Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d76ba772-1770-34cd-9b46-805585164d78.roa
File:                     d76ba772-1770-34cd-9b46-805585164d78.roa (raw, json)
Hash identifier:          Y5u/bJAzunoCq5qVVsnUAmooXj/l4mK7ip87OFT882U=
Subject key identifier:   45:BA:FA:C8:96:92:E0:ED:6F:DA:13:BF:2D:44:3E:05:25:B1:47:64
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B41E7219323D551CF6C4AB300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d76ba772-1770-34cd-9b46-805585164d78.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        97.216.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:21:93:23:d5:51:cf:6c:4a:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=de8a8a7c-2a01-4a67-ada1-ecaf224c0338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c3:e8:e0:d8:50:93:3b:56:a7:e0:ba:d5:3c:
                    c2:6f:87:1f:2b:b4:ec:d2:de:60:66:7e:e5:a4:bf:
                    25:2b:26:46:f9:3d:29:9a:5c:64:50:23:a8:f5:53:
                    69:dd:d7:c6:66:28:74:bf:6f:82:36:20:5f:93:35:
                    90:1f:5a:f7:c8:c8:c2:71:b1:a0:78:26:f9:10:b5:
                    f6:22:33:c9:3c:12:cd:6f:d5:fb:6f:43:5e:5a:61:
                    e9:92:53:92:bf:07:47:11:eb:07:f5:7f:b5:56:b7:
                    b7:e1:07:90:85:d0:67:46:51:d8:91:cf:f6:c6:6a:
                    67:d8:4a:d5:68:1a:67:e9:bc:db:41:a0:74:8b:47:
                    df:1e:9a:fe:73:51:25:ce:3e:51:bc:52:e8:3a:f0:
                    63:50:30:f4:63:cc:d1:e9:b1:b6:19:c1:83:4a:86:
                    27:a8:a6:90:04:11:7f:fd:26:25:dd:18:33:48:27:
                    b5:73:76:55:db:ac:d2:61:75:48:42:fa:d8:d8:1c:
                    30:a0:48:1e:ee:fa:41:29:0a:3e:1a:55:1e:e5:00:
                    a6:10:f7:9f:dc:b3:7f:e5:be:fd:12:ae:19:9f:a2:
                    d3:00:d7:e7:49:5c:00:39:d8:8e:34:f6:83:ba:cf:
                    11:df:bf:8b:6f:ba:32:d8:00:4d:c6:1e:30:33:55:
                    48:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BA:FA:C8:96:92:E0:ED:6F:DA:13:BF:2D:44:3E:05:25:B1:47:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d76ba772-1770-34cd-9b46-805585164d78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.216.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:0c:f3:a6:41:0b:43:19:8b:e1:93:19:1f:67:01:cf:b4:6e:
         fc:2a:a4:01:56:19:b8:aa:d4:af:73:c7:c5:56:4a:c3:34:cf:
         a1:ef:31:67:e5:bd:1b:5c:1b:80:ae:58:83:0c:ca:3f:db:ee:
         4f:9f:36:7b:a8:99:5b:2f:44:a9:62:35:52:cb:60:99:ff:45:
         0c:38:56:32:cb:2e:f2:93:f1:75:e1:3a:0e:f5:d1:12:fb:9f:
         26:5e:99:c3:e1:09:e2:e8:6c:56:61:cc:5c:e8:aa:76:5c:cd:
         1d:66:46:5e:70:69:ba:e4:12:6a:22:ec:7a:7b:c3:91:57:85:
         b9:6a:5f:12:b4:30:65:a9:b5:6b:89:d2:e5:3f:4a:9a:91:46:
         8a:e0:10:02:51:99:c9:70:19:c0:03:e8:ae:ba:4b:fa:b5:22:
         96:62:34:de:db:2b:ca:44:dc:e9:68:e2:aa:c2:45:a7:d8:21:
         86:7a:ef:19:c0:91:f8:0e:2f:04:95:31:85:82:54:ef:b7:ea:
         f7:1e:c0:dc:15:1b:ba:a0:71:bc:c7:85:3b:dc:84:27:af:ab:
         73:d7:23:f6:21:41:b2:58:f9:5d:b1:2f:01:98:3c:7c:da:d4:
         c0:85:58:52:1b:4f:4f:f8:2c:47:07:df:70:3f:58:64:34:a8:
         04:92:74:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:10:43 2025 by rpki-client