Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1ab03148-f332-37f0-a7e0-f5da3843a484.roa
File:                     1ab03148-f332-37f0-a7e0-f5da3843a484.roa (raw, json)
Hash identifier:          HdU92IryQ7TAmi+G0l47+jXSYGpKJhgwvjw/iafkwes=
Subject key identifier:   B0:F7:19:7E:2D:99:A0:34:F3:06:94:C0:70:7A:79:F3:20:24:7C:D8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36D8781731303BEB776000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1ab03148-f332-37f0-a7e0-f5da3843a484.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     701
IP address blocks:        209.158.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:d8:78:17:31:30:3b:eb:77:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=713361e9-182c-4f90-941f-1661336771d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:aa:39:53:a0:c4:1e:ec:bd:c5:3f:ba:51:a4:
                    fe:88:0f:9b:83:05:bb:eb:c2:45:86:b2:50:ad:65:
                    2e:02:6c:e2:4d:e4:41:fc:4d:83:13:de:2b:7f:76:
                    09:a9:c4:be:4b:34:a3:65:a3:a6:e1:18:ce:14:46:
                    28:ae:73:fe:91:58:99:9c:fb:c3:58:b9:52:45:65:
                    3f:26:83:ba:92:07:80:13:d1:8b:d3:e6:8f:76:5a:
                    34:f7:b4:7b:41:5f:28:08:e7:e5:aa:5b:6a:5f:5e:
                    e8:07:09:a0:ba:43:f6:b7:2a:35:4d:ff:aa:94:58:
                    79:03:09:88:40:1b:95:20:e2:56:be:a7:b0:67:f7:
                    28:73:7d:de:a0:74:7c:85:87:57:88:12:0a:df:a1:
                    42:aa:a9:c5:53:8a:7c:a8:fc:62:ac:ca:6f:a2:3d:
                    ae:05:b8:9e:44:12:3e:0e:a9:37:24:d0:e7:30:ac:
                    bc:9a:97:04:80:cd:7b:47:0a:94:a7:9b:0d:85:82:
                    f5:cb:13:b1:67:7c:a6:41:71:3b:f5:3e:90:89:94:
                    e8:f9:93:ed:cb:34:51:f0:c2:ec:f9:1e:63:97:78:
                    03:cb:eb:51:6f:24:45:09:99:e6:50:91:aa:c4:30:
                    9d:9c:e0:10:78:0c:23:7b:2b:5a:18:f2:86:83:e8:
                    48:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F7:19:7E:2D:99:A0:34:F3:06:94:C0:70:7A:79:F3:20:24:7C:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1ab03148-f332-37f0-a7e0-f5da3843a484.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.158.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:7b:e0:31:54:7b:70:79:37:a5:e5:0a:ff:ed:5e:5a:72:e3:
         b5:6e:42:ac:66:06:e8:37:80:19:e8:c7:9f:6c:52:ee:c1:84:
         9b:36:03:ac:56:ca:ee:96:61:f6:e6:32:94:65:e5:29:56:c6:
         16:2e:ce:f5:57:0f:24:77:25:ca:50:ac:ba:9a:1f:de:40:bc:
         af:c0:e6:90:53:39:9c:66:7e:9f:29:bb:0e:4d:8f:ee:c0:04:
         9f:a7:87:6d:91:07:86:73:91:54:59:9b:04:a3:48:43:36:e4:
         39:b8:8e:11:4c:7b:91:68:3c:91:ef:ee:4d:c9:7d:ff:c4:88:
         be:26:92:86:62:c1:20:f4:8c:82:df:1f:46:a1:04:30:18:76:
         62:a2:36:58:f6:94:03:b2:6e:90:a4:6e:b6:c5:86:aa:f2:6d:
         ae:96:3e:5e:a4:d2:98:2c:f3:bc:11:d3:22:a4:d6:c8:9e:d4:
         d1:a0:b4:06:b1:47:4a:88:8e:b5:9c:83:8a:5d:c3:50:b1:26:
         b0:48:f8:56:30:9d:26:69:2d:d2:52:1f:4f:6e:bf:57:d7:a6:
         77:31:29:c9:d5:b6:8e:9b:85:cb:14:4f:37:01:c9:b8:7f:8c:
         20:2e:2b:73:03:b9:b8:60:db:95:3d:9f:fb:a1:d3:f7:f4:5e:
         16:8f:af:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:36:03 2025 by rpki-client