Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/61e744f9-b518-35f4-8676-b66110d6fa73.roa
File:                     61e744f9-b518-35f4-8676-b66110d6fa73.roa (raw, json)
Hash identifier:          nG9gvtRi5W0k8YtqH/H985mOhr+mRvmZn1vbFUPOZys=
Subject key identifier:   D4:69:76:3B:65:34:A8:B1:5F:EC:C6:13:E9:44:3D:10:A8:F2:5C:8A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB2F806314F3A516FF91CBD40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/61e744f9-b518-35f4-8676-b66110d6fa73.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     701
IP address blocks:        74.109.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:06:31:4f:3a:51:6f:f9:1c:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=77b0bd7f-0587-4c81-85c3-344b5f7f7c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8e:77:b2:44:cd:a8:8c:b7:c4:01:b3:57:2d:
                    f3:96:9b:30:a5:79:31:7c:ed:da:f4:be:6e:51:63:
                    a6:fd:15:06:a4:3c:25:4b:64:68:0c:f6:a0:25:51:
                    bd:df:76:c9:3e:6a:4f:5f:0d:ea:e1:bb:59:8f:b4:
                    8b:04:6d:1e:f3:31:4f:ce:f2:47:10:07:cb:aa:4e:
                    df:37:73:7b:ab:c4:1c:0e:72:11:f3:2f:89:bc:5f:
                    03:c2:92:2b:24:0f:8e:26:c0:8a:67:20:e0:9c:9f:
                    89:a4:0a:a0:c3:1c:ea:e9:96:6f:b0:8f:6e:8e:2d:
                    b4:37:79:5c:98:3b:70:f7:da:17:b0:63:9c:88:5c:
                    be:1e:2c:ac:34:35:35:1f:0f:78:95:ef:64:d2:28:
                    63:e9:05:e4:d2:3a:9c:c2:90:49:7a:a4:b6:d4:c1:
                    fe:70:f2:96:10:6b:03:b7:7d:09:ea:b2:79:89:04:
                    ae:11:55:c4:e3:42:d3:d6:91:3f:61:6e:87:9e:2a:
                    87:93:9e:ef:53:2c:a8:48:d1:59:ed:de:b6:75:01:
                    c4:6d:70:cf:b9:bd:77:f8:4b:b6:00:a3:e3:ea:ae:
                    a2:42:f1:d9:7f:8c:f0:3d:bd:c8:73:74:4a:c4:11:
                    d1:2e:fc:1e:95:d5:83:6f:9d:65:d8:f2:bd:52:c4:
                    f0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:69:76:3B:65:34:A8:B1:5F:EC:C6:13:E9:44:3D:10:A8:F2:5C:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/61e744f9-b518-35f4-8676-b66110d6fa73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.109.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:ad:b3:6c:f0:03:5d:4a:78:4c:83:de:3f:ce:79:79:c3:d9:
         0d:d3:c5:db:26:eb:fa:21:a9:54:ee:ac:25:6f:bf:ad:a1:a5:
         b7:1d:81:af:ac:d4:d8:07:f5:bf:4d:69:bd:3d:50:48:2e:f6:
         f6:79:a7:67:9d:c4:c9:28:18:73:ec:ef:2a:ab:19:41:b3:f0:
         f8:ca:ab:cd:a7:1c:f8:8e:fa:9c:b5:97:8b:3f:6a:41:dc:a1:
         66:95:c0:11:e6:30:aa:aa:ef:b5:d0:c5:ec:1f:2e:d2:8b:4f:
         93:f8:cb:94:85:9c:0b:a6:5e:6d:6f:9e:a7:51:91:da:6e:11:
         c3:64:76:01:b3:f9:1d:2e:87:fe:6b:05:83:bf:e8:d4:eb:9b:
         94:f0:de:a7:6a:e9:16:f5:53:7a:8e:8e:77:1c:b9:ac:60:83:
         26:2b:f8:39:84:3b:7e:9d:53:08:59:0a:63:1e:c0:bd:f0:9d:
         af:39:1a:67:97:e0:63:1f:c7:4b:91:01:0a:f4:d7:ab:b1:61:
         d3:9d:d4:01:0f:0a:59:31:a7:c0:ff:0f:55:d3:75:e9:81:82:
         fb:20:fd:cc:19:da:af:d8:5d:5b:3e:d2:16:90:2c:f1:52:ae:
         26:4e:6c:52:d4:a3:8d:c9:2c:16:ee:a3:94:92:eb:9d:d5:79:
         a8:b0:0f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:36:06 2025 by rpki-client