Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b2803a04-3084-37b9-b27d-9e21bebb101b.roa
File:                     b2803a04-3084-37b9-b27d-9e21bebb101b.roa (raw, json)
Hash identifier:          aaCv4V30WlCiMQDUcyhU1uF+RJ2JmmJhSoXRNUCwBuE=
Subject key identifier:   47:E2:A9:84:0D:E5:60:FF:20:7C:B4:61:07:EE:AA:D8:69:1C:96:4F
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328584B8EACD5393D4A470F11AB1E80
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b2803a04-3084-37b9-b27d-9e21bebb101b.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     16509
IP address blocks:        192.184.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:d5:39:3d:4a:47:0f:11:ab:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=c2329b8a-f852-4968-a57e-d5fec7c30651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:21:3b:6f:c0:dd:fb:82:0d:5e:96:41:c8:ff:
                    18:a1:cb:18:a2:ee:a5:b4:97:e1:87:6e:23:4f:62:
                    90:35:7e:4b:4c:2f:9c:5f:d5:10:18:ea:d5:7a:fc:
                    a1:c2:85:20:0d:0e:3a:d0:71:9b:f2:c2:c3:72:71:
                    6d:40:12:88:b1:59:6a:11:e0:bd:f5:f0:c9:a3:ab:
                    72:d4:00:82:25:29:9a:a1:79:03:b5:4a:29:10:c2:
                    ac:12:26:4c:dc:be:ab:94:da:40:a1:8c:a4:0c:e9:
                    91:31:9f:57:e5:d3:ac:d0:37:d8:0f:31:06:32:93:
                    45:73:45:9e:c5:cf:5c:72:73:5e:6d:2a:b5:6f:80:
                    6c:e7:04:83:af:60:c5:30:a7:d6:2f:21:6a:b3:1d:
                    aa:a0:16:4e:77:31:f5:7f:ee:6f:88:60:c6:b4:5b:
                    78:b9:c1:30:a0:46:60:6a:09:7e:b8:69:6b:90:a1:
                    f9:c6:b2:ee:03:07:f1:ac:8e:8a:42:d4:07:e1:e0:
                    45:68:47:93:61:ef:32:18:a5:d2:07:72:9e:f8:ab:
                    2e:e0:73:d3:7a:8d:6c:95:9d:fe:25:f3:f9:d6:5a:
                    f2:50:51:43:ce:a6:7b:6b:31:98:59:78:2a:31:6f:
                    ef:16:93:43:30:11:07:e8:65:0c:1e:53:45:4a:5c:
                    ce:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E2:A9:84:0D:E5:60:FF:20:7C:B4:61:07:EE:AA:D8:69:1C:96:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b2803a04-3084-37b9-b27d-9e21bebb101b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.184.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:c5:9e:61:f2:27:37:0d:f9:ed:80:42:a9:7f:0b:9a:23:7d:
         43:6d:66:d2:22:a8:48:c6:df:a7:86:4c:f3:73:0d:ea:56:b2:
         e5:44:8f:27:2a:69:4f:03:07:ca:ad:6f:ff:92:8f:38:64:5b:
         9a:f8:0a:b8:e3:d6:4d:60:7b:84:b4:d2:6d:f2:41:db:f1:7e:
         67:3b:7a:c7:43:35:ea:5c:69:fa:0a:fc:d1:2d:65:9c:3c:3e:
         33:0d:ee:c4:9e:58:d0:09:85:e5:72:f7:2c:21:f3:86:e1:53:
         a4:c1:a9:9a:89:74:6f:50:32:ce:a7:be:21:ee:b7:35:24:bf:
         aa:61:12:6e:ab:34:cc:86:d1:14:dd:77:0b:10:ca:a7:b8:e5:
         b7:45:13:30:b8:c4:0f:27:22:5f:c9:72:aa:f8:24:96:36:02:
         42:34:b6:37:2b:f3:38:71:25:98:50:5b:61:22:82:77:bb:77:
         cb:57:83:9d:66:8d:76:88:60:0e:2e:18:a6:b3:22:46:52:64:
         fd:ff:93:fb:a4:52:f7:6c:ee:6c:6a:15:16:37:ca:1b:5c:96:
         1f:79:b9:6e:e8:16:0e:56:b3:e7:ca:d6:96:48:b6:2f:e1:5a:
         64:41:83:d9:0e:35:9b:17:29:9e:b2:f2:e9:5a:6a:a0:34:fb:
         09:43:01:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:56:04 2025 by rpki-client