Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3eab4b64-09c9-3060-abae-743e6441f6c3.roa
File:                     3eab4b64-09c9-3060-abae-743e6441f6c3.roa (raw, json)
Hash identifier:          eLmkS/2fq2UhKvLfPJUU35eHgJfSrDSjhxpORGm2rEQ=
Subject key identifier:   09:AC:62:86:F3:DB:74:82:4C:27:7A:A4:5E:BA:FF:28:E6:E1:B7:D7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B5141F0CB7BDC81EA32879880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3eab4b64-09c9-3060-abae-743e6441f6c3.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        97.215.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:f0:cb:7b:dc:81:ea:32:87:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=54f4df3d-0ed1-4b35-af21-c0ee6b9ed79a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ee:b2:41:0b:0d:c7:15:da:12:47:ad:9f:bd:
                    39:dd:7c:3b:1b:a8:a8:61:54:00:14:3f:00:8e:27:
                    28:88:9a:f0:0d:33:9a:ea:b2:6f:3a:67:83:3a:9b:
                    e0:d0:e1:d0:9d:78:b8:aa:66:27:92:0d:5e:cf:a9:
                    9b:3e:e6:43:57:de:7b:39:cb:60:83:8a:39:61:d5:
                    78:41:ed:d4:cf:e7:9f:c8:cc:57:09:0f:32:ef:6f:
                    d1:40:55:7c:3d:bd:32:0d:29:d1:21:5d:d4:50:77:
                    00:81:bf:b8:fd:dd:10:84:4c:ea:b7:69:91:83:bf:
                    ac:1c:9b:1b:b3:b1:bc:18:f2:fc:19:74:c7:40:59:
                    d5:d2:fe:d3:49:1a:2e:6c:20:b6:95:5c:0d:17:7c:
                    60:9b:75:a0:46:eb:0c:c5:78:e9:2f:c8:53:9d:7b:
                    c6:53:48:69:c2:16:df:64:0a:4b:55:56:f2:47:6a:
                    f2:4a:6f:fb:86:6a:97:24:08:17:b5:6c:0a:f9:ec:
                    2f:88:d7:00:6d:85:a0:58:bf:01:35:f4:7c:e5:a7:
                    86:3f:95:81:dd:47:6a:a3:53:8b:82:13:4b:52:b2:
                    4c:79:6a:60:c2:33:3d:89:92:72:10:7b:36:22:55:
                    50:42:70:1e:c1:19:98:68:24:24:b8:2c:b9:a9:83:
                    b6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AC:62:86:F3:DB:74:82:4C:27:7A:A4:5E:BA:FF:28:E6:E1:B7:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3eab4b64-09c9-3060-abae-743e6441f6c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.215.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:5c:b5:6f:6b:f4:1b:2a:29:e6:82:90:1b:7e:3e:dd:d2:32:
         02:be:57:ba:01:a3:98:23:40:0e:3e:83:d9:1d:97:c9:37:84:
         48:df:04:46:38:b6:68:8d:46:77:23:38:25:07:7b:1d:71:30:
         ef:31:0f:3a:69:3a:84:e5:1c:0d:08:75:dc:ba:81:e3:e3:e0:
         6a:cc:5a:98:18:00:6f:c9:95:2b:b8:1d:01:8d:f4:56:6a:ff:
         cb:f6:e9:a2:df:dd:6a:47:1e:47:4c:01:8a:f5:d1:da:d1:4a:
         36:30:38:9d:27:18:1a:61:5e:d3:92:c1:7f:be:38:1b:3b:03:
         c5:75:38:25:2a:be:ee:5c:73:c6:98:bd:1b:a1:e1:38:eb:bc:
         58:11:d1:3c:bf:96:2f:f7:0a:65:ba:0d:a8:ec:85:03:67:4a:
         b6:85:b7:70:d7:a0:6e:de:eb:dc:fb:16:1c:2c:3f:7f:8a:d8:
         8f:4b:7f:0a:d1:f8:de:a6:e7:aa:ef:53:63:42:97:9a:11:f2:
         43:4b:1a:8b:58:2a:45:f7:f9:33:c9:37:ef:88:f8:6a:e7:cf:
         cb:2e:d8:51:ad:33:79:4d:ef:fc:ee:16:38:77:60:47:c8:42:
         3b:4f:f9:0d:7d:f8:68:b2:8b:98:b4:69:83:1f:cc:60:d7:46:
         29:22:bc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:49:16 2025 by rpki-client