Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/54cc908d-4abe-3eec-a87d-d15643fd2bfa.roa
File:                     54cc908d-4abe-3eec-a87d-d15643fd2bfa.roa (raw, json)
Hash identifier:          BB9UnEB1BvABHJ4iIRaAxRw46TYUnwT58R51/1Zwsu8=
Subject key identifier:   DB:30:BB:ED:C2:E6:2F:2A:89:15:1E:08:FE:A1:D6:22:7D:81:38:27
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A117389797A65307DD4D5C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/54cc908d-4abe-3eec-a87d-d15643fd2bfa.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        97.211.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:73:89:79:7a:65:30:7d:d4:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=0940c830-6831-4dc8-8dfb-788f24394db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6a:34:26:94:53:71:ca:11:d3:ae:f3:84:a2:
                    38:54:10:96:34:72:55:dd:8f:3f:f4:48:9e:52:8f:
                    c5:a9:33:1f:e5:27:d1:66:bc:8a:50:b9:8e:21:e3:
                    d3:fd:d7:18:bd:1b:70:2d:84:c0:0a:88:8c:95:9f:
                    fb:29:a5:82:b6:33:a9:04:92:50:ab:69:15:26:76:
                    89:81:4d:f1:e3:d9:0a:78:35:fc:7a:cb:7c:a9:aa:
                    a7:b4:db:68:1a:4d:d8:56:01:f6:f9:05:80:0b:31:
                    a4:70:15:6f:db:a1:c1:25:cc:ca:e4:2d:1b:de:9c:
                    46:dd:e9:8c:be:37:06:c2:69:04:4f:6c:b4:79:90:
                    0d:48:ee:36:d7:a0:7b:d3:52:d6:16:b3:c3:d8:e7:
                    70:d6:3f:5c:ce:a5:7d:c8:4a:81:5c:54:fb:55:44:
                    7d:6e:a7:0f:65:8b:c7:9c:7c:d8:b4:63:e9:e1:2d:
                    6a:62:a1:dc:9b:6c:2e:e6:a2:aa:7f:2e:e8:b3:ce:
                    0a:62:e4:56:f5:f4:73:17:24:b0:ca:43:8d:a2:6a:
                    9c:17:5f:91:06:a9:2e:99:23:e4:92:3b:a6:44:12:
                    f6:18:84:cc:88:12:8a:ef:db:eb:81:33:01:0b:a5:
                    5a:d8:65:4e:d6:ea:7e:dd:26:2f:3a:58:64:53:16:
                    30:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:30:BB:ED:C2:E6:2F:2A:89:15:1E:08:FE:A1:D6:22:7D:81:38:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/54cc908d-4abe-3eec-a87d-d15643fd2bfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.211.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:ac:f7:a1:0b:a9:32:66:b2:68:76:9e:16:ec:65:c4:8e:61:
         c1:db:3a:ef:40:70:7f:5b:1e:92:81:66:8b:c7:f8:87:0e:55:
         85:37:81:49:88:2e:cd:fe:7c:1e:2a:65:67:cd:c0:56:8f:a2:
         78:25:b7:af:26:65:5e:0f:e3:ab:db:6d:7c:72:e1:6f:03:1b:
         a5:e7:7a:3e:c8:38:9f:3e:b2:f0:ba:e4:11:48:8d:f9:00:cd:
         70:91:6b:b3:b1:5b:75:16:1b:6f:02:c5:3d:9e:92:7a:b0:f8:
         b7:58:a6:00:eb:40:cf:ac:72:ea:4a:fb:49:c7:c7:a0:c3:1b:
         dc:e3:1c:73:2c:9e:ec:ef:f2:b9:8b:5d:95:f5:c9:70:57:ac:
         83:ec:99:54:fd:99:cc:d3:53:c9:21:cf:33:bf:a6:2d:ec:e6:
         53:49:b8:c7:1f:c2:8a:b1:2c:fa:13:80:d3:48:19:fd:93:07:
         2b:3e:a0:05:c9:a8:08:78:82:fd:ef:e4:80:d3:ab:fd:9e:26:
         ae:ee:9b:05:f3:e3:25:c5:47:33:6a:37:bd:29:2e:83:f3:b4:
         b4:a5:ae:c4:d2:d0:05:2e:17:64:0b:f1:d5:f9:bb:de:67:a5:
         89:c7:2d:ed:e4:19:ed:64:d4:f1:f3:6b:6e:5e:ab:af:a1:8d:
         26:1c:3d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:54:03 2025 by rpki-client