Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ddd4e993-5d2d-3994-8f0c-29507214c0c4.roa
File:                     ddd4e993-5d2d-3994-8f0c-29507214c0c4.roa (raw, json)
Hash identifier:          LvGgwBzc/gFw1gxo3OAiYBZsSmZVYVZkTGxZiKT+bkE=
Subject key identifier:   C8:EF:73:65:ED:3E:E7:9E:FD:52:AD:42:CC:6A:4D:4B:BE:21:53:11
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C370E78B53DE0E231EF9DE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ddd4e993-5d2d-3994-8f0c-29507214c0c4.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     701
IP address blocks:        71.173.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:0e:78:b5:3d:e0:e2:31:ef:9d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=caa9c676-4bae-48e9-93cd-f9f5d744228d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5f:df:81:72:5e:de:4d:24:e4:b5:df:7e:e0:
                    79:05:78:68:28:36:5a:e7:fa:bb:ba:41:49:32:1f:
                    0d:55:d1:aa:7a:d8:e0:a5:b6:4c:59:0d:c3:29:7b:
                    16:59:46:0b:65:2f:a9:b4:dc:7c:30:db:19:a9:fe:
                    8f:86:f1:4f:e1:e2:7a:dd:0a:1d:c0:fb:1f:b7:65:
                    ad:50:69:9e:f6:be:07:da:4b:a7:2e:de:ac:ce:58:
                    b8:5d:86:00:ef:63:e2:70:00:f7:53:20:e3:8e:5e:
                    f2:7a:c7:14:fa:e0:b8:4f:6f:de:35:6a:b7:e4:ad:
                    52:62:0c:ee:69:3c:be:dd:99:58:07:ad:43:58:db:
                    87:f3:de:3f:23:9e:86:c4:2b:f4:6f:d6:2f:49:84:
                    dd:56:4c:5a:77:63:61:4e:3c:34:2d:48:c6:7c:84:
                    ef:52:d1:d5:d1:f5:b4:26:5d:73:f4:c8:2e:ec:82:
                    95:f3:9a:3b:a3:8a:09:75:95:f3:46:68:83:e9:45:
                    88:34:82:4f:df:fc:11:31:1a:21:94:57:05:03:f3:
                    c7:59:da:81:8c:4f:f6:3d:ac:2e:73:b7:9f:f1:cd:
                    af:00:97:1a:4c:6b:8f:73:b4:25:7e:64:48:cb:8e:
                    ae:02:79:5a:a7:17:0f:60:8a:90:f3:a1:6f:b0:09:
                    34:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EF:73:65:ED:3E:E7:9E:FD:52:AD:42:CC:6A:4D:4B:BE:21:53:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ddd4e993-5d2d-3994-8f0c-29507214c0c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.173.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:e9:65:f8:39:ee:fa:5e:34:43:af:5b:f3:9c:99:0b:d6:f4:
         c4:6a:1c:6f:fc:68:53:44:a2:67:ff:cf:b7:ef:cc:cb:57:09:
         0d:16:19:37:ba:0a:25:89:a5:bf:9b:56:84:ba:1b:5c:4f:bf:
         dc:28:33:cd:12:21:e5:6c:a1:52:7e:af:bf:ef:02:a8:ad:3d:
         4c:34:31:ce:b6:55:b0:65:be:4e:2e:5f:37:ca:fd:f3:39:1d:
         b5:4d:3e:aa:89:25:75:9b:3d:2c:b3:67:a6:d9:9c:09:22:28:
         26:af:c9:84:1f:d1:46:a9:d6:39:1f:0a:b4:d2:f5:2a:b1:ed:
         d9:4d:06:23:67:51:32:51:64:40:a0:d8:d5:5c:52:67:92:4c:
         b4:ab:52:9a:cd:f0:e8:be:3e:d3:66:b6:8d:73:21:90:08:0b:
         a3:98:91:f5:ac:6c:26:5a:fc:8a:34:c1:cf:0e:60:0d:1f:06:
         2e:ac:20:24:4f:57:5b:cb:b0:2c:82:05:ca:ed:9a:f6:d3:ba:
         82:06:9a:f4:98:0b:cc:0a:9b:dd:7a:46:04:c1:f6:1d:aa:28:
         17:82:15:49:ae:07:d0:90:34:eb:e2:e7:fa:b6:75:15:00:e4:
         88:57:b0:7a:69:82:55:93:4b:6a:46:aa:e4:be:1c:1a:1f:50:
         a1:7e:d3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:55:36 2025 by rpki-client