Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4ea0221-54a1-30a1-a70f-5739961d1ba7.roa
File:                     c4ea0221-54a1-30a1-a70f-5739961d1ba7.roa (raw, json)
Hash identifier:          ylzGVfxMahBGDkRFqJtUT96L/gyCB4Gm7R6aya9eJII=
Subject key identifier:   F0:FE:76:53:6A:19:0C:E5:27:41:4F:0E:70:7E:58:C1:BE:52:87:E0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B79BCC62ED8178082C1FB9AC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4ea0221-54a1-30a1-a70f-5739961d1ba7.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     3855
IP address blocks:        199.172.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:c6:2e:d8:17:80:82:c1:fb:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=ae4c88ad-dc6b-4353-ab88-42bef3f8cb59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:55:95:f7:ce:17:9f:e1:ab:5e:6f:47:62:aa:
                    b9:85:c1:ca:ec:c1:6e:00:39:34:6c:91:66:b8:d1:
                    0d:52:eb:d1:d7:50:42:60:4c:6a:db:b0:bd:2e:18:
                    b9:ba:91:da:23:a8:d4:ba:2f:cb:8c:3e:62:a2:e1:
                    ba:0d:90:cf:4f:55:a6:81:3b:c0:00:4d:42:bd:ea:
                    96:73:03:e1:4e:6e:ea:83:ed:5a:fb:f2:fc:32:ab:
                    5f:6e:18:bb:e0:27:6c:5a:a6:98:af:f9:23:d7:c1:
                    1d:7f:5d:55:90:b3:7e:e6:ec:62:20:6d:2c:90:5b:
                    02:98:88:b3:fa:fe:49:2e:8c:86:6d:7b:3b:8f:1d:
                    1a:a5:2a:de:78:fb:59:a1:79:c7:ca:a9:d3:4f:1f:
                    ae:a6:5c:08:cc:ab:02:10:6d:c1:54:59:29:45:ce:
                    f4:f7:17:a9:4b:7b:aa:19:13:9d:18:da:d9:25:44:
                    d9:03:59:2d:a1:5b:78:fc:91:73:1b:ed:c5:4d:b9:
                    18:74:f1:44:5c:e7:3d:c6:54:2e:78:c1:3a:90:d9:
                    65:13:82:bc:ba:8a:cf:0a:ef:57:54:f0:fa:a7:d0:
                    63:0f:96:f5:b1:1a:d6:5e:ff:9b:77:7c:31:5d:20:
                    33:b7:8b:1b:ec:61:ac:75:0c:c8:ab:5e:e1:a4:c1:
                    3e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FE:76:53:6A:19:0C:E5:27:41:4F:0E:70:7E:58:C1:BE:52:87:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4ea0221-54a1-30a1-a70f-5739961d1ba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.172.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:97:e8:f9:47:38:dc:81:31:37:73:d1:c2:53:b1:87:39:14:
         a2:fe:a2:ca:a8:77:20:3c:58:d3:53:89:ff:cd:0f:8e:5f:83:
         c2:2c:95:4e:41:4b:c3:4d:f0:42:c4:91:58:2b:db:c8:16:5d:
         c7:92:61:6c:aa:37:4d:e7:e8:e7:60:26:ee:5e:59:f8:46:cd:
         ad:2f:f3:7d:a3:73:d3:ea:b4:1a:5e:19:b2:f3:54:0c:32:80:
         28:71:01:82:92:c3:8e:6a:88:5f:8d:97:31:9d:05:db:91:cd:
         25:fa:08:39:14:9a:83:f9:40:37:07:e6:17:93:ea:62:f3:2b:
         0b:d8:b0:d9:61:8f:21:52:7a:bc:8c:bf:e0:78:76:55:5a:bf:
         f2:2a:2e:0f:8f:2c:d6:d6:81:e3:06:6a:82:85:45:36:e8:a8:
         4b:ed:aa:2b:b3:1b:f8:12:e2:b8:80:61:17:12:45:9e:ad:c8:
         7e:90:49:58:fe:38:30:d4:a2:93:28:b6:59:57:41:7f:c4:5c:
         24:96:69:18:c3:20:81:cc:b8:9f:54:0d:65:b1:81:a6:ea:21:
         76:fb:76:e1:78:40:40:75:4a:70:64:18:37:d1:6c:de:e5:ab:
         c5:03:25:05:f1:be:97:7c:5a:10:46:34:55:1e:68:2b:f9:26:
         2d:73:12:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:07:42 2025 by rpki-client