Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d394cff8-a887-3027-9d7a-8ce68786a67c.roa
File:                     d394cff8-a887-3027-9d7a-8ce68786a67c.roa (raw, json)
Hash identifier:          00oi/FqDxiRjkmf+PHXyg8z/WUmEiVCQMDIbeLzV60M=
Subject key identifier:   59:CC:34:B8:9B:87:06:3C:B6:C6:49:76:00:25:4B:3C:02:22:61:B3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C371AB35D85A65D9CF9F740
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d394cff8-a887-3027-9d7a-8ce68786a67c.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        70.192.0.0/11 maxlen: 11
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:1a:b3:5d:85:a6:5d:9c:f9:f7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=b5d86005-4748-4763-8769-7eef0bef7659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:97:b3:6d:dc:a1:1d:da:a7:2e:ad:99:d3:46:
                    45:24:38:0f:35:07:66:3e:4e:52:b4:bd:20:6e:f2:
                    30:81:73:32:42:87:bc:a0:6f:21:0f:d2:2c:82:7f:
                    ab:46:03:ed:a2:47:43:da:48:5d:ba:b2:77:93:5a:
                    b7:a7:ed:26:45:b2:93:e6:95:5f:9d:11:4f:14:b2:
                    a3:18:68:77:94:6e:9e:d0:bf:1f:9d:e1:b5:8e:bd:
                    eb:d8:79:a9:11:6c:e6:c8:19:f4:73:54:db:c9:68:
                    85:cf:3e:f6:8e:78:5f:10:06:d7:37:d5:84:1d:82:
                    40:0e:8b:d6:e6:60:b0:7f:bc:d1:1c:d8:93:11:56:
                    20:c6:bb:e5:cb:4f:1f:14:21:80:0c:fe:8f:c5:da:
                    5d:11:64:79:bc:4e:08:53:77:4a:e1:00:ea:d7:10:
                    fd:68:36:f5:f3:55:c9:8c:ca:57:2f:c9:c3:b4:26:
                    b3:66:bb:fc:77:d1:64:b3:61:5f:77:15:90:65:d6:
                    89:bb:1a:9d:a9:d8:8e:af:fd:47:15:e9:06:5f:0a:
                    56:00:a4:84:ab:69:7d:be:19:67:8f:b5:42:60:b3:
                    d6:3c:76:f0:ee:39:ce:fc:08:84:92:5a:df:e4:13:
                    d5:60:66:ec:84:d0:65:5b:72:1d:ae:47:3b:9a:af:
                    14:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CC:34:B8:9B:87:06:3C:B6:C6:49:76:00:25:4B:3C:02:22:61:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d394cff8-a887-3027-9d7a-8ce68786a67c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.192.0.0/11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:db:fc:d1:3a:63:73:f8:4c:7c:74:ec:97:c7:19:e7:ca:64:
         70:bc:9d:e3:c2:7f:73:ad:c4:24:17:44:de:7b:ad:4d:a4:51:
         67:f3:0f:8c:f2:cb:73:ee:0a:2f:cd:2c:c4:b5:26:1d:fb:97:
         a8:87:06:94:fe:79:03:d0:6e:d5:0a:72:c8:7d:09:a9:63:95:
         2f:1f:f4:ab:45:c6:94:62:39:66:ec:d4:ff:ca:46:d9:4e:57:
         f3:e1:dc:a9:d7:57:f0:4d:ea:6b:d7:95:49:e5:bf:3a:d5:f7:
         ee:86:8b:67:db:46:87:8d:14:f2:29:43:e8:84:c4:1d:d6:8b:
         f3:26:08:f8:f2:28:90:cf:8f:39:9b:e0:d2:81:25:7c:4b:a1:
         28:0d:d1:d1:e4:d8:48:04:ff:0a:e8:a0:19:1c:83:ea:20:c6:
         b3:ca:ba:71:01:11:3d:5f:3d:cc:72:e1:ea:b8:fa:04:75:47:
         75:30:2f:66:02:f1:a6:30:8c:8e:cc:7d:9b:b0:aa:5b:fb:ff:
         78:b4:eb:06:0d:97:19:49:b4:8d:15:b5:82:83:0e:0f:1f:dc:
         48:75:55:8d:7e:7f:86:53:2c:5b:77:32:20:43:34:2e:51:49:
         1b:3c:88:97:44:d0:4d:be:19:6f:83:de:7f:75:f6:3d:ea:a3:
         79:68:6d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:54:32 2025 by rpki-client