Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/637a100f-347d-39bd-ba97-04747f754752.roa
File:                     637a100f-347d-39bd-ba97-04747f754752.roa (raw, json)
Hash identifier:          6Bu1IwZ1jkC7O1GKFFlXNia1rBtNCwCQyx6dLjDgJz8=
Subject key identifier:   85:22:55:D6:43:36:9D:E1:5F:25:E8:2A:C8:49:AA:F8:66:9F:4C:85
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BC27099CEDE602D7EE440F180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/637a100f-347d-39bd-ba97-04747f754752.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        97.181.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:99:ce:de:60:2d:7e:e4:40:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=697b5cf1-4892-4dc1-bc58-116c8040c2fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:15:33:2e:10:5a:2a:4f:f6:5e:51:e2:8b:1c:
                    06:ff:cb:ae:7e:c3:ab:a0:b0:fe:38:b5:2d:b2:06:
                    18:fc:de:47:cf:89:bd:40:a5:6d:f9:aa:56:a7:f1:
                    50:35:f0:0f:85:43:e1:8c:be:a3:aa:2e:19:d9:3d:
                    11:13:7f:01:d9:e3:af:d2:41:8d:0e:94:84:22:7a:
                    79:c1:94:c7:b5:72:0c:eb:f9:14:cf:14:bf:1d:e6:
                    ee:dd:30:db:92:38:02:bc:b1:c0:25:92:36:9d:64:
                    7c:38:d0:f2:49:4c:86:b4:20:48:7d:1f:89:c1:d9:
                    a1:15:89:f6:54:2f:4c:50:0b:3d:02:95:6a:39:06:
                    0d:c4:a8:a7:c2:74:13:e0:63:15:a7:8a:f3:d2:3f:
                    ed:b2:19:d9:8a:78:d4:3b:ec:ed:34:46:72:10:8f:
                    c4:c0:3e:06:f1:8c:6d:5e:83:aa:e3:b7:7b:77:c3:
                    d4:36:6a:55:a3:50:43:4e:e6:42:15:79:90:78:d8:
                    94:bd:b6:17:7a:89:9c:3b:41:73:d2:a8:58:ec:aa:
                    d5:38:08:6f:93:21:8c:d9:ec:d5:0d:02:d8:44:d3:
                    af:49:9d:f2:ec:7a:3a:8b:4e:b7:7f:16:87:28:6d:
                    77:5f:17:5b:38:ff:b1:11:c4:59:24:b5:89:fe:99:
                    09:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:22:55:D6:43:36:9D:E1:5F:25:E8:2A:C8:49:AA:F8:66:9F:4C:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/637a100f-347d-39bd-ba97-04747f754752.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.181.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:d4:09:00:88:05:4e:86:fb:08:9d:a8:db:2c:31:a3:45:74:
         13:bb:5f:24:eb:cd:80:54:aa:cb:75:08:09:c9:dc:a6:b2:e0:
         58:54:75:36:df:59:46:ed:24:55:52:a3:70:26:6d:a8:a1:c4:
         40:44:24:ae:ed:aa:7a:61:fd:26:20:f9:f5:25:8a:46:6b:b0:
         2e:a5:a6:de:9a:d1:49:72:04:25:c9:de:4e:50:6f:05:d1:89:
         e8:26:a7:9d:67:41:7c:96:d1:4e:9e:4c:ed:b7:bb:dc:86:21:
         09:66:5f:e5:e9:21:4f:5b:b2:ff:eb:16:a1:d8:b7:43:90:79:
         b2:a3:f6:51:b1:93:49:51:ee:d1:0d:9e:1f:fc:fc:c1:1e:f2:
         39:4d:fd:e2:69:14:55:2b:6c:65:79:e2:0e:7d:8d:0b:33:2c:
         cb:a1:47:de:77:c6:dc:bc:30:f7:9e:d2:a2:21:ba:f7:92:e6:
         88:f8:2c:01:f5:54:31:42:16:67:3f:a6:a5:aa:a4:dc:98:b8:
         57:b3:ab:86:76:1e:cd:a9:17:69:b6:9c:ac:56:83:9f:b6:57:
         e1:2a:b8:bf:ef:11:84:6d:5a:70:ed:75:a9:c1:26:76:dc:39:
         05:7f:d4:24:19:ea:88:00:b2:ed:80:ad:63:56:3f:a9:1d:54:
         cd:77:c6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:24:11 2025 by rpki-client