Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e943603-132f-37cd-a9d4-751225af973a.roa
File:                     7e943603-132f-37cd-a9d4-751225af973a.roa (raw, json)
Hash identifier:          8tm02eVMixcdbX7t25KgSJOm6fTlFkfbA4GLYkq2cu4=
Subject key identifier:   35:4F:88:46:CE:BC:0A:33:27:C1:80:42:7F:CB:34:D2:A4:23:1C:BA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B6E91FC004610FE31ED681180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e943603-132f-37cd-a9d4-751225af973a.roa
Signing time:             Mon 06 Oct 2025 13:00:41 +0000
ROA not before:           Mon 06 Oct 2025 13:00:41 +0000
ROA not after:            Sun 04 Jan 2026 14:00:41 +0000
asID:                     6167
IP address blocks:        97.207.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:91:fc:00:46:10:fe:31:ed:68:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  6 13:00:41 2025 GMT
            Not After : Jan  4 14:00:41 2026 GMT
        Subject: CN=6e8799e9-a8a1-4a9f-bb14-e8d70685b666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:de:b5:be:23:75:92:be:be:78:a7:08:71:63:
                    dd:6a:b7:a3:59:59:ec:c2:4e:0a:47:db:0a:4f:ee:
                    ea:63:74:01:f1:de:34:94:f7:d3:20:a1:a7:36:65:
                    79:33:69:a5:02:48:ea:64:39:e6:74:00:c3:d9:35:
                    e7:52:09:c2:0e:67:28:75:b7:a4:5a:b8:3b:d2:f0:
                    fb:86:5e:bd:43:9d:2a:94:8d:0b:04:a2:2e:52:88:
                    02:b3:15:a8:71:ef:f1:47:48:41:06:15:dd:0f:38:
                    20:ba:5d:d7:43:24:3c:97:01:6c:57:ce:9f:92:91:
                    28:d6:bb:df:1d:32:1a:17:0f:1b:38:6d:76:94:38:
                    91:a7:5d:6d:70:b7:cb:1f:04:39:b5:f1:17:3c:8b:
                    c2:8c:a4:eb:12:55:02:df:7d:0b:24:91:5b:6b:dc:
                    a3:39:33:5f:09:96:07:a1:6f:2e:1e:b8:f4:e8:c4:
                    1a:64:6e:8e:fc:3c:12:94:a2:aa:c9:45:50:0d:2e:
                    1c:f5:c4:79:ea:ea:23:7e:aa:1d:0c:2f:4d:e0:48:
                    81:f1:87:e5:6e:08:6e:7c:fd:b9:9c:5b:20:be:12:
                    73:6f:aa:a9:68:6f:46:ef:28:aa:4c:5f:51:d4:77:
                    b9:92:fe:30:7d:3a:47:ec:e8:65:ed:f0:6a:1f:07:
                    9d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4F:88:46:CE:BC:0A:33:27:C1:80:42:7F:CB:34:D2:A4:23:1C:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e943603-132f-37cd-a9d4-751225af973a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.207.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:e6:9a:74:fe:7e:b3:b7:4d:33:b5:b1:c5:35:cd:ac:ad:7d:
         01:c9:92:45:b6:c4:09:47:22:a8:e3:45:64:15:22:bc:7a:f9:
         b5:e4:dd:ac:2e:e5:b6:9f:39:87:05:ed:0a:14:8f:0a:02:68:
         4d:ab:70:de:64:cb:96:f3:97:00:f4:79:7f:bd:18:ae:3c:a7:
         38:ab:13:cf:9e:9e:e4:a2:a7:99:42:24:ea:9a:73:3f:ba:82:
         92:fb:1e:4f:ba:1d:26:92:b1:5f:c8:53:d9:4f:00:8f:73:95:
         5f:1e:6f:12:02:6a:91:04:d4:22:ad:49:62:b2:ab:38:2f:af:
         84:b8:df:6d:be:85:03:64:d2:14:ba:30:9b:c7:13:47:4f:60:
         d8:66:37:29:0d:76:d3:a5:dd:9b:b9:45:e0:82:d9:7a:08:06:
         9c:f7:f1:ab:fd:45:9e:59:b5:4a:24:6e:ec:27:59:1f:a3:20:
         bb:75:01:61:c2:f9:1e:d3:40:2b:fc:da:0d:fc:40:74:12:d0:
         25:65:35:aa:ad:71:52:51:d0:d1:39:f0:ab:c2:00:79:13:b0:
         f4:3b:ad:ee:81:e1:04:bc:e7:89:84:fc:0b:c7:0f:a1:1b:24:
         38:55:d2:cc:9b:ce:e1:0d:68:1c:ea:6c:b3:c7:85:b7:ba:44:
         ba:57:18:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:04:35 2025 by rpki-client