Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2cfc4c34-acc6-3077-a78e-a028f379757f.roa
File:                     2cfc4c34-acc6-3077-a78e-a028f379757f.roa (raw, json)
Hash identifier:          FVw22XTz+mY7WiwcUPO8rqnd56cJpimQL50f0c/DZto=
Subject key identifier:   26:44:93:33:E8:AF:04:CB:EA:BA:7C:E7:54:BC:70:83:57:FB:46:FD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36DE4FBDE48C86FAABDB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2cfc4c34-acc6-3077-a78e-a028f379757f.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     701
IP address blocks:        141.158.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:de:4f:bd:e4:8c:86:fa:ab:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=9dda6435-17d8-43f8-85c3-b47b29a4b87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7c:05:32:68:fa:55:f0:62:bd:4b:5b:8a:02:
                    05:f6:e1:9a:1c:8a:13:61:02:40:2e:da:65:6a:a5:
                    30:fe:8c:da:c1:5b:72:80:11:c4:28:3e:66:82:e9:
                    51:11:93:9f:4f:a6:61:7c:1f:57:87:7e:1f:a7:d0:
                    34:4a:2b:9f:20:47:de:d6:5b:d4:de:f0:94:19:a4:
                    75:f5:c5:b7:46:a8:b8:ce:e7:eb:dd:8e:39:38:d9:
                    ba:54:71:65:aa:10:88:01:a0:99:df:3a:ee:da:3a:
                    b9:4d:dc:07:09:7b:16:ef:35:55:af:c9:5d:6b:89:
                    45:29:08:d9:e1:24:e8:d5:b1:91:2a:7e:4b:4e:02:
                    56:ef:8a:29:ba:60:fd:4c:b6:b5:49:f5:8a:ff:70:
                    43:21:51:76:9a:35:ba:f0:42:6e:00:b5:80:2d:f2:
                    d3:10:a7:bb:7d:2c:e1:8e:41:97:26:f6:7a:1a:9b:
                    6f:cb:4b:cf:e5:2c:d5:b9:f0:0e:74:86:d3:e2:25:
                    9e:6a:17:1f:b4:8e:a3:c2:1d:a7:9f:8b:2d:7f:2b:
                    0e:ef:71:a7:26:82:6c:8e:ce:24:f0:5f:c8:a2:23:
                    0b:11:20:3b:fb:86:ab:58:d6:9e:82:d0:49:7b:b2:
                    e1:e7:d3:fd:ec:49:a7:ec:2d:49:ad:7b:61:fc:ee:
                    70:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:44:93:33:E8:AF:04:CB:EA:BA:7C:E7:54:BC:70:83:57:FB:46:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2cfc4c34-acc6-3077-a78e-a028f379757f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.158.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:32:e0:84:35:ef:38:c5:6b:16:7f:77:c2:e2:71:79:6a:f6:
         2a:f0:f5:41:58:0c:ab:56:83:81:29:5e:1f:a3:fe:f1:79:95:
         c0:dc:4b:25:64:7a:c0:5d:bf:5b:81:a5:28:bc:8f:b3:ae:72:
         29:c2:23:f1:62:8a:4a:97:5b:06:fd:92:4b:55:94:8b:10:0d:
         6b:b2:52:f3:d9:ce:75:4b:31:46:18:2e:a5:16:a5:8f:e4:48:
         ed:72:2c:0f:ea:02:e4:a7:2d:20:02:3d:40:98:c9:1f:29:31:
         b5:0a:7a:52:fb:40:8d:d2:3f:a4:39:a8:c9:18:ae:7c:94:1b:
         1c:56:07:78:69:64:ec:00:96:e4:c2:69:1f:09:23:8d:c9:c6:
         9d:75:c8:62:52:81:6f:c5:60:c0:71:85:5c:30:ad:24:39:97:
         2d:66:ca:49:d4:30:17:64:30:0e:80:2b:a0:68:2b:6e:7f:24:
         a2:4b:e2:ce:3b:71:ff:97:06:d1:1e:62:70:a1:d5:fd:b7:3d:
         eb:c6:30:eb:7f:64:f1:2a:a4:aa:85:db:77:cc:fa:d0:f1:6f:
         25:38:b8:95:82:52:9c:96:ba:63:b7:37:85:c5:17:51:b2:07:
         f7:4a:ca:eb:9d:0c:0a:2d:87:13:5b:3e:9a:b3:5f:7d:c1:d1:
         98:42:fd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:09:15 2025 by rpki-client