Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db7d6dbb-10f9-3ab5-a0d6-af4379c028ed.roa
File:                     db7d6dbb-10f9-3ab5-a0d6-af4379c028ed.roa (raw, json)
Hash identifier:          IIQSsnDtBoqNWpHQBFItv0mkI6ZXZ9fssaJy7/5Jybs=
Subject key identifier:   73:F2:59:E3:AA:00:C5:EE:C9:BA:0B:EB:F8:70:B0:EC:3F:C9:F2:AD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B84E768724EECC54BB47C8A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db7d6dbb-10f9-3ab5-a0d6-af4379c028ed.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     0
IP address blocks:        65.195.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:68:72:4e:ec:c5:4b:b4:7c:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=777eb3ed-39a2-44af-b30f-9c37621759e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4b:b5:3b:fc:d5:df:52:c2:72:16:03:d3:b2:
                    0c:6c:ad:6a:e0:11:cd:cc:9c:8f:3a:12:9a:f5:6f:
                    45:e8:6d:a7:e1:a8:3e:47:76:47:62:bc:d1:80:08:
                    85:05:75:6b:c5:58:2b:5c:71:32:99:8f:db:57:65:
                    ce:bd:e1:9c:a2:1f:68:8f:39:fc:6b:78:e6:35:44:
                    d0:9e:ec:b4:f0:4c:b9:1d:31:b6:f9:2d:0f:0c:f4:
                    4b:30:7a:d7:28:6d:9e:9d:24:82:4f:d0:90:a6:4c:
                    81:1a:49:b1:48:a6:69:e1:40:7a:48:7e:b4:e0:5c:
                    88:4c:c5:21:f1:74:12:d2:16:68:f4:72:f3:c4:18:
                    dd:dd:81:73:67:bc:45:93:f4:d6:54:1b:a2:30:72:
                    3c:c0:f8:eb:b1:80:f2:34:d2:e9:13:9c:b2:dd:6a:
                    83:b5:8b:0c:d3:51:67:6f:9a:c7:df:fd:09:d5:6e:
                    25:29:ea:44:1d:9e:ca:e6:e3:c4:6c:7b:db:12:a8:
                    dd:c7:6a:8a:8e:7c:71:4b:e5:33:a5:9b:8f:45:93:
                    28:38:b9:be:44:92:4b:3e:ca:f6:af:88:eb:25:a9:
                    12:7e:ba:d2:7c:f1:a4:6c:88:48:83:d3:19:c0:50:
                    d0:32:1a:8d:0b:e7:ec:2f:66:69:77:a9:82:2f:1e:
                    56:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F2:59:E3:AA:00:C5:EE:C9:BA:0B:EB:F8:70:B0:EC:3F:C9:F2:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db7d6dbb-10f9-3ab5-a0d6-af4379c028ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.195.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:36:70:d0:d8:57:ce:f0:1c:86:05:ee:cb:58:3d:f3:76:72:
         45:3e:3c:78:c5:d6:f1:65:8a:03:e1:4c:6c:09:85:9f:c6:c2:
         96:ad:9e:25:6e:3f:01:aa:65:2e:2d:dc:1c:ad:de:74:77:c4:
         99:99:51:5b:25:42:4f:18:40:2d:55:29:78:7e:a3:bf:85:8d:
         47:da:f1:24:5d:8a:25:4f:1d:0b:cd:8c:fc:ab:59:a7:15:8c:
         1b:15:0c:37:11:5f:46:36:a6:de:c4:35:72:29:e1:1f:fd:b2:
         0c:d0:7a:34:21:ea:32:6a:9e:a5:74:d6:08:c7:1b:9a:57:5b:
         20:de:87:96:3f:78:8b:b1:43:0c:b5:b3:58:96:b2:93:4f:f5:
         5d:44:e5:b4:ab:30:b4:58:f3:bd:7b:9e:55:3c:37:d5:b2:00:
         89:85:ff:8c:af:f1:7b:30:a3:62:22:84:63:50:40:90:fa:42:
         fd:93:b8:6b:b9:a0:4f:35:44:7c:5e:11:2b:37:1b:4a:ba:21:
         11:18:63:ec:02:7f:c8:85:ba:c4:52:dc:ce:93:9b:3b:c6:d1:
         08:cf:6a:a0:a5:9e:6e:fa:14:85:0c:13:ba:2a:66:bf:1a:f5:
         4f:3b:92:a1:fa:3f:87:f2:ad:a0:8e:88:84:e9:55:69:e8:17:
         96:2d:42:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:19:00 2025 by rpki-client