Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c77c0cad-b62c-3955-be4f-797d889901e0.roa
File:                     c77c0cad-b62c-3955-be4f-797d889901e0.roa (raw, json)
Hash identifier:          VjLuXh2JII6mYauGo5iWMzuR4gFNCBVQhjaiPQf7ytg=
Subject key identifier:   A0:FB:A9:C7:6C:98:10:4F:D4:BE:E6:9B:75:1A:A0:7C:48:C4:7F:AD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B5141F0BAAFBA31491FE8C680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c77c0cad-b62c-3955-be4f-797d889901e0.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        97.214.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:f0:ba:af:ba:31:49:1f:e8:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=9811bc22-7595-4a0d-8bc1-61a347436547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:da:52:00:27:3e:10:dd:ac:32:f1:0d:9d:5a:
                    f4:d5:ea:72:db:e2:27:ff:05:6f:1b:ab:c4:02:64:
                    ac:2a:14:d2:79:70:dc:71:02:d9:a8:bd:99:19:09:
                    85:c0:18:ed:52:33:39:be:01:eb:8b:85:dd:58:3c:
                    f3:e5:df:f4:ba:b2:6d:dd:ef:cd:5f:48:d0:f8:67:
                    9b:dd:39:09:7c:18:95:0e:75:1f:56:b3:0f:73:0f:
                    fe:f9:42:a9:59:83:88:3d:1a:37:97:ae:a1:8e:cc:
                    e1:23:ed:41:9a:79:c4:23:f0:fb:e8:26:6b:87:5e:
                    5c:41:1e:62:2f:52:6d:4c:f9:a5:ff:e8:ec:d6:fb:
                    93:99:01:7d:2a:91:78:fb:77:6d:ea:aa:ca:ad:9b:
                    c0:dc:dc:ab:cf:f4:26:5e:78:90:b1:b3:fb:92:93:
                    62:49:96:75:cb:d9:20:75:14:33:47:99:67:92:9f:
                    b8:a9:1e:d5:bd:a4:a0:06:07:86:ab:ba:5b:d0:e3:
                    31:46:0a:66:71:0b:50:6b:57:a2:83:f0:82:10:fb:
                    73:62:b3:2a:9e:66:e5:ea:d8:de:85:2a:f5:cb:b4:
                    fc:2b:17:60:5b:43:40:50:a6:58:6a:a0:27:97:02:
                    57:5a:d4:ce:dc:25:7d:5f:64:74:23:c5:6e:39:7a:
                    7e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FB:A9:C7:6C:98:10:4F:D4:BE:E6:9B:75:1A:A0:7C:48:C4:7F:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c77c0cad-b62c-3955-be4f-797d889901e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.214.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:b3:1f:71:36:00:ec:7b:3a:00:1c:09:b3:88:71:ae:90:29:
         b9:4b:20:57:f7:7d:5e:6e:2a:7c:9e:6c:d9:ee:8b:59:44:90:
         e7:03:a7:60:6b:58:76:ef:21:c4:3f:e6:6d:ec:96:c0:13:30:
         51:b2:e7:10:87:45:a8:92:94:51:6d:80:7c:ba:50:a1:dd:df:
         54:85:20:dd:3c:11:d0:47:ef:ad:73:c5:40:59:48:3f:fd:29:
         03:37:08:34:bd:c6:90:9f:cb:b5:f1:72:d8:26:95:f1:8c:c3:
         fb:d6:b5:46:5b:ee:13:0f:0b:01:f1:ef:32:26:6b:03:94:8d:
         ad:f5:fd:fe:70:ae:f8:00:13:b1:00:f3:d5:ff:35:4b:ee:58:
         d1:bc:11:fe:39:e9:90:d9:b1:0e:b5:2f:9c:45:c4:32:eb:77:
         02:a9:14:04:c6:fc:39:74:31:52:38:6f:2c:3d:36:5a:35:39:
         ba:b0:c3:ff:25:e9:fa:e3:59:f2:1f:2a:6d:db:a6:f1:ee:5e:
         a6:7c:20:6b:fe:eb:5c:04:79:f0:34:b6:d5:18:52:98:b4:9e:
         45:25:67:29:6c:a9:0f:71:20:67:98:4d:d6:5b:01:b0:b6:84:
         59:a7:a4:45:a0:7b:5a:27:66:dc:88:76:ac:89:15:f8:ad:34:
         d9:81:6f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:07:55 2025 by rpki-client