Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78abf69b-b580-3ce8-b39c-85d6ef7adcad.roa
File:                     78abf69b-b580-3ce8-b39c-85d6ef7adcad.roa (raw, json)
Hash identifier:          Msm/ijzFestOL9+OMTqg3ZcVCaQg9RqeHwPomQgJzek=
Subject key identifier:   09:B8:4C:FD:75:1D:C4:22:DA:C4:D4:CD:57:AA:48:F8:EE:4C:78:28
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ACB410DB9C387CC04482A73C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78abf69b-b580-3ce8-b39c-85d6ef7adcad.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     701
IP address blocks:        96.225.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:41:0d:b9:c3:87:cc:04:48:2a:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=d162c072-c2c7-4b65-9624-294356e633ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8a:78:c7:60:03:a6:20:0e:7f:52:7b:54:f9:
                    13:95:f3:94:94:8b:a4:2a:ca:be:b6:a5:f0:4e:49:
                    f9:fc:77:05:37:2e:f1:0d:a5:41:34:41:6d:00:d7:
                    50:d1:ac:a1:12:97:38:2a:1b:01:70:63:50:c3:35:
                    23:27:9c:b1:86:fe:75:64:49:dd:34:28:20:e5:5c:
                    8c:18:34:99:c6:03:82:22:e3:1d:3d:20:db:ba:1b:
                    0c:de:3c:66:be:9b:b9:fa:ab:e3:71:44:a3:1d:31:
                    ad:bc:32:60:ba:a5:06:54:08:7a:03:36:50:af:6b:
                    10:5e:e6:92:dc:75:ce:3d:c4:34:fd:b1:0a:5f:4e:
                    e9:be:d6:2f:67:46:26:ca:cc:d8:23:1a:b5:8f:10:
                    79:2b:c5:f5:03:a5:df:7d:ad:6d:5c:3a:96:69:8b:
                    99:ff:61:94:f7:e5:2a:87:56:94:aa:bb:1b:a6:a6:
                    56:2b:32:e5:69:c5:88:ba:c9:1a:f3:43:fb:62:93:
                    c4:44:26:e5:a5:cc:b4:84:f5:56:d3:c2:4f:84:00:
                    1e:e4:b2:79:90:6a:8c:c8:02:e9:2c:d3:e7:ae:79:
                    70:52:4d:9d:07:37:07:cf:28:3d:c8:3b:6c:3e:f9:
                    12:45:eb:50:18:51:68:90:1a:17:11:07:fd:dd:f5:
                    64:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B8:4C:FD:75:1D:C4:22:DA:C4:D4:CD:57:AA:48:F8:EE:4C:78:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78abf69b-b580-3ce8-b39c-85d6ef7adcad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.225.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:87:8c:a4:81:81:bc:ad:0c:2a:be:cd:a7:a5:29:31:54:73:
         08:a4:65:35:35:c7:26:58:4b:e9:9d:95:22:c8:e9:84:c2:86:
         c3:03:b8:d1:1f:d9:9c:4a:7e:29:dd:1d:98:bd:be:6d:9b:cd:
         73:6c:1a:97:19:f9:f2:77:bf:52:89:a2:4e:82:ba:49:f8:ec:
         21:41:72:62:22:c7:fa:1f:3f:30:5c:2e:3f:eb:32:b2:fe:c2:
         d9:01:6d:15:66:66:0e:19:84:79:65:67:3e:7f:7c:bf:c3:3d:
         d6:1a:26:92:c7:d3:09:7c:6c:e9:44:d4:97:b1:50:b7:67:22:
         70:b0:4c:46:3a:17:5b:20:5e:68:c2:3c:73:ef:fd:0f:3d:7e:
         c1:8d:29:a4:b0:1f:7f:9e:a5:b1:ec:3f:5c:4a:30:e2:37:94:
         5c:5f:41:fd:f5:7c:3a:03:af:e2:9c:1d:aa:b7:28:2c:ab:15:
         b3:1c:96:43:7a:e2:dd:91:e6:d7:8d:53:f5:49:d3:59:3a:ee:
         dc:4d:66:83:fc:42:1a:d9:5f:6c:c6:6e:39:54:50:43:aa:08:
         fe:3c:d3:da:90:7f:20:e7:7e:84:d1:3d:a2:71:c6:25:f7:03:
         19:58:73:f7:33:25:39:82:74:5d:4b:4e:33:7a:52:14:e2:d2:
         9b:a5:cb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:03 2025 by rpki-client