Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b97b357-13cb-399c-93f5-a0a8716a1830.roa
File:                     2b97b357-13cb-399c-93f5-a0a8716a1830.roa (raw, json)
Hash identifier:          wfrSPcjt3bIDrefmLOUUZefYKAkOSdhmNW4Zi//+P7g=
Subject key identifier:   E8:F1:10:5E:80:D8:2C:DD:C4:B8:B3:22:0A:F5:3E:17:7D:C1:DD:E0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BA39D32DB294E81011A015380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b97b357-13cb-399c-93f5-a0a8716a1830.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     701
IP address blocks:        141.155.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:32:db:29:4e:81:01:1a:01:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=3241d2e8-fb6e-4836-ba3d-0488488516ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:97:42:94:1f:dc:b8:11:d2:05:2d:97:67:13:
                    8c:33:64:96:b5:00:f2:95:7d:9b:4e:94:c4:21:3f:
                    60:0a:41:09:43:3f:b6:c5:e8:16:04:32:16:ee:e8:
                    37:75:57:87:b2:98:c5:66:19:3f:61:14:be:df:6f:
                    be:b7:1d:41:cd:09:4d:89:91:20:72:b0:07:c4:03:
                    08:b7:72:cf:40:6b:ff:65:76:88:0e:52:0e:b1:cd:
                    17:91:63:6a:c4:3f:b4:3f:6e:98:7f:66:b3:bf:26:
                    66:3e:cc:af:be:86:c7:a4:ba:58:fa:74:11:fd:72:
                    95:fd:6f:0d:dc:04:64:92:27:dc:bf:01:bc:83:ed:
                    17:f9:d6:f0:df:3d:4b:58:de:65:62:df:d5:79:f4:
                    3f:5c:23:d1:d3:43:ba:7d:6e:97:d0:f1:83:cb:6c:
                    20:f4:1a:b7:be:a9:1d:16:e9:a6:39:ce:0e:a4:a3:
                    e9:44:db:fa:60:a3:8f:e3:4f:50:a0:25:49:af:20:
                    a1:b0:6d:b5:bf:2b:9a:99:eb:ec:03:19:b7:6d:38:
                    47:f8:f9:f0:5c:29:a9:bf:65:1a:a7:36:7a:ae:3b:
                    c0:ee:e7:c0:73:8a:07:5d:ef:b8:13:7d:11:12:3d:
                    c0:ca:21:86:03:65:f4:6c:4e:7e:05:af:10:47:05:
                    88:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F1:10:5E:80:D8:2C:DD:C4:B8:B3:22:0A:F5:3E:17:7D:C1:DD:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b97b357-13cb-399c-93f5-a0a8716a1830.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.155.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:58:00:d7:ce:8e:ed:14:1f:40:49:5e:f7:59:e7:4c:6b:0a:
         fd:5b:78:71:4c:57:bd:1c:97:ec:4b:c8:8f:5d:5b:36:78:ef:
         f9:98:ac:e0:f0:a2:d2:da:f0:be:e3:ec:85:00:e1:aa:53:02:
         6b:92:ad:7e:31:f9:fd:b6:ba:1b:25:c0:83:11:33:1d:ad:ca:
         59:b7:c3:29:a3:7b:ff:75:5d:b0:ef:eb:10:85:2b:c7:e3:d8:
         10:60:c7:9d:61:af:37:0a:65:cf:b2:61:4d:58:e1:d0:ea:77:
         d0:e1:07:9b:13:00:09:5c:b5:fb:ad:ca:29:65:31:4d:ed:a6:
         db:24:b8:25:df:31:03:36:37:d5:c2:29:8a:3d:f0:e9:54:ef:
         77:71:6a:5b:5f:00:b9:93:67:73:c1:94:72:c2:27:bd:8d:3a:
         14:cb:63:03:94:84:d8:86:79:83:04:f9:39:3c:8a:52:40:b0:
         42:22:3b:7e:d1:54:55:39:bd:6d:c0:54:8a:63:cb:65:fb:e0:
         05:c9:ba:f0:76:fd:19:83:de:e0:29:2b:a8:10:5c:68:9e:ec:
         cf:44:be:ea:d3:78:91:57:09:98:13:32:f6:79:06:ad:e3:75:
         54:99:69:e6:34:14:92:79:04:f6:c9:d9:ed:90:03:ed:0e:b2:
         4f:00:28:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:19:54 2025 by rpki-client