Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d6cf98d-4fdd-3cbf-87e8-bec9832034d2.roa
File:                     4d6cf98d-4fdd-3cbf-87e8-bec9832034d2.roa (raw, json)
Hash identifier:          jeSNwsRyzbqhoX3BAYOfxRDxuyfhPoXNJMPLJ0w39Ug=
Subject key identifier:   C4:2D:66:1F:49:50:B1:6E:22:C4:0B:C7:10:DC:12:DB:BF:6A:24:71
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BABFD3A90854957306CAA95A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d6cf98d-4fdd-3cbf-87e8-bec9832034d2.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        97.232.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:3a:90:85:49:57:30:6c:aa:95:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=a689adf1-9cda-42ce-a7c1-626660d74223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c0:85:f9:5f:36:bb:da:c8:ef:f6:42:fa:22:
                    56:92:19:2e:5e:62:c9:2e:11:35:88:fa:69:86:83:
                    65:0c:18:09:c3:a0:27:07:ed:52:70:9d:90:c9:c0:
                    76:0c:76:29:5d:da:94:be:43:84:7d:39:04:c4:c5:
                    b6:c4:0c:07:83:93:14:1f:d7:2a:e5:19:b4:c8:71:
                    88:05:c9:22:1c:70:dc:9a:28:90:2b:29:c4:40:b3:
                    2e:ff:91:14:06:30:af:74:af:08:bb:ee:d3:22:53:
                    bf:9a:29:71:d2:bd:32:2c:32:71:55:a1:ad:81:5a:
                    ba:ee:25:f7:7f:95:00:cf:b9:e4:93:9f:43:8d:6a:
                    a0:5e:67:e8:73:f2:10:37:17:cc:8c:f1:5d:ba:8f:
                    d5:b2:3d:41:ce:6a:53:58:f6:07:7b:ca:a3:8c:aa:
                    dc:5d:5f:bd:86:ee:f3:27:0f:95:3d:3c:29:c0:ab:
                    cb:cc:7a:b7:7f:fa:16:4b:c7:4d:0a:ad:4d:48:b4:
                    4b:8d:31:06:9f:71:a7:79:92:f3:db:4d:cd:4b:48:
                    96:59:3f:23:ef:2a:37:b9:f4:cf:3d:a7:7d:cd:54:
                    2a:74:2b:c0:39:6e:b9:ee:26:95:71:72:3c:40:a4:
                    14:c7:71:35:7a:30:81:34:e6:01:fa:8b:eb:25:4c:
                    03:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2D:66:1F:49:50:B1:6E:22:C4:0B:C7:10:DC:12:DB:BF:6A:24:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d6cf98d-4fdd-3cbf-87e8-bec9832034d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.232.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:9d:b8:95:2c:b8:b7:b0:2c:06:e6:c6:30:50:eb:d4:92:70:
         f6:08:8c:2d:35:ea:ce:22:38:56:af:7d:81:6c:f1:db:71:75:
         f9:ed:73:36:79:b2:c7:39:a6:a5:83:ad:ba:e0:63:9a:80:6f:
         1d:19:a8:5f:ef:34:cf:16:a1:f5:f8:65:ab:66:96:7e:3d:56:
         09:39:24:16:ff:c3:25:c4:df:bf:7e:21:57:6c:84:73:a5:cf:
         00:11:a9:ef:63:e6:57:48:a0:df:2a:5b:64:74:c3:f6:5f:56:
         bc:42:5e:26:2f:ea:0f:8b:04:9f:25:94:83:0c:f9:f2:8c:f6:
         5d:41:c4:01:76:dd:ff:c4:cc:cd:88:d8:62:0a:5e:d3:cc:af:
         db:ab:ff:eb:8d:6a:10:6e:d8:64:28:27:10:50:99:c4:08:c2:
         09:51:62:46:81:3c:95:f7:15:89:7b:62:b8:63:f4:0e:e4:08:
         c6:89:35:c6:d9:29:c6:83:0a:6b:81:96:0b:c1:70:3c:30:52:
         76:db:f9:a0:90:87:7b:1d:8b:25:d2:f0:80:ff:bd:4d:f2:b1:
         06:7c:a9:aa:80:f7:b7:94:57:a7:9d:24:2f:22:c7:73:6a:20:
         11:3f:8f:6d:70:1b:62:b9:0a:d1:2c:f7:0f:a7:8a:49:26:00:
         1a:7c:37:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:02:07 2025 by rpki-client