Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/55e7ba24-0545-30bf-bc1b-d9149c191d2e.roa
File:                     55e7ba24-0545-30bf-bc1b-d9149c191d2e.roa (raw, json)
Hash identifier:          8sK0m3LBpu3B9j4AZ8Qdwp1Jn9LPMIu1AvJ8w1t13GE=
Subject key identifier:   83:D7:33:C8:03:76:6F:5E:F6:98:36:7A:58:30:EC:5F:23:DB:01:F3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB2F806DFDED58B5B2F8FC7C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/55e7ba24-0545-30bf-bc1b-d9149c191d2e.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     701
IP address blocks:        71.162.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:06:df:de:d5:8b:5b:2f:8f:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=d7b3d190-0b8e-4110-bb34-84b8f6d22678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0b:7e:e1:48:47:c0:f7:18:e8:c4:82:0f:55:
                    f6:29:67:a6:83:d4:74:3c:ad:d2:ca:b1:c5:a7:fe:
                    41:67:f0:3a:8e:76:b2:5f:5b:b2:94:27:4c:5e:27:
                    96:14:38:97:22:20:66:4b:ed:fd:71:6b:1b:0d:f5:
                    c7:b9:e2:72:e5:da:00:52:ff:df:f2:56:e3:40:1f:
                    9a:fd:c9:a2:3a:27:dc:40:e9:8f:03:5b:2b:d0:79:
                    b9:3d:56:81:25:f7:d0:d2:dc:75:7d:32:f0:5d:ae:
                    64:46:b6:2a:ae:39:fe:98:89:98:c6:65:0a:a7:e8:
                    0d:2e:b8:9f:4b:70:c5:9c:24:31:22:f4:e1:b4:67:
                    8f:df:a2:d8:0b:24:f8:85:3f:26:c4:f5:8b:1d:c5:
                    7f:eb:46:07:eb:8b:c5:52:dd:bf:06:d4:60:a7:91:
                    a8:dc:8d:58:d4:00:57:1c:2f:80:7f:e3:1d:36:fc:
                    b8:90:f3:5b:76:08:21:99:c5:b2:eb:ff:f4:b8:31:
                    19:66:08:56:1d:25:a3:cf:89:37:7b:f5:1b:47:be:
                    d2:56:22:d8:06:c5:3f:ea:37:cf:0a:a6:7c:57:84:
                    fd:6c:b6:0b:03:70:b4:7c:53:47:d9:06:ef:6d:ba:
                    ac:af:87:fa:f9:49:bf:73:d2:7a:a2:07:9d:91:b9:
                    bc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D7:33:C8:03:76:6F:5E:F6:98:36:7A:58:30:EC:5F:23:DB:01:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/55e7ba24-0545-30bf-bc1b-d9149c191d2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.162.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:1d:fa:74:33:30:e8:c8:5a:66:ce:3d:31:ef:ea:59:25:93:
         b6:f6:61:f0:f5:c1:ce:4b:8f:c6:ee:42:a3:52:f9:6e:e2:f3:
         22:5b:2d:9c:6f:e7:24:b6:91:52:19:a8:bf:eb:13:1b:aa:21:
         3e:03:7c:cd:01:05:07:09:f1:97:c9:dd:ba:02:97:2b:98:6e:
         fb:ef:d5:e2:54:1c:8e:51:04:8d:01:82:9e:c7:61:10:8f:4e:
         6b:16:d9:75:c4:3c:ac:a7:61:4f:bb:8f:17:a4:25:8e:e3:2e:
         07:bf:46:13:36:22:e5:4f:c2:ff:b1:7f:93:e4:19:41:a9:c7:
         ee:d1:49:f4:7d:82:3c:c8:7e:99:f9:8e:29:23:f9:8c:ac:d5:
         bd:a5:b6:fd:a6:f6:e5:45:80:a2:1a:ff:b3:4b:5b:62:5f:b5:
         04:21:af:d4:69:4b:d7:19:f1:83:7c:d4:7b:05:7c:0c:0f:a8:
         99:44:ef:34:6b:64:40:88:5a:84:95:ee:98:aa:09:d3:84:d4:
         a8:2c:d8:4b:51:b3:b5:c0:2a:03:f3:fa:3a:13:bd:e8:be:87:
         3c:a1:7f:b8:36:3c:1a:a5:96:0b:ac:70:12:ec:0e:82:f0:d4:
         bd:c2:4b:70:02:74:57:0a:ac:09:47:52:3e:09:eb:eb:93:16:
         99:59:f7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:19:56 2025 by rpki-client