Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8beed66-cafa-3fdc-8e4d-5b35b217f2af.roa
File:                     c8beed66-cafa-3fdc-8e4d-5b35b217f2af.roa (raw, json)
Hash identifier:          +9jZUjlEzbKxvRlPelES+7yf2kg2JYYn4qtgjpM8S8c=
Subject key identifier:   BE:06:79:47:82:29:EE:0A:BD:1C:C2:5E:4F:C0:7C:A9:5D:6E:71:27
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36DF0CE62B01FF99CA90A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8beed66-cafa-3fdc-8e4d-5b35b217f2af.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     701
IP address blocks:        151.199.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:df:0c:e6:2b:01:ff:99:ca:90:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=e2b2e6bb-b2b2-409d-9c0b-3e321c6f7709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b3:85:e2:2b:f4:82:55:74:ca:de:08:50:31:
                    1b:c0:be:09:33:09:bd:e5:a5:07:69:87:d9:56:77:
                    d4:58:77:93:e6:42:5a:8d:61:e7:9f:5c:2a:50:77:
                    bc:f9:91:20:24:0f:d1:c1:a8:f4:f2:a2:7a:ee:58:
                    2d:28:b1:03:dd:f7:3a:9d:82:91:20:b3:ce:bd:cf:
                    85:66:63:a6:51:1b:cf:c5:0f:93:93:55:c3:91:2d:
                    a1:44:72:56:6d:9d:ff:a6:a4:d7:b4:fc:7c:e6:bc:
                    f6:91:e8:74:e2:b7:0e:de:08:f1:20:17:3b:6d:f2:
                    80:7f:60:ff:f7:a8:39:33:95:69:ba:12:4c:d4:33:
                    8b:d9:4d:46:1f:d7:03:44:eb:04:3e:87:15:74:ea:
                    73:50:be:3e:e6:ec:1d:04:e5:4c:ab:72:c0:4c:7e:
                    32:b8:26:74:4d:8c:36:92:80:13:13:ef:74:2c:a4:
                    d8:a9:6a:a0:19:51:4e:c5:e2:39:0f:ec:24:3a:e4:
                    2a:f8:f5:53:de:be:b6:f7:20:58:ad:27:05:00:7a:
                    a1:ae:91:cd:5a:a2:11:b5:b8:6d:3d:98:6d:84:81:
                    57:1a:a7:40:0c:3c:e6:24:46:85:20:33:f1:4e:72:
                    b3:d8:84:f6:eb:7d:21:22:09:e6:ad:cc:0b:b0:94:
                    ba:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:06:79:47:82:29:EE:0A:BD:1C:C2:5E:4F:C0:7C:A9:5D:6E:71:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8beed66-cafa-3fdc-8e4d-5b35b217f2af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.199.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:3a:f9:f6:41:38:d2:3c:dd:d5:77:52:48:89:7f:c4:b0:06:
         f9:1a:b7:f2:37:32:12:7e:22:a3:7b:9e:bb:0f:46:9c:81:b5:
         c2:bd:b1:b1:9a:ff:c5:8f:72:af:84:db:1d:7f:33:8a:30:b2:
         8a:1a:c2:85:ab:63:94:c5:7e:ed:ea:56:26:5f:e7:d9:d7:79:
         89:2f:3d:a4:dc:20:26:7d:e0:bd:22:6d:ac:88:61:8a:cf:8c:
         6f:0c:2d:65:b7:c0:76:b4:e5:4d:16:ce:bd:ac:52:4b:0e:81:
         25:66:73:c8:b0:71:6a:44:31:7f:3d:c0:75:7f:7f:bf:84:57:
         6e:f0:9a:0f:25:61:aa:e6:e4:3a:ca:c4:5f:52:49:33:2c:f9:
         5b:87:20:0b:d7:f1:ec:6e:3e:0a:21:d9:2b:9c:12:fe:f3:3a:
         fa:9c:7c:31:88:4d:e9:b6:41:fd:4f:89:92:23:b8:ab:70:e5:
         8d:fd:59:c9:2c:7b:a0:d2:ab:9b:1e:c7:ce:46:2f:0f:95:df:
         64:21:a1:69:c6:b9:3b:46:6b:5f:f8:9e:9e:73:fb:dd:68:83:
         0d:6e:bf:94:06:dd:20:5b:6c:c2:3e:4d:9f:79:18:e0:0a:d7:
         d6:04:e0:dd:86:5d:55:68:64:d6:bd:c1:fe:f8:c3:87:2e:92:
         2d:2d:50:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:30:48 2025 by rpki-client