Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/10f96eb3-c064-387e-a6f5-a7edc3b9e757.roa
File:                     10f96eb3-c064-387e-a6f5-a7edc3b9e757.roa (raw, json)
Hash identifier:          ogBVsy2thX11VrfX1jpVGZOShWlzb5cWu3qT8gNMd0E=
Subject key identifier:   54:04:7D:60:96:89:C5:8B:2D:59:BC:88:A0:A4:E6:FA:66:1E:B9:79
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BC270850C1E6B3F30B2012680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/10f96eb3-c064-387e-a6f5-a7edc3b9e757.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        97.136.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:85:0c:1e:6b:3f:30:b2:01:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=edbafdcf-a24c-42d5-9830-03d184aa0811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3c:d9:04:75:58:8f:4f:ab:f4:a2:6f:4e:77:
                    a2:a0:fc:e9:d2:2d:3a:c1:04:40:f8:1b:da:d3:83:
                    b2:f4:23:3d:f1:6c:9d:80:f5:b5:85:ba:66:d9:ed:
                    9f:a3:61:0c:66:90:05:ec:2f:9e:83:20:10:2d:87:
                    a6:cf:b6:41:fc:a1:8e:1d:ec:45:c8:98:dd:67:95:
                    e6:a3:a0:f8:e6:f1:1d:a1:34:8b:5a:66:b1:aa:33:
                    33:d4:c8:3a:74:3a:19:4e:ff:59:83:73:d6:98:c8:
                    51:57:a1:1a:0a:3c:45:83:74:74:33:37:fe:63:1d:
                    5d:54:8e:bc:47:93:70:c6:a8:68:b9:71:76:17:36:
                    95:a5:08:76:b4:ff:d2:08:cb:2e:a6:82:11:a1:d9:
                    a5:e3:18:24:b9:51:e1:f9:20:ad:33:97:51:db:61:
                    75:e2:ac:57:d0:68:7c:81:23:80:5e:49:ae:e8:69:
                    35:7c:af:f9:4b:7a:b3:df:ad:ae:2f:28:0d:41:72:
                    85:03:d4:dc:fc:24:5a:88:be:01:dd:ce:81:9f:9f:
                    90:e4:fe:8e:b1:74:40:12:a0:09:da:86:71:8b:24:
                    4e:5e:f5:5f:ee:a7:18:f0:9a:74:35:3f:99:4a:2e:
                    b1:69:cf:9d:48:87:2d:06:be:90:e9:b2:4b:d9:13:
                    87:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:04:7D:60:96:89:C5:8B:2D:59:BC:88:A0:A4:E6:FA:66:1E:B9:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/10f96eb3-c064-387e-a6f5-a7edc3b9e757.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.136.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:95:5a:30:68:a3:e4:43:28:fe:87:a2:b1:86:1b:37:28:53:
         51:17:e0:5f:c8:f0:8e:5f:5b:6e:87:7a:f2:2c:4f:a5:3a:7b:
         9c:cd:af:fb:32:a5:7b:0d:2c:0e:ea:5f:44:10:a5:4e:f0:d2:
         83:54:fd:19:37:b0:bc:01:6c:51:4e:88:b9:5d:29:46:38:ce:
         5e:31:83:fa:bb:45:fb:4e:32:3b:aa:d6:77:6c:89:03:5a:64:
         98:fd:fe:47:82:f4:7b:5b:d9:b4:ae:72:1e:45:f8:c9:db:14:
         bb:d2:dc:6f:94:b3:e8:a6:e5:d0:b9:58:34:d9:35:12:dd:a6:
         09:3f:7c:da:7f:da:81:68:1f:be:54:06:94:b7:00:25:40:c2:
         9a:6a:86:39:eb:cf:57:3f:6e:c7:ec:67:ac:27:fc:49:1b:29:
         8a:38:79:d4:c8:0b:64:d1:c4:a2:7b:02:bd:ad:f9:8c:e6:92:
         59:a9:c9:d6:ab:5e:3a:52:4e:bf:27:de:57:57:78:96:d1:25:
         32:5d:70:58:b4:b6:54:f3:88:1c:f0:00:88:76:62:4d:d4:da:
         2d:e4:09:3f:aa:2d:5e:53:d8:92:06:94:62:ce:0d:f0:76:78:
         6b:5a:cb:c1:58:a6:ff:b9:bf:5a:92:db:d9:02:4f:01:9b:42:
         3a:c1:8a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:18:39 2025 by rpki-client