Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/820dc8b2-22ef-338e-b879-a254dc87ee40.roa
File:                     820dc8b2-22ef-338e-b879-a254dc87ee40.roa (raw, json)
Hash identifier:          koQPATjh8V8KL63mfatuhxoLTkJtX8IDMIuG+/MIl30=
Subject key identifier:   BF:CB:4E:54:6D:C3:CF:A6:0A:E7:AB:D3:36:F5:3A:5A:D3:C7:72:9A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C37101C509BCB7DB526D8C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/820dc8b2-22ef-338e-b879-a254dc87ee40.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     701
IP address blocks:        151.202.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:10:1c:50:9b:cb:7d:b5:26:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=35504499-89cb-4af9-8321-b87788c8a3be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bd:47:74:e0:7c:9f:cc:34:00:9b:91:42:5a:
                    71:b2:54:12:ad:e0:f7:02:c6:b8:84:27:b6:10:3a:
                    ef:d0:14:f4:04:05:ff:0c:aa:ef:e1:14:6a:fa:dd:
                    80:97:7b:6d:d9:24:ee:f6:1f:ca:a8:a6:c6:4c:2d:
                    ea:3b:21:a5:dc:c9:0c:8d:2a:8a:c6:cf:25:38:74:
                    78:32:55:07:79:b8:b0:0e:95:75:2a:e9:6a:80:69:
                    b7:de:fa:3a:f8:c2:45:82:4f:5c:93:ad:4a:3e:f6:
                    2e:35:63:d2:1f:3e:eb:20:b3:9a:13:ba:b1:72:b3:
                    16:0b:d1:14:95:da:59:fb:2d:0a:ab:1d:75:29:92:
                    bb:c1:f4:ac:4f:39:85:1d:45:c9:f5:51:46:91:16:
                    e6:a8:fc:1f:78:70:6f:34:4f:5e:9e:4a:b6:4a:78:
                    f5:e6:15:f4:20:74:85:a3:54:8a:59:68:fb:b5:4b:
                    be:8e:30:e5:b9:9b:5f:53:c2:69:2d:85:12:3c:65:
                    20:a9:28:28:3f:34:da:56:e1:0b:c5:2c:f1:42:88:
                    48:ff:53:dc:9b:0c:7f:27:25:22:d3:a7:92:c4:78:
                    a8:61:9d:7a:19:bb:64:ca:ad:ee:73:54:40:2b:46:
                    e8:9d:3f:3a:92:88:a7:92:61:27:82:04:75:aa:20:
                    f9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:CB:4E:54:6D:C3:CF:A6:0A:E7:AB:D3:36:F5:3A:5A:D3:C7:72:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/820dc8b2-22ef-338e-b879-a254dc87ee40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.202.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:9f:7b:53:12:91:8a:30:e5:69:be:62:eb:1c:6b:18:24:3f:
         74:87:59:82:f9:7d:a1:7e:b4:b8:33:b4:f9:c0:87:9f:35:9d:
         6c:e7:1b:17:f1:00:e6:5b:ff:67:86:45:eb:6b:67:4c:13:7b:
         b2:e5:95:5f:0f:28:6e:ae:15:e0:59:5f:f9:80:7d:79:e1:ed:
         2a:ae:16:c4:c7:1b:53:12:99:ee:b0:9b:51:d3:49:23:86:45:
         1b:17:9f:a4:aa:11:e4:6c:01:ce:1f:38:4a:72:1e:7d:5a:e7:
         64:d2:45:7e:21:a9:cc:08:f9:4b:cf:e6:c6:ea:3f:92:ee:18:
         94:6d:4d:37:80:ae:81:60:bd:20:f3:85:3a:a7:46:3d:f6:6e:
         a7:fc:f7:72:92:42:0e:f6:ae:a3:d5:88:89:37:f5:77:24:7c:
         f9:2f:94:a8:75:09:6e:0a:25:a6:aa:14:44:6d:87:5a:e3:62:
         e9:f6:b2:03:d5:f8:b3:05:a0:9a:05:ea:84:75:6f:b6:17:14:
         0b:e5:df:fc:56:13:52:d7:d6:0e:39:07:6b:0c:a9:7b:25:fe:
         b0:fe:14:a7:c8:0f:88:e6:6a:07:5d:61:0f:b7:cd:91:aa:87:
         26:e1:42:c4:28:82:ac:07:e4:b7:b6:ec:5a:ca:e9:99:47:c4:
         f1:ac:db:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:53:59 2025 by rpki-client