Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/508e8c5e-6dd8-369d-bd2b-01b05d99f76e.roa
File:                     508e8c5e-6dd8-369d-bd2b-01b05d99f76e.roa (raw, json)
Hash identifier:          gNyIZCKGbTGgpjPabGd9HGRLUoTdZzz7uo9vfl+ddtI=
Subject key identifier:   6E:05:38:45:F3:A3:34:64:87:0F:BB:AB:CB:F4:98:90:CF:60:B1:98
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BC270867E590B62709F68FA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/508e8c5e-6dd8-369d-bd2b-01b05d99f76e.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        97.146.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:86:7e:59:0b:62:70:9f:68:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=50cc34a9-6043-4343-9e45-e77a17b67641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:68:1d:71:a7:af:e0:02:43:bb:4f:60:20:
                    43:4a:33:11:ca:fa:10:1d:fd:9c:4d:dd:f3:76:9c:
                    10:cd:b0:5c:d3:29:b7:e2:8e:41:52:d1:a0:6f:1d:
                    50:56:ff:d8:f2:fa:9b:dc:b0:bd:e7:84:1f:4e:3f:
                    bd:75:e4:b9:41:d2:07:ed:6a:8a:fa:81:17:21:24:
                    1c:7f:53:27:d2:35:e0:af:e9:92:92:7e:b1:d4:d9:
                    48:66:a1:87:42:fd:d8:f4:47:67:28:df:d9:8d:8b:
                    82:7b:6e:70:e4:ff:fb:f2:db:07:c2:4f:5c:c5:2a:
                    e1:32:dc:cf:39:6f:6a:c3:28:85:51:f7:c0:ed:9c:
                    3f:3c:e8:d8:4c:1c:fe:f8:0b:90:c7:47:fa:c7:df:
                    e3:6a:33:9e:64:b1:db:53:9d:20:3a:4e:70:54:2d:
                    43:6e:3c:57:cf:06:fc:ad:20:3c:55:ba:02:e2:bc:
                    da:cd:36:e1:ef:8f:d0:8f:e3:ea:7f:0e:6a:4f:15:
                    12:32:95:1f:cd:65:62:fb:e1:5b:6f:c2:7b:a9:25:
                    5d:2e:fe:d2:e5:28:1e:49:3d:f1:21:25:2d:93:98:
                    09:db:6a:7d:80:ff:07:f9:05:d1:2f:c4:36:f7:77:
                    a9:aa:8d:4b:91:fe:19:fc:f3:b1:f5:a5:04:7e:00:
                    c0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:05:38:45:F3:A3:34:64:87:0F:BB:AB:CB:F4:98:90:CF:60:B1:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/508e8c5e-6dd8-369d-bd2b-01b05d99f76e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.146.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:54:9b:cb:c7:b6:35:d4:7c:bd:dd:64:a5:a0:4c:a3:c4:9f:
         a2:13:0f:11:4f:c6:17:18:0a:14:5f:0b:d0:ca:f0:96:8b:c6:
         19:dd:48:66:c2:64:d8:f5:89:83:4f:e8:04:1f:f0:ce:1f:f4:
         e5:5c:3d:6c:c1:37:22:8f:ed:15:87:e6:8a:34:8d:72:7f:24:
         49:0e:c0:94:74:54:e0:99:48:56:90:ed:17:0c:78:a5:d8:83:
         ec:1f:52:25:ce:1f:38:95:97:b9:a9:19:c0:b9:81:47:94:5d:
         c5:94:5b:71:e6:10:f6:e7:bd:db:39:7d:ac:e5:70:9f:47:01:
         f9:fa:0e:a5:38:b1:c1:24:9e:54:d8:d7:b8:8e:ec:55:27:c1:
         75:a4:72:0d:85:bf:1e:c8:96:12:7d:33:66:04:4c:f9:d9:73:
         d7:b2:92:b1:a0:89:c4:c2:01:fd:0a:cd:f9:b6:da:f9:d2:61:
         80:66:55:be:3a:3b:85:d7:a9:17:b2:17:7f:24:fe:c3:8a:af:
         2e:64:06:08:90:90:28:cd:18:a6:06:f1:94:3f:bc:db:59:55:
         b1:28:44:05:5c:07:0d:68:76:6e:9e:da:0c:d8:82:a4:2d:a3:
         55:66:36:7d:1a:fb:e7:a3:f9:10:5d:e9:39:fd:cf:88:5c:59:
         83:41:0c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:32:35 2025 by rpki-client