Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8bd8ebd0-3552-3108-aa02-ab7386e4101b.roa
File:                     8bd8ebd0-3552-3108-aa02-ab7386e4101b.roa (raw, json)
Hash identifier:          O+PYQ/2VxiNjfSbd2d8WqQ5KPs2XYMCJst//2Lg2z28=
Subject key identifier:   87:E2:D1:39:34:AE:AB:61:E5:93:07:E1:4A:4C:66:07:77:3A:33:6E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C370E979F12277648013000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8bd8ebd0-3552-3108-aa02-ab7386e4101b.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     701
IP address blocks:        216.233.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:0e:97:9f:12:27:76:48:01:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=021190b9-ee24-4395-b10f-b3c02b49303d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:77:23:a1:d2:c8:e7:11:12:b8:93:0a:8d:dc:
                    37:f1:ec:38:d7:8f:86:c5:4f:db:41:38:d8:2c:af:
                    d9:40:92:50:9d:6d:b4:5c:55:16:f2:27:da:b3:56:
                    85:19:27:aa:60:e0:69:9c:86:6c:58:8a:6a:78:3d:
                    03:42:1d:75:d1:55:c5:49:d0:77:5c:b2:90:6b:0e:
                    7d:11:3b:f5:81:3a:96:fc:dd:4f:1f:94:e7:4a:b8:
                    c0:91:5f:01:db:e7:50:c6:29:e2:3e:a5:a4:0b:c2:
                    1d:7d:9a:22:54:79:fe:f8:1b:9c:12:39:8b:af:10:
                    0b:70:1a:f0:12:28:74:fa:6b:21:8e:16:fb:68:1c:
                    6f:34:c7:74:84:20:4a:61:15:0b:18:5d:71:da:59:
                    fa:d7:c2:fa:4d:96:4d:f0:7c:93:44:12:93:9f:05:
                    11:ff:bb:70:ac:48:34:68:53:38:f8:f6:7d:9f:41:
                    1b:f5:39:62:d2:0b:22:9b:25:43:70:df:39:f4:c3:
                    bc:3c:b1:66:50:ba:7d:b1:b1:22:79:d4:7b:d3:3f:
                    ae:68:00:6d:13:12:5e:79:73:fc:79:ff:f2:e4:97:
                    bb:73:82:34:2d:e7:c6:53:3c:99:f0:95:3c:6e:d3:
                    72:e0:18:4c:19:17:4c:c8:ef:65:b3:42:03:75:95:
                    9a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E2:D1:39:34:AE:AB:61:E5:93:07:E1:4A:4C:66:07:77:3A:33:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8bd8ebd0-3552-3108-aa02-ab7386e4101b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.233.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:89:c3:b2:26:0d:08:c8:4f:11:83:3f:74:19:cd:39:e4:25:
         d5:ca:71:fa:dc:0c:45:56:cc:38:32:87:48:d2:51:5a:fa:d5:
         61:5f:bd:fe:67:6f:9a:08:61:0b:87:f0:22:f6:4d:1f:95:6a:
         7c:8d:91:10:0b:0b:cc:4c:b6:8f:42:5a:15:1a:35:ed:24:5c:
         84:e4:4e:e9:d6:81:92:84:b2:ee:48:9f:75:bd:2c:c4:73:7a:
         92:a4:2f:d8:7d:5f:7e:da:c4:cb:42:f3:51:b5:22:d7:52:7b:
         5a:e8:17:2b:c0:5e:3f:74:c9:87:f6:67:2d:7d:19:fa:18:52:
         6c:fe:9a:9d:ac:08:66:59:7c:ae:44:af:2e:cb:f5:99:a3:90:
         8a:fb:be:cc:97:ce:0f:47:05:5e:be:60:6e:63:1b:b2:55:5a:
         91:83:ac:80:e7:8e:92:ee:14:7a:f0:a8:08:57:e8:99:1e:58:
         64:81:47:0b:d9:34:82:21:dd:3c:7f:17:02:eb:09:09:dc:c2:
         13:23:11:32:be:b0:7e:30:6b:a7:48:e1:a9:cf:31:ed:99:ed:
         84:eb:ad:62:8e:36:00:19:10:fc:e3:f1:b3:31:f9:ad:1e:ac:
         2b:22:67:b3:d3:ff:b7:1c:bf:a0:f8:9d:01:fe:e9:07:94:53:
         9a:fe:90:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:10:40 2025 by rpki-client