Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0fa1ff8-a3b1-3e9d-8f19-490d0430b78f.roa
File:                     f0fa1ff8-a3b1-3e9d-8f19-490d0430b78f.roa (raw, json)
Hash identifier:          qFGtBN96pFzGsuAAjYmECdRD52ekCjfMEQvXg+RLY3s=
Subject key identifier:   15:00:99:A0:17:6B:FC:D1:50:0B:A1:D6:0F:CA:68:D8:1B:32:AF:B0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AC9DBA8F9004588CE117F39C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0fa1ff8-a3b1-3e9d-8f19-490d0430b78f.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     6167
IP address blocks:        97.216.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:a8:f9:00:45:88:ce:11:7f:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=5562d60f-3c16-4967-8b5b-d41fc0578800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5c:78:23:c1:30:93:fc:83:bf:a9:ca:f6:e7:
                    76:60:57:63:20:70:df:16:92:aa:af:93:db:4a:50:
                    44:f8:f2:25:86:6d:07:22:0f:cf:fa:67:77:56:da:
                    b9:ad:52:5b:e6:d9:ab:4a:c4:3c:d7:ba:ea:aa:a2:
                    c3:ff:61:0b:ba:5f:69:97:f1:11:d5:bb:22:e2:97:
                    ac:94:b3:4e:89:bc:04:7c:cd:b8:93:19:08:c8:2a:
                    af:24:8b:65:1a:2a:a4:cd:37:83:cc:d0:32:d8:3e:
                    ad:b4:23:cc:3a:bf:a6:65:18:ab:47:b1:73:cd:6c:
                    9d:5c:39:71:fe:2c:42:59:31:1a:1d:51:29:1a:39:
                    0e:02:39:33:0f:ce:d0:db:ba:75:b8:2e:7d:2a:e3:
                    c3:b0:59:79:63:2d:30:0a:68:33:f6:60:86:7e:c3:
                    70:f3:90:f9:9c:2e:88:c3:19:71:38:99:66:04:77:
                    a0:2c:b1:10:e4:5e:db:35:f0:e7:a5:88:9d:a4:48:
                    32:da:88:e3:04:a7:1a:bf:08:6b:fd:bd:1b:cf:b9:
                    d3:c0:61:e3:fa:f3:0d:0c:63:d9:e7:68:1d:2a:46:
                    36:56:85:3a:cc:e7:8e:48:c0:e3:5c:35:b2:d2:a8:
                    ca:33:a5:c7:e2:d5:5b:a6:9b:e8:69:d0:dd:7d:1b:
                    f0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:00:99:A0:17:6B:FC:D1:50:0B:A1:D6:0F:CA:68:D8:1B:32:AF:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0fa1ff8-a3b1-3e9d-8f19-490d0430b78f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.216.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:ad:7d:5a:78:45:34:1c:5b:55:ac:b7:46:16:d7:2b:3b:71:
         8d:ed:a8:ac:ff:1c:98:a3:7e:3a:e7:7b:ca:2b:ac:a5:46:45:
         97:c8:d9:67:97:16:f5:8c:1b:6a:2b:90:c0:79:ab:8a:0a:74:
         f5:8d:ba:a3:08:61:9c:7b:95:ee:15:f6:c0:49:09:03:a5:84:
         0b:31:75:34:6c:f9:c7:09:8a:3a:ea:14:3f:38:fc:d2:19:1b:
         62:be:77:e1:1b:7b:07:6b:fb:59:a4:57:b6:ca:ac:21:d9:4e:
         a5:37:be:dc:c2:71:88:06:bb:17:45:8d:15:bc:64:f6:7d:3c:
         e9:a4:1b:e1:61:71:5b:0f:7c:57:e3:72:70:b3:fa:8a:1a:fd:
         cd:8d:38:99:03:02:7d:62:82:d8:12:b8:de:fd:49:8b:3b:82:
         78:d8:56:38:97:b2:e0:bd:ce:0c:54:61:a7:63:0e:d4:fe:e3:
         5e:0a:8b:28:a1:6c:f8:cf:22:58:7a:c4:12:df:8b:e3:1a:a7:
         7f:ab:b6:57:d5:c0:cb:ea:23:0e:25:46:61:e1:f9:48:7c:ab:
         08:a8:13:c0:c5:5a:1e:21:ee:7a:f6:f7:d0:3f:38:0a:39:b6:
         da:4d:3d:fe:c0:67:3e:79:77:6e:51:b4:a5:6f:ca:34:54:9e:
         1c:74:5f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:54:17 2025 by rpki-client