Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2057dcf9-3a9b-30b0-a792-0116b07dd31b.roa
File:                     2057dcf9-3a9b-30b0-a792-0116b07dd31b.roa (raw, json)
Hash identifier:          M08wVsTfeozdViqX0WvZllMFW5QjWep2VxnC9p8WcLI=
Subject key identifier:   DD:6B:1E:27:31:03:C5:E3:61:38:12:A1:72:DC:37:D9:92:46:BF:C7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C371B3BFE758FE78C655400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2057dcf9-3a9b-30b0-a792-0116b07dd31b.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     12079
IP address blocks:        153.114.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:1b:3b:fe:75:8f:e7:8c:65:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=5ae9bd77-9d02-429b-8487-e66e788d3de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:94:48:c0:d8:a9:11:58:a6:ea:72:c4:fd:cc:
                    c4:3c:89:ed:21:c8:27:81:80:5d:d6:5d:f6:c2:57:
                    80:df:09:3d:a0:5a:b1:7c:89:5b:7a:d6:c7:5a:80:
                    33:da:df:f9:6f:fd:2e:9f:c6:20:ee:1c:b8:4b:ff:
                    a2:d8:33:a2:1f:09:99:a6:cf:27:37:ac:73:63:8f:
                    25:54:ec:ac:f3:16:aa:d9:00:ae:2b:af:03:c2:8a:
                    01:89:49:b6:12:19:fa:97:8b:66:6c:93:07:7a:bc:
                    3d:41:b8:f5:1c:21:d8:8d:1b:79:64:21:d9:72:d7:
                    07:ba:98:c8:51:d5:7d:59:27:b8:61:3c:ae:ee:39:
                    08:85:fb:08:99:e9:2e:04:c5:43:0f:1b:69:7f:f8:
                    56:d6:7a:65:c4:e6:a4:37:93:6e:a4:85:6c:be:c7:
                    46:51:08:53:e3:95:ee:0f:ef:b1:79:4c:5f:76:75:
                    d0:e3:74:be:75:e7:f5:f8:38:c2:a9:fe:72:56:26:
                    8a:26:cf:6b:48:ee:90:0e:04:44:de:fe:1e:e4:31:
                    22:66:d1:a1:3a:cd:56:b4:58:c1:c0:90:51:e6:f3:
                    25:47:75:6a:ca:6e:9d:f6:65:7c:5f:7f:3d:a2:17:
                    c8:ef:5f:c5:d1:e0:bb:6f:ba:e8:5e:8f:f8:85:82:
                    aa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6B:1E:27:31:03:C5:E3:61:38:12:A1:72:DC:37:D9:92:46:BF:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2057dcf9-3a9b-30b0-a792-0116b07dd31b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.114.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:f1:9e:f6:09:d7:e8:6f:77:62:35:a5:6d:23:3b:26:91:65:
         d9:b6:5b:76:6f:6a:9b:c9:24:6a:bb:06:31:3e:12:66:d6:56:
         b5:f0:95:b1:38:06:9f:3c:71:dc:de:70:99:ea:a5:4d:b6:2e:
         71:80:33:0c:79:ec:e5:8f:16:c8:df:93:ac:d6:c7:69:79:7d:
         08:7b:15:b6:1c:ba:e8:c9:2e:28:f6:44:d6:c9:8f:01:de:e6:
         50:83:0f:d6:92:ce:4e:ea:df:e0:14:eb:e3:a0:35:aa:fb:e1:
         7a:a5:90:66:a2:78:b6:54:8a:33:22:39:38:99:40:75:76:94:
         0b:9a:36:a7:65:e7:de:56:50:a4:57:eb:09:e3:29:fa:24:6b:
         14:58:bd:fb:50:6c:92:30:59:4c:3a:a0:e8:37:5d:33:aa:e2:
         5b:f5:ab:10:20:65:32:3c:5c:db:aa:ba:67:4c:71:da:23:af:
         cb:8f:12:72:03:6c:70:0a:2c:66:08:d4:0d:f9:92:84:60:e6:
         f0:8b:d7:5d:70:96:e0:bc:f6:96:69:6f:4e:ec:9a:29:bc:b3:
         ab:6b:66:d6:b3:f7:b5:3a:36:d2:2a:08:fa:1d:dd:43:34:dd:
         6e:80:1a:75:64:15:63:6b:1d:ec:f1:55:20:0f:57:12:15:52:
         92:46:f0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:57:14 2025 by rpki-client