Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f643129b-4c55-3d6b-82d4-08f2cee1880d.roa
File:                     f643129b-4c55-3d6b-82d4-08f2cee1880d.roa (raw, json)
Hash identifier:          33HM+6qIIsSW5i+ZTUAyZLnKksZmYipRp0Uc1Q1bI4c=
Subject key identifier:   07:6A:29:5A:4B:18:00:99:D7:70:98:44:7D:CA:E9:99:A7:90:C6:49
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B60BF8E2E58FFAAA5030C2080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f643129b-4c55-3d6b-82d4-08f2cee1880d.roa
Signing time:             Wed 01 Oct 2025 14:11:16 +0000
ROA not before:           Wed 01 Oct 2025 14:11:16 +0000
ROA not after:            Tue 30 Dec 2025 15:11:16 +0000
asID:                     6167
IP address blocks:        97.239.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:bf:8e:2e:58:ff:aa:a5:03:0c:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 14:11:16 2025 GMT
            Not After : Dec 30 15:11:16 2025 GMT
        Subject: CN=19f5b6a9-4018-4ecb-ab94-744a356ca881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ed:a1:dd:81:c3:c5:5e:70:2a:27:db:90:87:
                    94:64:62:80:17:6e:5c:a6:72:9f:33:27:d1:2f:8f:
                    e8:9a:86:35:ea:8f:01:a4:a5:32:24:74:e8:92:20:
                    ed:9f:0b:52:ab:e2:29:fd:9c:51:f7:1a:e7:1b:76:
                    4f:45:00:5e:78:a4:e6:cd:8c:2b:f5:d5:91:ee:58:
                    dd:06:85:27:7a:82:b3:50:d2:8c:39:7b:0d:a1:a3:
                    c8:39:f0:13:ee:66:8d:b2:67:d7:88:72:c6:3b:ef:
                    c6:d4:d3:77:6d:e2:da:1a:03:86:e1:3b:8a:c7:bd:
                    86:10:16:8e:c6:3f:3a:10:79:b1:82:b0:47:bd:87:
                    ba:24:fd:e4:8a:43:c1:a7:aa:6b:7d:e8:f9:2e:da:
                    6b:87:6f:cc:d4:79:51:67:14:29:fd:c3:f6:7b:14:
                    18:89:17:d6:ac:3d:55:9d:a7:45:50:f8:bf:ff:a3:
                    25:15:36:a1:cc:80:a0:c6:08:02:d7:1d:9c:f6:70:
                    b1:34:96:1b:e1:68:0b:6c:dc:f9:b5:08:71:6b:61:
                    0c:cd:01:1b:02:cf:2a:38:33:6d:3f:6e:ae:1f:c4:
                    d6:16:ea:58:ef:69:43:69:f9:b1:95:e6:b9:1d:22:
                    9d:98:89:5e:94:86:fb:53:bf:28:9b:81:aa:d5:a9:
                    ff:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6A:29:5A:4B:18:00:99:D7:70:98:44:7D:CA:E9:99:A7:90:C6:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f643129b-4c55-3d6b-82d4-08f2cee1880d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.239.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:9d:f8:1d:94:02:32:f6:99:6a:ff:08:24:38:07:a3:2a:8f:
         2a:6d:d3:54:76:83:b9:56:5d:19:00:4a:ea:1b:8c:18:ec:b6:
         d0:e9:0d:8b:21:f3:27:9d:3f:a6:85:86:d6:93:da:fc:9c:e7:
         80:7d:d9:d5:11:be:c5:51:6b:9d:41:88:89:eb:ef:7b:cb:2d:
         79:09:48:3a:a5:88:a8:24:e3:9e:60:3b:a7:61:13:23:c0:c6:
         f6:19:3a:28:2f:9f:36:b1:a9:64:13:4e:e8:2d:aa:d7:34:eb:
         44:a8:7c:e9:3d:b2:31:07:2c:84:1d:9a:4b:58:ba:74:9f:94:
         4a:cf:3f:5f:60:7c:ee:34:c5:cf:2b:cc:f9:51:9c:f4:c5:54:
         85:70:1f:ae:e1:c9:4c:fe:de:79:78:c2:18:57:22:fb:6a:28:
         8d:44:68:1e:15:2e:ad:a4:9d:49:66:06:7c:23:8c:31:4e:79:
         fd:73:3d:7b:5a:c0:2e:99:e7:30:87:1c:30:35:eb:37:29:e1:
         fe:ee:e0:47:63:9d:bb:ec:4f:fd:f5:a1:8e:83:29:0e:8a:2e:
         0b:81:e5:82:2b:32:e0:3f:3d:f4:cf:47:69:db:04:94:6e:d6:
         a5:63:6f:1e:9c:45:32:a3:7f:ee:6b:fd:3e:08:10:bc:9f:cc:
         6f:29:60:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:47:33 2025 by rpki-client