Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/614fb17f-f57c-39ea-9eaf-7770a50b5f5f.roa
File:                     614fb17f-f57c-39ea-9eaf-7770a50b5f5f.roa (raw, json)
Hash identifier:          Hy2LDjlwE8/LL5JGaSjtIUfjf3e0tvId7+M7IF4X2ig=
Subject key identifier:   EF:11:FB:AF:0A:EE:47:E9:23:8D:F6:F0:32:8D:D9:88:4A:9E:86:30
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C3710AF3B48F7F1D6C0E200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/614fb17f-f57c-39ea-9eaf-7770a50b5f5f.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     701
IP address blocks:        141.157.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:10:af:3b:48:f7:f1:d6:c0:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=cecdbfa2-a332-45b0-9b72-5a765511faf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6d:78:ac:f1:97:88:24:d5:9e:c2:ac:33:a7:
                    bc:47:30:12:d3:f7:65:08:8e:da:5e:27:63:f3:3b:
                    30:92:1b:91:66:a8:ea:de:90:3a:05:a2:11:97:5e:
                    23:80:27:2f:ef:0d:bf:1e:29:42:d7:4d:75:c0:44:
                    ea:2f:f2:6a:00:ce:4b:ad:27:7d:87:58:cd:97:65:
                    bc:dc:03:1a:7d:4b:02:a7:9c:0c:0d:c7:1c:b2:bc:
                    b0:23:9e:d6:0d:bc:9c:8f:b6:55:06:bd:e3:26:eb:
                    18:26:7a:af:e3:4c:c6:ee:68:bc:9c:67:f5:b3:a1:
                    98:17:61:15:05:fe:cc:16:68:c8:ea:ba:8d:41:3d:
                    c7:0f:be:93:5b:39:0e:e4:0c:d1:55:90:7e:90:47:
                    a1:da:73:05:0e:29:a2:c8:83:87:de:0b:99:cb:15:
                    96:2f:3e:f2:41:07:78:16:b0:49:8b:92:43:20:57:
                    96:15:5a:66:ed:98:86:1a:f1:fd:de:02:63:0f:bb:
                    0e:8a:65:42:dc:ad:af:0b:ad:f7:90:2c:81:a9:80:
                    4d:b5:c6:39:cf:51:33:50:fa:1f:d6:40:b2:cf:73:
                    8b:d5:d6:c4:d7:f0:7c:5f:59:df:c6:d5:af:3f:bf:
                    0c:f5:47:a5:35:6a:b9:7f:43:22:74:5b:e5:23:67:
                    00:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:11:FB:AF:0A:EE:47:E9:23:8D:F6:F0:32:8D:D9:88:4A:9E:86:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/614fb17f-f57c-39ea-9eaf-7770a50b5f5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.157.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:f7:5b:83:96:25:b8:b9:51:08:2c:01:f0:67:cb:66:65:16:
         93:b9:61:15:a6:c0:27:d6:98:11:a1:08:33:91:27:96:32:aa:
         b0:af:10:dd:e9:8e:76:03:1c:a3:d5:c4:2e:96:e2:86:f2:0e:
         c8:cf:0c:8a:71:68:c4:29:64:b2:94:05:64:87:72:99:26:1b:
         e9:e0:37:21:69:9b:b0:fe:ab:ac:4a:4b:af:ef:e9:96:5c:c2:
         ca:3d:3e:c5:40:af:3c:1b:5a:fd:32:cb:66:1f:03:ae:93:c7:
         09:88:5b:e1:aa:c2:86:28:a2:9f:f9:36:4e:ed:20:27:86:d4:
         cd:4f:92:5c:76:06:0f:2b:b9:85:f9:3d:01:26:64:3d:37:2b:
         82:21:96:91:34:c7:d5:f2:c0:52:e0:ca:bb:62:3d:19:22:eb:
         80:12:e9:01:c0:f0:d1:34:80:8b:6f:5c:14:91:3d:3f:96:2e:
         fc:df:46:4a:69:02:cb:64:27:db:1a:f6:71:c0:23:7e:8d:a5:
         31:d7:f8:77:d6:47:8e:07:4a:6e:cc:fe:30:11:a4:09:26:73:
         19:a7:b2:74:dc:dc:d1:31:84:ad:8c:8e:4c:61:f4:a9:0a:db:
         e8:2b:33:d4:e3:55:3c:71:1f:3b:72:8d:73:cf:44:c7:41:ca:
         bd:90:04:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:58:40 2025 by rpki-client