Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14762383-69b8-3c43-9bec-4b8c157655e0.roa
File:                     14762383-69b8-3c43-9bec-4b8c157655e0.roa (raw, json)
Hash identifier:          KNdTHAUI9uTJDVy+XOLmhCPYI4YPM1K5JqKpB5PjNnk=
Subject key identifier:   9E:DF:54:92:3F:A9:E2:E3:30:13:89:26:B4:E7:98:B4:A0:C9:BE:CC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36D8D436E3F65E115BC980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14762383-69b8-3c43-9bec-4b8c157655e0.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     701
IP address blocks:        70.20.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:d8:d4:36:e3:f6:5e:11:5b:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=c6b6e4ed-d8ae-48d8-b2f9-a41b6f2e8764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0f:30:c0:5c:74:bb:34:c1:82:c9:42:fe:99:
                    27:39:3b:9a:70:c0:d7:3d:a9:04:b8:ca:eb:f6:94:
                    f1:ec:a7:c4:00:f5:c3:dd:06:4e:10:e6:21:10:91:
                    03:29:96:ec:46:8c:8b:60:4e:b7:23:5a:cb:bc:df:
                    11:8a:ef:4e:c3:7d:dc:07:d7:a8:51:c2:89:81:12:
                    98:2f:cc:a6:e7:99:bb:83:0a:c2:47:92:d0:9a:01:
                    47:6e:01:27:7b:7b:e3:be:37:71:4f:79:ce:db:df:
                    87:2a:96:20:dd:a1:16:b8:9f:44:40:ae:3a:99:51:
                    ee:1f:89:cf:45:06:ba:39:03:bb:d6:eb:bd:9f:3a:
                    be:34:75:fb:99:92:42:1e:1f:84:3a:10:27:81:d6:
                    85:30:a9:20:40:91:8b:c1:63:66:e7:47:10:cf:6f:
                    3f:80:e0:9d:0f:5c:45:5f:70:c7:3a:c2:c6:59:29:
                    07:4f:35:c4:63:8d:04:12:87:c1:42:ff:4b:2e:92:
                    68:69:e6:88:4e:2e:10:ac:ed:c6:9c:d9:cf:0a:8f:
                    90:a6:fe:ec:64:5d:30:8f:3b:c0:d4:7f:a5:7b:89:
                    e6:5e:36:97:ef:b2:fc:12:f6:fa:d7:c1:d6:cb:87:
                    e8:04:3d:11:7d:30:39:1a:78:54:11:a0:57:81:92:
                    a2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DF:54:92:3F:A9:E2:E3:30:13:89:26:B4:E7:98:B4:A0:C9:BE:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14762383-69b8-3c43-9bec-4b8c157655e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.20.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:65:b9:6a:a3:f0:24:c8:73:85:f6:ac:73:a6:05:4e:18:b8:
         dd:c2:ee:c6:25:4b:6e:d7:c9:de:b2:77:50:2a:d9:89:5d:92:
         de:06:eb:df:ee:d1:9e:69:8b:1b:7c:dd:b9:dd:57:a9:f8:29:
         e7:aa:3f:b8:4a:0d:03:99:d7:f1:e3:4c:e7:19:df:e5:75:8a:
         c0:c3:4b:7a:e5:bd:44:06:6b:99:91:31:19:f6:09:0f:8d:89:
         fb:60:ae:6f:bf:40:d5:c0:c7:d8:64:fe:7c:16:fa:ec:98:02:
         45:92:e7:b1:24:78:b4:11:61:03:72:bb:2d:ab:27:1a:da:a1:
         7b:ee:2f:32:68:27:b4:e1:56:44:a9:a8:17:ed:97:de:ec:57:
         8d:28:ee:2d:e9:bd:2c:fb:28:f1:93:8f:05:3d:3e:38:da:90:
         46:dd:c6:06:e8:8c:95:69:74:f7:0a:4a:3f:1c:ce:68:ea:ea:
         fb:05:61:48:c8:16:87:cf:36:97:f1:00:37:79:98:03:69:7e:
         c6:02:20:e2:4c:55:de:d8:2c:04:5a:34:7c:d2:6a:3f:9c:d5:
         71:dd:3f:19:5a:f8:33:8f:dc:f8:ba:e7:d8:5d:35:76:46:74:
         26:54:72:f8:45:34:a8:00:ae:82:d9:c6:25:70:9a:5f:d9:fb:
         8c:82:51:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:10:39 2025 by rpki-client