Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2de13331-05ac-3173-947f-0881cc1b627e.roa
File:                     2de13331-05ac-3173-947f-0881cc1b627e.roa (raw, json)
Hash identifier:          sAAaBvmffFp3NBTmYIdSmdFJNr7edfU1Kw+LZsifzNs=
Subject key identifier:   4A:19:CF:7D:9D:8B:96:54:9A:D2:F4:42:19:64:50:5E:D0:B2:3F:35
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36DD4AFF04F7BACBA6A100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2de13331-05ac-3173-947f-0881cc1b627e.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     701
IP address blocks:        141.157.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:dd:4a:ff:04:f7:ba:cb:a6:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=7104c114-0763-4ab4-b271-ad9298e1caa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e2:9c:3d:8e:a6:30:63:ee:de:50:80:a8:8a:
                    6a:2b:5a:f0:fa:7d:9e:d4:6d:ee:a5:dc:64:b7:1c:
                    eb:c5:7a:b0:e3:e1:bf:bf:cb:61:05:9c:fb:73:d6:
                    ca:77:7e:60:5d:a7:82:dd:55:0b:fd:5e:1f:ea:ae:
                    54:ee:3f:a9:a4:57:7a:47:55:ca:ac:a2:9a:d0:b4:
                    89:e9:d6:56:0c:ec:cc:6b:b2:e4:d7:fa:ba:65:06:
                    b0:24:91:2a:8b:0e:8f:5e:c4:e4:7a:37:ec:ce:4f:
                    de:84:41:65:1b:3c:bb:88:eb:42:27:d2:3f:e6:f1:
                    e2:8c:1e:e8:3b:83:54:4a:d1:21:96:48:b9:e5:f0:
                    f8:f0:17:9b:e4:03:52:57:9f:1a:92:b8:98:1d:da:
                    2e:1d:96:bd:f1:8b:ed:4b:68:47:02:3f:10:e4:0c:
                    dd:f9:93:77:e3:02:5e:6d:41:3f:01:60:b1:dc:bd:
                    b6:67:df:ce:10:bb:57:fd:d2:0c:c5:7c:5a:c9:3f:
                    50:bf:68:58:81:a2:4a:79:23:bb:40:99:ec:db:16:
                    3e:91:73:42:cf:c9:d8:d6:ba:93:f8:24:5f:c9:ac:
                    17:7b:80:a4:c6:30:8d:d9:70:3f:75:88:76:22:df:
                    ae:34:20:e7:0c:96:34:b0:ca:20:fb:64:38:b7:a0:
                    05:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:19:CF:7D:9D:8B:96:54:9A:D2:F4:42:19:64:50:5E:D0:B2:3F:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2de13331-05ac-3173-947f-0881cc1b627e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.157.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:3f:59:ae:59:aa:f7:bf:85:7b:69:d5:73:bb:e3:01:c3:55:
         71:0f:f2:76:24:b7:06:d2:da:b5:4a:38:0d:fa:39:0c:ad:f0:
         df:9e:c5:a8:9a:98:65:96:4b:89:63:1a:7a:a7:33:87:22:65:
         2e:9c:6b:92:de:6c:06:63:fc:15:f9:bc:d3:38:2b:70:6c:c8:
         9b:14:0c:25:5b:db:ab:20:75:ab:ec:19:ad:9c:1c:73:a7:43:
         e8:c3:0c:fe:3a:ac:c9:8c:f4:44:f7:1e:41:9f:fe:b9:f6:d4:
         b7:d2:15:77:c1:e2:8f:86:8f:68:7e:0b:4d:0c:39:c8:a3:b0:
         dd:ab:f2:be:1d:3a:03:98:b6:bc:04:90:16:fe:1a:a4:16:31:
         9e:5f:d1:10:5a:37:97:49:b2:1c:1e:a8:60:32:8f:88:80:9d:
         94:f1:1a:29:c3:60:0a:1f:3a:52:29:c5:b9:1e:ab:ac:79:97:
         2e:33:1c:ac:5e:75:59:1e:6f:8a:1e:a4:0c:38:25:56:a3:08:
         9d:c5:41:07:46:2e:db:a3:98:72:e1:72:5c:b4:a9:56:e0:42:
         e3:08:80:52:ba:10:66:d5:07:7c:ae:e0:35:e0:63:73:75:93:
         02:fb:ec:49:3d:08:71:7f:df:2e:d2:bf:15:20:54:49:26:29:
         76:b2:01:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:09:16 2025 by rpki-client