Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4d65600-fb4f-3a47-811f-061e4f4f5f40.roa
File:                     f4d65600-fb4f-3a47-811f-061e4f4f5f40.roa (raw, json)
Hash identifier:          R8J62IdYLJQPYMX3oVWsYz/jt25Sd3G8uu0FU08Kfz0=
Subject key identifier:   B9:7C:51:49:4E:2F:28:F7:E3:52:DC:DB:97:FF:DB:76:56:A2:A8:5B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36DB8CD462162D03EE5880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4d65600-fb4f-3a47-811f-061e4f4f5f40.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     701
IP address blocks:        141.153.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:db:8c:d4:62:16:2d:03:ee:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=6d1b65f1-100d-4267-a54c-566ef87b08e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:60:de:8e:dc:f9:05:3a:81:9c:91:32:f2:44:
                    3a:c6:5d:29:48:be:e7:6c:d7:d7:71:e4:fb:2c:f4:
                    10:d6:f4:f0:e2:6e:5a:26:b8:e2:ab:23:40:a1:68:
                    bd:0e:a3:a4:a2:4e:39:4e:f1:9d:81:43:5f:35:5c:
                    a0:69:c9:38:62:88:d3:d3:72:fc:15:4f:75:05:1e:
                    70:ef:09:bd:1b:cd:f6:25:d6:05:14:98:9e:a2:d7:
                    51:f2:e8:4e:6d:15:18:7d:a9:40:a7:61:38:5e:53:
                    9a:a8:12:ab:74:e6:61:3f:1a:91:c7:65:a7:27:fe:
                    c4:d5:9f:04:9f:62:2f:12:b1:2f:5b:b0:fe:fd:9d:
                    ef:d2:a2:3e:c1:35:bc:32:12:ec:4c:90:22:f7:e6:
                    54:79:60:78:b5:27:c5:9e:4c:20:05:98:98:32:9c:
                    e6:e9:7d:7c:69:22:ac:45:d5:14:53:31:f9:30:25:
                    ba:a3:c0:b2:a2:20:3e:a2:08:7a:18:d9:6a:61:c1:
                    80:b7:a1:76:87:31:a2:c5:5c:c8:89:6a:de:26:bc:
                    e5:9e:10:32:58:ff:bf:30:1b:fa:7f:8a:f8:b3:b2:
                    6c:f6:cf:00:da:b9:b2:ca:c8:78:94:7b:bc:37:c6:
                    95:ea:01:6b:0c:65:1b:b3:37:8f:50:56:67:3d:8f:
                    42:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7C:51:49:4E:2F:28:F7:E3:52:DC:DB:97:FF:DB:76:56:A2:A8:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4d65600-fb4f-3a47-811f-061e4f4f5f40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.153.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:ef:cc:07:63:ee:2b:cd:f7:43:6c:8f:83:b5:16:e3:ee:84:
         1d:c6:32:c0:04:d0:17:cd:44:62:59:86:27:fe:d7:7b:1f:95:
         71:4d:bd:8b:17:08:a8:6d:51:35:b0:be:0d:62:26:d2:f2:d6:
         8e:74:99:9a:ea:3c:ab:d8:74:26:d0:9f:43:09:96:ff:98:a9:
         21:27:00:09:b6:54:95:ed:55:c9:5a:58:02:5e:d9:b1:d1:d7:
         ec:0d:31:a3:d8:b6:f4:37:60:d9:dc:a8:b1:1c:48:4e:dd:a3:
         91:1b:61:23:0a:d9:4a:a0:2b:45:6f:91:d4:eb:0b:11:35:c5:
         ba:8a:3c:8b:c3:f9:54:f3:dc:39:ee:a1:bb:28:30:6a:a4:54:
         6d:75:ba:e8:17:b4:75:3d:96:1f:86:e8:1a:47:fd:ec:7e:0c:
         bb:df:45:6c:77:21:b3:50:af:eb:cd:99:2f:bc:b4:81:f4:47:
         26:15:38:91:0f:cc:09:72:ea:ce:d7:3d:d8:ed:6f:21:d5:6c:
         34:b9:67:e3:22:7b:71:a8:60:03:5d:60:97:b6:04:1f:01:08:
         b8:1b:a2:1f:2e:bf:c6:97:9c:ed:dd:d5:33:f4:1f:b4:b2:e8:
         69:15:bd:af:f4:f4:7f:84:8b:28:ec:3d:e3:c0:da:08:b6:f9:
         a8:c8:a3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:06:56 2025 by rpki-client