Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4068e8d1-a0b2-3856-a3f0-26d85db6a5f0.roa
File:                     4068e8d1-a0b2-3856-a3f0-26d85db6a5f0.roa (raw, json)
Hash identifier:          fqutcJwQ72OZNEHpmE3FLTN40xX5X9WTJqNtYRCVx6s=
Subject key identifier:   E4:5A:13:C5:1C:E1:42:5B:E2:23:63:6D:72:2E:48:88:23:3E:8A:A7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B6631E60A8A2716A9D0F7F400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4068e8d1-a0b2-3856-a3f0-26d85db6a5f0.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     6167
IP address blocks:        97.204.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:e6:0a:8a:27:16:a9:d0:f7:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=9aa392ba-35d9-4cc8-9eee-f946ed171c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:40:36:1f:fd:e9:21:1c:de:44:e2:8a:5c:2f:
                    8e:96:0c:5a:5f:5b:86:95:53:0a:ef:9d:dc:f6:c1:
                    60:6a:04:60:3e:8d:87:6a:39:12:b7:74:c1:86:ba:
                    ce:9f:21:40:cf:38:c9:b7:f3:c4:3d:33:67:d5:13:
                    6d:07:0e:3f:02:fe:31:44:32:7a:c0:2b:7b:43:88:
                    84:98:d8:a1:df:4b:24:74:43:5d:8c:74:cc:2b:5a:
                    32:f4:a4:27:ad:0b:ee:d1:16:c6:01:67:eb:da:60:
                    21:98:7d:62:5b:e5:d5:4e:a8:0f:4c:82:c3:12:3a:
                    fe:13:fe:b5:f1:fd:30:59:1f:39:e4:92:40:d2:d8:
                    03:b4:57:5c:6e:24:11:3f:64:2b:2e:89:1f:36:cc:
                    a1:ba:21:f9:f7:64:07:e8:a0:0f:63:19:50:ab:d7:
                    6c:46:52:f9:14:f4:e0:83:68:4e:6a:cc:db:fa:f0:
                    5f:5c:97:44:6d:7b:52:58:9b:c2:2a:c2:b0:70:4f:
                    8b:1e:54:85:28:e1:b0:43:d1:9e:24:a6:67:91:cd:
                    ab:db:a3:b0:f1:6e:d8:bb:6f:76:55:94:f6:de:5e:
                    e3:ce:73:96:08:22:93:54:02:7d:68:fb:45:9f:be:
                    cd:e8:89:bd:bc:4d:0e:49:75:85:67:94:c2:dd:58:
                    99:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5A:13:C5:1C:E1:42:5B:E2:23:63:6D:72:2E:48:88:23:3E:8A:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4068e8d1-a0b2-3856-a3f0-26d85db6a5f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.204.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:3e:ca:9e:bd:ed:0a:45:50:ae:d3:b9:dc:c7:cd:e9:2e:59:
         b1:69:e8:35:c9:60:24:30:2b:72:1f:d9:62:e6:ee:84:1e:fa:
         d0:03:39:58:cb:05:2d:ac:7f:a3:32:16:6d:0a:8e:cb:0a:45:
         3f:b1:90:7f:70:9e:f0:8b:64:ca:fa:6e:c8:22:85:33:37:cb:
         b8:68:d0:e4:89:84:e2:68:77:ce:f8:a1:7e:e2:05:1a:1b:c3:
         9b:60:e5:b0:7e:3f:62:a9:94:e3:22:86:95:f3:3a:11:27:33:
         80:4c:5a:df:23:db:42:71:cb:c1:20:ad:7b:0a:34:2f:90:b2:
         d9:e8:14:71:a1:a7:b9:82:07:6c:d1:79:0b:95:ec:f8:99:cc:
         8b:b5:aa:c7:21:ef:d1:cc:da:f4:f4:e6:e1:cf:f8:cf:e7:f4:
         3c:ed:8b:42:66:29:e3:7c:5d:67:44:8d:c5:87:60:42:f1:80:
         b9:ae:dc:4d:cd:ca:46:79:a0:92:b9:84:e7:88:10:20:27:e4:
         b2:78:36:a8:7b:6e:53:39:e0:8a:ba:b7:78:f7:a7:72:97:d1:
         59:be:3a:cc:60:93:78:15:b8:30:8b:33:f8:cf:64:93:89:ed:
         cd:c4:07:a3:22:f2:0c:a9:9b:d5:87:06:ed:b4:0f:97:0b:c8:
         ab:2f:b0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:58:36 2025 by rpki-client