Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4b71d82-92d8-3d7c-85ba-cc617556cdc0.roa
File:                     a4b71d82-92d8-3d7c-85ba-cc617556cdc0.roa (raw, json)
Hash identifier:          0/s8+m1FMieiFvHHlicgF+Rqw5onxBmHnsb2ndJeSDo=
Subject key identifier:   D8:60:E1:10:89:26:EB:50:2B:9B:C7:6D:51:7A:EB:DB:4C:F1:C5:BE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36D63F6A00FF9602579800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4b71d82-92d8-3d7c-85ba-cc617556cdc0.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     701
IP address blocks:        208.255.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:d6:3f:6a:00:ff:96:02:57:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=97fd110d-2c7a-4fdb-af4d-1b94c64132dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:05:97:2a:60:10:dd:cf:ad:c0:8a:01:52:49:
                    95:69:9c:7f:04:95:98:46:ce:62:cd:09:8f:11:53:
                    d5:e8:f4:49:12:47:fc:cd:87:f7:fb:b8:8f:d1:80:
                    0e:fd:f4:12:c4:8f:9b:12:7c:ab:2e:02:3a:f3:2b:
                    5d:ce:18:da:4c:9c:04:b1:b7:0d:01:d2:d9:ca:17:
                    63:12:56:12:fd:9f:dc:89:76:20:ed:69:d2:44:46:
                    51:f5:a1:13:17:66:a2:9a:f6:80:1a:10:a6:d4:44:
                    d1:18:cb:cb:5d:ac:3a:43:39:a3:81:25:4e:93:aa:
                    85:e5:a7:e3:84:d6:73:10:08:1a:24:c7:4f:32:4a:
                    50:05:4b:c9:6f:8c:37:d8:61:f5:a4:40:89:5a:3d:
                    b3:f9:ee:bf:35:c4:63:de:cb:ba:bc:bb:fa:c3:23:
                    3c:af:34:49:35:74:da:15:62:1c:51:ac:ca:6c:28:
                    1f:b8:ea:3e:d8:15:c6:58:5e:18:c1:a6:3f:aa:8e:
                    55:0f:d8:2a:63:67:7b:de:f4:57:c4:6e:0b:6f:62:
                    04:ea:4e:0d:b2:9b:de:8f:fd:6e:45:7f:06:37:b7:
                    5b:58:4e:ff:84:1c:fe:88:01:d7:5c:d6:67:9a:d9:
                    f0:1b:5f:9c:d1:eb:cb:f5:ef:b3:1c:22:71:9a:58:
                    b3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:60:E1:10:89:26:EB:50:2B:9B:C7:6D:51:7A:EB:DB:4C:F1:C5:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4b71d82-92d8-3d7c-85ba-cc617556cdc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.255.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:4f:9a:28:66:11:1c:76:94:7d:07:28:23:bb:af:35:93:be:
         df:60:36:14:78:25:64:84:ec:14:c6:bb:b4:45:be:15:f9:75:
         19:ae:96:55:04:1a:aa:c8:9a:b6:d6:85:5c:96:c0:8b:44:fa:
         67:9b:b5:3f:46:13:7d:82:e4:38:5d:82:83:ca:2e:6d:b6:21:
         f5:2c:31:4d:52:a7:58:aa:f7:bd:40:47:95:38:67:6b:a1:fa:
         9f:73:bf:40:f1:3a:b3:e6:25:74:da:20:6a:32:e7:f9:7d:57:
         5c:8c:26:7a:7c:10:b0:e8:69:73:a1:0b:dc:a9:48:82:7b:54:
         4c:8e:a2:2c:f1:24:c5:0c:c3:af:05:41:4a:14:78:5c:fe:35:
         9f:5e:19:bf:af:5c:ab:7d:50:aa:34:f0:fb:2f:41:33:20:f2:
         0d:1f:a5:eb:0b:c1:ad:fa:59:a9:c9:e1:e9:0e:b3:3f:9d:15:
         4c:87:e9:91:16:34:3e:fd:7e:47:18:cc:0b:58:84:db:0d:57:
         51:f2:15:a3:4a:ee:0b:0e:3a:4c:39:ab:15:93:10:3f:0d:82:
         04:13:31:36:7f:7d:4d:7f:fa:b0:27:19:3d:f8:15:09:0d:c4:
         49:b2:35:d2:ba:0f:6a:27:ea:ff:21:bb:b7:e7:43:43:0c:1e:
         d4:5e:45:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:23:33 2025 by rpki-client