Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3ca6287-6e57-3653-972f-0e4bccfcb28a.roa
File:                     a3ca6287-6e57-3653-972f-0e4bccfcb28a.roa (raw, json)
Hash identifier:          iruCTTloLAikMFy3rR9f5luSkGyMTaXdvLj+xMuUPBg=
Subject key identifier:   9A:2D:22:02:5E:46:FF:07:5B:64:9D:B7:74:0A:CF:7D:AC:D3:E9:6B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B233180F5BB85B4B6E59EFA37
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3ca6287-6e57-3653-972f-0e4bccfcb28a.roa
Signing time:             Tue 09 Sep 2025 13:00:41 +0000
ROA not before:           Tue 09 Sep 2025 13:00:41 +0000
ROA not after:            Mon 08 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        97.206.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:31:80:f5:bb:85:b4:b6:e5:9e:fa:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2025 GMT
            Not After : Dec  8 14:00:41 2025 GMT
        Subject: CN=1574a470-f724-43bf-9167-33265b195916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:db:ce:ac:9b:c9:bc:b4:3e:ab:66:c3:9c:ce:
                    1f:4e:94:3e:16:81:5f:d7:be:49:da:7c:78:1f:27:
                    c4:85:71:4c:71:1e:24:6d:32:33:90:c3:fe:88:ac:
                    cb:c8:f2:a9:f4:d5:17:d7:73:e7:f7:43:8a:11:ff:
                    36:6d:dc:e9:70:8d:17:38:37:14:3d:97:d2:57:26:
                    80:d3:5e:94:9b:de:7f:a3:96:c3:62:01:c8:b5:1f:
                    6f:ba:c7:9b:f4:ab:49:ca:7a:45:c1:81:7a:c4:1b:
                    80:4b:83:ad:da:4c:6f:05:7a:d4:5c:7b:73:8b:1f:
                    f9:dd:19:03:5f:f2:0e:fe:d1:8f:59:d6:c7:f7:5b:
                    97:1b:8e:71:19:cf:ef:d3:1d:2f:22:a9:14:c1:dd:
                    50:f0:67:39:9c:f4:26:33:df:20:7d:d1:d3:de:c4:
                    6d:94:13:ae:fb:88:71:27:b9:da:cf:d4:09:4d:f5:
                    5e:60:0f:b1:14:5b:01:6d:51:db:af:d5:76:78:72:
                    ea:fe:3b:aa:1b:10:85:a0:10:ba:75:25:a2:0a:9f:
                    76:eb:8c:41:27:a8:7f:31:80:af:ae:19:ce:2f:7e:
                    f0:82:9b:01:83:c3:f8:c5:8e:d0:13:cd:12:4f:c8:
                    33:28:10:1c:d0:c7:05:f3:f9:1a:da:cb:21:87:03:
                    33:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2D:22:02:5E:46:FF:07:5B:64:9D:B7:74:0A:CF:7D:AC:D3:E9:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3ca6287-6e57-3653-972f-0e4bccfcb28a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.206.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:a0:3e:8f:68:9d:dc:fd:89:05:cd:a8:d1:1c:03:af:d0:ba:
         0d:f5:66:13:94:ac:66:05:c2:0a:6d:16:59:f1:e2:f8:2a:70:
         68:c0:da:78:92:07:9b:9d:31:f2:06:e4:0e:2d:66:bd:65:42:
         b3:2c:01:61:b2:6f:a6:b3:78:21:36:b4:84:48:05:19:9f:d1:
         6e:1e:b5:31:01:ce:43:e7:90:a5:73:f5:54:a3:4d:a8:f1:97:
         e4:8c:c4:96:27:3f:5b:ee:ee:07:aa:d5:fd:32:21:d6:24:f8:
         3c:da:ac:9d:44:fe:13:c6:29:44:7a:e5:9c:86:58:36:45:b4:
         96:f6:5e:22:15:1e:26:72:72:8c:9f:7c:15:df:99:e8:14:70:
         d7:cc:72:75:4b:61:0f:e4:6d:6c:5c:1c:84:8e:26:bd:3a:30:
         89:f9:a4:f5:d0:c5:5b:0c:cc:3c:0f:ca:84:9e:56:e4:0c:ad:
         74:04:0f:2f:6b:59:43:9b:1e:93:05:60:9c:a1:23:24:49:8d:
         e4:bb:75:a6:0f:d2:b0:6b:f9:d4:9d:62:3e:3b:b9:90:54:e4:
         18:d9:7d:1e:79:a2:4f:51:25:3c:f6:83:a5:ab:e2:9b:94:a2:
         b9:f1:36:7e:5e:48:0e:5b:f9:31:2e:e2:ce:61:05:06:57:7c:
         0c:4f:00:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:06:33 2025 by rpki-client