Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9720a251-396a-3c4d-9288-f622c582bb0c.roa
File:                     9720a251-396a-3c4d-9288-f622c582bb0c.roa (raw, json)
Hash identifier:          Vg0gvi0Q4dN/c54Gbb4g/WLFlIDCg2FvtVBt/tenGKQ=
Subject key identifier:   1C:89:DC:76:0E:24:F9:92:CB:44:00:9F:10:7D:2F:D0:66:7C:05:4F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B9CCF9033EA039B3F63EC5D40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9720a251-396a-3c4d-9288-f622c582bb0c.roa
Signing time:             Thu 23 Oct 2025 02:32:01 +0000
ROA not before:           Thu 23 Oct 2025 02:32:01 +0000
ROA not after:            Wed 21 Jan 2026 03:32:01 +0000
asID:                     22394
IP address blocks:        198.224.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9c:cf:90:33:ea:03:9b:3f:63:ec:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 23 02:32:01 2025 GMT
            Not After : Jan 21 03:32:01 2026 GMT
        Subject: CN=44a09ed5-f856-4db0-8b0b-238071967c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:74:f2:ea:15:8d:97:35:eb:ca:e5:2e:06:7a:
                    9e:71:62:51:d6:cb:00:cb:64:91:b2:8b:ae:03:92:
                    c1:59:75:76:8e:6c:2b:1b:2e:ce:f1:f5:42:eb:9e:
                    24:b8:bf:99:a6:45:0f:08:1a:07:4a:68:21:ec:3f:
                    fe:e5:6e:83:78:c8:92:6b:51:23:3a:dd:bd:c2:15:
                    e8:67:62:bb:2a:90:d7:a0:99:be:b5:0a:d8:75:cf:
                    c2:ce:91:6e:92:66:77:eb:62:f9:a7:00:85:d7:5b:
                    03:84:a8:fc:e8:5d:08:38:8e:40:a6:48:80:58:2b:
                    e0:33:82:b6:e9:36:39:00:d8:73:88:da:44:f0:a8:
                    b0:7e:0c:3a:85:ae:04:4d:9e:2d:30:45:6d:24:8b:
                    d6:bd:44:2b:35:f5:22:1f:23:50:3b:e9:3e:65:b9:
                    01:55:2e:a6:66:70:13:d6:95:ac:90:29:df:5e:bf:
                    e4:78:31:44:5d:1b:28:14:79:db:72:07:0c:a1:6a:
                    65:4b:c5:6a:6f:bc:68:ff:cf:60:b2:0a:a2:f2:b6:
                    0a:63:47:bf:5b:a2:18:eb:f6:d9:de:b4:9f:90:7d:
                    19:1c:31:1c:91:6c:91:4b:45:00:e1:76:6e:87:7d:
                    81:c6:f1:dc:7f:3d:3e:f6:fa:6f:4d:4a:cd:37:1e:
                    f0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:89:DC:76:0E:24:F9:92:CB:44:00:9F:10:7D:2F:D0:66:7C:05:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9720a251-396a-3c4d-9288-f622c582bb0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.224.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:59:ad:5f:a3:42:43:01:80:63:36:c2:53:9d:41:0c:09:38:
         19:44:d6:fe:12:0f:e9:98:89:58:99:38:fb:16:93:39:6b:46:
         5c:6c:4d:03:b2:77:53:a7:95:1f:fc:ac:64:03:72:16:64:61:
         a6:20:f2:9d:da:7c:0f:95:50:ea:69:a0:14:1c:43:17:f6:90:
         84:dc:9c:32:d4:e7:c4:18:46:24:93:8d:49:60:3c:69:25:b2:
         9c:c3:de:4f:5c:4d:99:69:2c:c2:b7:0c:42:19:4d:33:68:67:
         ba:6f:69:ff:13:f4:f7:34:ab:74:a1:93:f8:99:62:e2:60:db:
         15:25:e0:02:71:af:35:a6:a1:c4:59:fb:29:aa:62:9d:11:b6:
         15:ec:89:ea:e7:e5:96:b8:ae:e1:9d:a9:7e:e7:a3:67:9d:9d:
         67:69:91:2d:26:01:de:08:c8:24:e5:2a:ca:13:ba:75:b2:fb:
         fb:b3:1c:54:cf:bc:e0:82:11:7d:dd:87:9e:67:f1:bb:f0:0c:
         41:ab:f0:69:12:21:a6:31:c0:ae:f9:b1:a4:f1:45:50:9c:d6:
         ca:f7:e0:5e:1e:9f:e3:5d:5f:f9:bf:3a:42:e8:d6:34:e0:39:
         b9:4d:7a:24:58:db:5f:79:86:59:36:38:cd:a1:22:00:a6:d2:
         e4:42:e3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 15:21:50 2025 by rpki-client