Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89453d6d-22c8-3f4f-ac06-9d29c56a2cef.roa
File:                     89453d6d-22c8-3f4f-ac06-9d29c56a2cef.roa (raw, json)
Hash identifier:          fBmn58AXTBfxshSwO0nOK+angDnwODOigR8u/7DCQKA=
Subject key identifier:   15:43:6D:69:05:5F:AA:B7:48:4C:C6:EF:47:B3:4F:EF:21:18:11:18
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB2F7D8665AE65ADE1CF6FDE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89453d6d-22c8-3f4f-ac06-9d29c56a2cef.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     701
IP address blocks:        96.249.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:d8:66:5a:e6:5a:de:1c:f6:fd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=32de042a-fae0-4c7a-9b85-214e8740f689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7d:72:90:eb:56:51:85:1b:e8:7c:22:37:8f:
                    09:0b:86:9c:1e:62:d4:0e:d2:2a:10:80:21:49:c1:
                    78:2f:70:da:d9:8f:22:46:d9:bb:a2:b8:41:b7:b1:
                    8b:c6:21:8f:da:29:f3:3b:41:21:2c:8b:5f:49:cc:
                    40:c0:f4:72:3b:a6:6b:ea:00:64:c6:d1:98:54:da:
                    e5:0a:89:c0:0e:c2:68:09:5e:d2:9f:7e:f7:b5:60:
                    ca:8c:0b:27:9d:c0:ca:aa:c5:0a:f4:ca:10:84:6d:
                    1b:da:97:e0:8c:20:3e:aa:e5:f9:c0:e3:49:3c:41:
                    1b:d7:b0:78:2f:10:d5:92:e1:15:80:34:d9:4a:38:
                    ba:97:b0:68:b2:ec:a7:15:f5:52:1d:52:6b:43:2c:
                    7f:c5:7e:d4:0d:ed:18:f7:67:af:cd:50:2a:97:e1:
                    5f:ec:8f:de:6c:3a:40:7f:32:93:75:b6:b2:c3:d2:
                    60:4d:13:5b:b1:d8:11:73:9c:70:78:c2:cc:6d:e9:
                    5f:48:56:5d:e1:6f:8d:05:2f:0c:2b:0e:68:ee:fa:
                    67:8f:4c:4b:de:a8:43:d2:a4:78:2e:dc:9f:ce:8b:
                    51:06:1f:ab:05:3f:2f:d5:92:e0:47:8e:91:29:24:
                    64:24:59:df:90:b0:89:df:cd:ad:81:c1:1d:ad:eb:
                    a8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:43:6D:69:05:5F:AA:B7:48:4C:C6:EF:47:B3:4F:EF:21:18:11:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89453d6d-22c8-3f4f-ac06-9d29c56a2cef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.249.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:5d:a9:53:04:89:04:bf:0a:07:98:32:49:45:14:af:31:0d:
         a5:30:71:e5:2f:cb:39:06:e5:b7:e9:03:e2:a2:8a:69:b0:96:
         c9:0d:d2:0a:2f:56:d4:7c:2e:24:f2:75:18:13:18:f2:de:41:
         ae:bf:fb:88:e1:ea:10:ed:52:7f:b0:d6:29:0e:7a:42:a7:ef:
         9d:1b:93:2c:49:3b:81:8b:29:e8:cc:da:7d:5c:c8:e5:a9:50:
         92:a1:c5:03:e8:ee:58:59:91:1d:38:4e:01:c0:7d:64:37:3d:
         c7:3e:08:8c:0c:59:92:48:2b:84:16:3d:b4:f6:ac:a3:93:d6:
         b6:20:c2:71:0d:e2:f5:34:a5:8f:9d:62:40:a9:58:c0:a6:99:
         af:66:80:24:52:e7:0a:bf:be:74:ac:14:41:da:c8:0b:18:69:
         71:bd:cf:67:d8:95:59:3b:32:e6:4e:55:3e:3e:7b:b8:97:16:
         a1:1e:59:f0:47:a5:c1:de:ae:cd:8d:e5:13:bf:fa:ca:83:f5:
         0a:84:8b:8c:94:a3:c1:ac:7f:e9:28:7e:ae:f9:9e:fd:37:47:
         51:5c:a3:eb:c4:09:ae:ec:e8:1d:fa:7b:65:04:c8:2a:90:e3:
         db:e3:0b:87:31:56:ef:e8:5f:62:b9:cf:f5:b2:81:c7:2f:09:
         83:22:a4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:19:55 2025 by rpki-client