Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f9466e1-0aa5-3dbb-9265-968393747617.roa
File:                     2f9466e1-0aa5-3dbb-9265-968393747617.roa (raw, json)
Hash identifier:          L1Mb1Ahlt6CqnC+VP9EQYb/y12IollKS+KjEe8gNG90=
Subject key identifier:   89:F2:BB:62:D8:2A:9E:67:7D:74:10:24:2B:06:08:CD:A2:E4:13:84
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36D8E7C33D263B6B813980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f9466e1-0aa5-3dbb-9265-968393747617.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     701
IP address blocks:        108.3.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:d8:e7:c3:3d:26:3b:6b:81:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=c3af1018-a377-46ce-8206-ae9402c8f095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b1:48:20:09:fc:46:dd:55:36:9a:9b:dd:0e:
                    cc:ff:fb:1e:21:77:b9:bc:00:c5:f5:00:9e:ab:43:
                    26:56:d1:76:3c:f3:e6:96:8f:15:d9:58:54:d2:96:
                    32:45:5b:e9:d1:42:92:b2:28:dc:3b:e7:c7:43:df:
                    95:63:32:33:d2:44:a9:23:b7:79:e2:49:b5:ff:59:
                    16:aa:c9:7a:65:36:4d:cc:e1:bb:8f:99:8c:43:71:
                    61:7b:e4:fc:1f:8d:36:47:da:16:c5:86:fa:e6:43:
                    e7:8a:1a:f7:45:59:5a:b7:99:8c:4b:ee:4e:ed:1d:
                    f3:19:a6:02:31:e9:ad:6c:de:1e:63:37:b1:7d:99:
                    bf:ba:22:16:ad:06:35:41:ee:81:4b:6d:7d:1f:bc:
                    e0:5a:f3:a2:3e:85:2e:6b:69:21:83:08:e1:14:3c:
                    72:d8:5f:a2:e1:92:a9:e6:a7:46:73:86:75:7e:7f:
                    a1:4d:a6:49:93:ef:88:56:92:82:30:5d:b1:4b:4e:
                    fe:78:6a:11:89:2e:29:6a:84:2a:3a:4c:d6:5e:ca:
                    a6:03:05:c8:10:d1:c7:b3:17:e8:0d:17:ce:fc:71:
                    49:e1:94:09:12:4a:69:85:c9:8e:3f:bf:e9:93:c5:
                    b2:92:31:2a:11:22:c8:3f:23:ae:ba:39:54:dc:b7:
                    3c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F2:BB:62:D8:2A:9E:67:7D:74:10:24:2B:06:08:CD:A2:E4:13:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f9466e1-0aa5-3dbb-9265-968393747617.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.3.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:54:51:e0:17:7f:f3:33:3a:69:a4:6b:79:96:00:f4:6a:b7:
         3e:40:d0:5e:2f:c9:40:2d:f9:ed:6b:5c:9d:2b:de:8f:c7:ce:
         f9:7a:fe:eb:80:f3:db:99:bc:da:e3:ce:49:91:00:a3:ac:fb:
         bb:fb:15:ca:02:b1:e6:e6:7d:99:65:0b:80:3d:3c:db:d8:d9:
         13:25:e0:a5:4a:b1:e6:9d:19:fa:12:54:77:dc:cc:33:10:3b:
         2e:39:51:8d:b0:1b:b6:68:fc:4b:63:91:0a:72:3b:fa:c5:77:
         55:a3:39:06:5a:60:91:d7:de:79:36:e1:cb:81:bd:60:80:d2:
         20:4b:f3:fe:72:e6:9b:f4:97:d2:2f:51:54:52:0a:0b:7f:3a:
         19:f2:ee:04:0a:81:22:b7:cd:74:dc:8c:0d:67:c4:9d:80:cd:
         72:02:37:7f:73:59:e7:06:dc:1d:a7:0a:14:18:d6:3f:c9:1f:
         b9:b5:68:f4:88:55:b1:61:be:04:56:4f:44:95:c0:77:02:1a:
         5d:b5:f5:c9:cd:1a:d6:d1:9d:4e:33:c1:97:00:8e:f0:e1:74:
         c4:d0:36:30:fa:93:dd:b7:20:99:ec:82:67:cd:34:f6:37:18:
         20:de:ea:f8:49:fa:85:52:b6:a8:16:79:18:e8:4c:fb:d9:be:
         6d:ef:64:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:54:00 2025 by rpki-client