Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/401e3d20-2c1f-3e44-a0ba-c0ac7cc03e73.roa
File:                     401e3d20-2c1f-3e44-a0ba-c0ac7cc03e73.roa (raw, json)
Hash identifier:          V58fqSRMsuPBtswUOc54SEhf1rUDAxzGZ5UrD38isUE=
Subject key identifier:   AF:4A:05:0C:41:42:DD:99:A5:10:FB:69:03:6E:17:0C:F4:85:9B:3C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C370FA0B6CB0F119AE8C9C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/401e3d20-2c1f-3e44-a0ba-c0ac7cc03e73.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     19720
IP address blocks:        216.2.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:0f:a0:b6:cb:0f:11:9a:e8:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=a155d715-ad71-4027-bb64-0f66126b28de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2e:49:2e:02:53:bb:46:63:6e:9b:3f:48:a1:
                    30:0d:58:fd:cb:62:03:c9:53:0a:2c:a7:3e:55:7e:
                    c0:24:90:5b:a1:70:b5:25:13:9f:c4:51:93:06:8a:
                    b9:68:46:9e:fb:55:07:91:f9:79:8b:87:82:3f:d4:
                    5b:77:90:16:c8:a9:ff:65:c9:57:8b:82:76:c9:19:
                    d8:ae:57:1f:00:2d:ae:6d:e3:19:74:a7:10:61:2f:
                    c8:78:0e:ae:f6:b4:81:8f:fd:dc:05:21:13:17:6c:
                    58:4e:39:77:e5:0a:11:c0:be:59:2d:82:1d:5b:6b:
                    38:8e:33:a7:dd:d4:0e:9f:2c:32:3c:68:99:8b:78:
                    25:cf:55:3a:83:18:62:cc:94:00:c9:4e:f7:e6:a7:
                    63:7e:9d:0b:cc:ce:b3:a2:d3:d2:5b:4e:44:f9:c0:
                    03:8a:5a:6b:39:75:ae:d1:13:be:7c:17:b4:80:60:
                    e4:6e:98:32:86:1b:b9:37:19:db:2f:02:a1:2f:42:
                    75:62:4b:59:83:1a:69:53:d7:ab:01:71:22:d1:7f:
                    bb:70:a9:ea:d8:af:bd:ce:5b:e5:3f:72:61:29:2b:
                    2f:11:57:b6:21:5b:02:87:57:74:80:46:fd:34:e1:
                    99:b7:9d:a6:23:3f:79:d1:fc:14:16:dd:06:4b:1d:
                    4e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4A:05:0C:41:42:DD:99:A5:10:FB:69:03:6E:17:0C:F4:85:9B:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/401e3d20-2c1f-3e44-a0ba-c0ac7cc03e73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.2.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:7b:99:43:90:8b:ae:12:68:bd:c6:90:72:08:7e:a2:e7:74:
         c2:8b:14:9c:eb:74:53:7a:02:f1:6b:c6:fd:31:e2:4b:c1:71:
         f4:88:63:aa:99:2d:a0:0c:d7:96:c2:b7:c4:65:57:e4:6c:97:
         6f:61:be:29:57:04:1b:41:9a:22:94:ac:a5:9e:47:a1:73:17:
         aa:c4:1a:9a:00:0b:2a:31:00:d8:47:db:ff:cc:e0:87:70:26:
         bf:37:b8:64:5f:9e:3c:38:c7:3b:2d:3d:f5:e6:9a:f5:63:4d:
         78:9d:fb:b3:0b:cc:01:78:c5:f7:83:05:7b:2a:95:bf:74:f8:
         08:87:98:3a:6f:79:8d:b5:d1:48:ae:75:5b:4a:eb:47:61:82:
         39:ed:d9:d5:ec:b6:22:a1:ca:63:b3:3d:23:6d:c0:10:40:79:
         07:61:e3:b5:fb:0a:b8:5c:de:16:e9:6b:e0:90:9e:80:35:4a:
         3a:55:84:a9:49:4b:d7:14:e8:99:1d:ab:3c:06:2d:0b:e4:62:
         c4:93:0b:2e:1d:5e:de:cd:f6:f7:fa:15:d2:03:52:25:c7:b8:
         b2:ad:d2:f4:d7:67:ee:00:ab:fd:12:50:e1:74:78:7b:f6:dc:
         24:2b:78:96:e0:40:33:ed:3a:64:1f:41:9c:bd:7f:e2:a9:68:
         27:6a:93:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 09:55:38 2025 by rpki-client