:d1:a0:93:7d:df:5b:d4:99:36:68:b0:e5:
                    e9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DD:3F:3B:C8:4F:A4:EF:F5:DB:E7:CF:F6:CE:77:42:A7:2A:91:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87618e35-5125-3a43-9bc1-fa27174b3c50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.81.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:d2:15:97:05:1e:63:df:ed:da:35:cd:00:98:a8:48:c5:4c:
         a3:29:e1:45:14:78:d7:97:c2:e3:a7:da:98:75:04:47:45:ed:
         14:c0:25:75:54:60:c4:f1:36:ae:2a:be:95:3b:90:48:3e:fa:
         f7:5b:6b:e6:a5:46:21:27:03:fc:4e:38:33:64:37:e6:e3:c9:
         c6:5e:87:73:cd:4e:90:03:4e:be:ba:40:5f:f4:82:eb:eb:94:
         f1:81:52:16:02:da:a4:eb:53:00:fe:1e:3d:d6:03:85:08:18:
         75:f7:d1:4c:26:ab:2e:87:fc:6a:52:cd:08:e6:84:85:a8:8d:
         51:3f:a1:f6:7a:49:98:fa:0b:e7:e3:4e:28:fd:18:ad:17:39:
         9e:ce:a2:fd:d8:c4:a9:43:7b:53:68:4a:98:75:42:86:29:00:
         49:17:d1:92:8a:e7:47:09:09:f9:91:46:49:b7:4f:f1:2a:ab:
         8f:b4:dd:59:34:64:bf:ae:86:ec:b6:aa:89:8e:a5:fc:c6:68:
         bc:bc:42:90:17:db:5c:55:13:ae:55:ab:78:70:fd:bd:28:76:
         a8:02:93:33:a4:04:9e:5c:87:cb:ee:c7:f4:6c:15:fc:87:57:
         09:b4:38:68:ea:bb:00:90:8f:36:09:e4:f0:05:61:66:45:2b:
         df:1b:1f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:22:48 2025 by rpki-client