Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5fbc638b-60ea-3b6a-baaa-8aaaf5d7ece5.roa
File:                     5fbc638b-60ea-3b6a-baaa-8aaaf5d7ece5.roa (raw, json)
Hash identifier:          ltBFJvdSMmdYQ8vvwv/tmMThyXwTcopZHZn3oiOEwwU=
Subject key identifier:   91:6F:D2:4F:5D:9D:99:E8:82:5C:02:64:01:7F:8E:47:6C:AB:AE:78
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C370D02AAAFC236930D6E40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5fbc638b-60ea-3b6a-baaa-8aaaf5d7ece5.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     22633
IP address blocks:        65.249.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:0d:02:aa:af:c2:36:93:0d:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=3aea6389-85bf-46de-bab4-7db53e65da9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:13:f3:d6:63:20:4d:a8:42:85:a8:44:af:e1:
                    e5:21:17:80:da:29:30:9f:19:7a:1b:29:36:ef:32:
                    e0:1b:97:03:60:44:3b:e9:f5:e6:47:1f:5c:90:f3:
                    92:b8:e7:1d:06:b8:ca:e5:06:4b:cd:d2:e3:42:59:
                    38:d7:a8:73:66:18:b1:4f:55:3b:d2:65:70:f4:d0:
                    26:b0:20:6f:56:38:b2:80:54:93:ca:7d:30:df:09:
                    a1:58:94:33:7f:25:40:86:9e:60:4e:0b:82:14:83:
                    f6:9b:77:23:e5:5d:79:89:5a:c1:0b:72:b9:73:93:
                    fc:61:db:d2:a1:f5:b8:3c:1f:43:06:40:19:62:dd:
                    09:83:2e:fc:ac:ba:76:97:3e:f7:38:f9:e7:81:9b:
                    0b:47:83:c8:09:c4:b0:0c:85:d8:26:e2:58:c8:f7:
                    05:e6:27:0a:f8:3c:6d:b0:7d:e0:25:a7:9d:76:7a:
                    ed:ce:e1:98:69:12:a3:83:98:a6:11:8c:d3:a7:31:
                    9b:39:97:19:b5:10:3d:20:a2:48:74:83:da:67:b7:
                    2d:e3:3d:a3:af:cc:fd:41:98:a0:6c:96:4e:d4:98:
                    75:4b:af:cf:12:79:3d:c1:d7:82:9a:7b:2c:be:0a:
                    8d:20:36:36:04:8d:40:8d:7c:4a:34:0b:71:64:13:
                    8b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6F:D2:4F:5D:9D:99:E8:82:5C:02:64:01:7F:8E:47:6C:AB:AE:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5fbc638b-60ea-3b6a-baaa-8aaaf5d7ece5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.249.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:b4:c8:d7:fe:29:be:09:0d:2d:17:bf:55:db:99:b6:ac:0c:
         c5:98:22:d0:70:1f:50:98:76:bd:09:d4:70:9a:e4:e2:ca:e4:
         49:5f:49:2b:82:96:74:8c:ae:7a:cf:50:22:12:c6:d3:e8:2d:
         6d:c6:fd:e8:dc:ee:a5:78:16:16:4b:75:a9:47:fb:64:f6:f1:
         7b:88:6d:aa:2b:1a:57:e4:65:4c:c5:31:89:94:79:11:13:1e:
         18:60:49:cb:82:dd:f6:9b:ea:3f:45:64:92:c2:2c:63:51:04:
         06:e8:55:70:d9:42:cc:8c:88:c1:8a:51:df:0e:60:a8:f5:ca:
         a2:f9:b6:7b:dc:48:8d:1f:54:4d:56:06:2f:5b:51:c5:4b:4b:
         38:55:a5:c0:d5:d5:73:b1:d0:58:43:5a:a9:b7:a1:6e:04:e0:
         12:97:ff:0f:c9:88:5b:da:03:b6:6d:38:c2:34:2f:22:a0:86:
         36:92:52:ce:3d:4d:70:b1:53:6d:91:f3:8b:ce:fe:f2:ef:8e:
         be:50:38:57:73:c4:2e:12:ef:2b:98:5b:51:3d:ad:13:6d:90:
         9a:36:09:b3:0e:48:98:a6:d5:d2:63:82:e0:31:14:87:87:2e:
         57:d1:e9:c6:d4:7f:98:41:c9:ce:a7:8d:4f:c5:67:51:fa:42:
         d7:1d:e1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:13:36 2025 by rpki-client