Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c454f36-04f7-32fb-b76e-eb37f740b1d6.roa
File:                     8c454f36-04f7-32fb-b76e-eb37f740b1d6.roa (raw, json)
Hash identifier:          UDn0S0GMztKcTBnqddwmxOJOLqya2Pi7pRddAg9o99Y=
Subject key identifier:   57:3B:31:CD:B8:F4:D3:B9:03:26:E7:AC:2B:42:02:42:6E:E4:DD:6D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB2F7E1323EEE4922DF8EA1A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c454f36-04f7-32fb-b76e-eb37f740b1d6.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     701
IP address blocks:        100.15.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:e1:32:3e:ee:49:22:df:8e:a1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=5ab9ae22-5f67-4085-a89d-8473a44fc7cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:df:8c:82:44:15:fd:99:d8:ca:d5:0c:2d:21:
                    a6:ff:36:0e:0f:8f:9a:7e:7a:8c:8d:7d:09:7f:3d:
                    6e:32:7d:ef:b7:df:ae:23:1e:ea:f3:b3:9a:aa:00:
                    ee:1b:ea:1a:b4:66:c9:bb:40:eb:22:10:1c:d0:a0:
                    8f:f8:53:98:4c:8b:66:92:a3:5f:4e:be:69:d9:cb:
                    ab:71:1f:14:b6:f8:7a:e9:17:37:b8:da:f5:15:9b:
                    a5:6d:eb:76:68:e6:03:c5:a3:b6:92:0b:be:37:9d:
                    6f:e5:17:d9:e0:6c:97:1a:1c:6f:a5:76:cb:83:ee:
                    64:89:42:9e:fa:e8:35:63:8b:44:90:f1:cf:14:75:
                    df:4c:1f:50:63:d9:39:6a:02:ed:79:63:6c:6b:a7:
                    8e:61:7d:87:d9:49:34:61:0b:50:84:f9:19:e1:c0:
                    8f:fd:cd:2e:ef:63:b3:72:8a:bc:1e:61:bf:4f:45:
                    57:d5:14:b9:0e:a1:97:a0:b6:35:1b:5b:4b:6f:1c:
                    a6:00:c6:bc:e5:4f:f5:ba:2c:54:fd:04:01:8e:d3:
                    f9:fb:77:6b:f7:b3:ab:49:01:95:29:29:3a:7b:92:
                    fd:7d:0b:e0:c9:a8:39:99:a9:39:95:06:17:20:f1:
                    8f:70:69:9e:0a:78:90:f0:0e:62:f6:c2:50:db:ae:
                    9f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3B:31:CD:B8:F4:D3:B9:03:26:E7:AC:2B:42:02:42:6E:E4:DD:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c454f36-04f7-32fb-b76e-eb37f740b1d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.15.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:86:c1:67:77:63:82:f3:e1:f8:68:6a:a9:b5:c8:b5:c7:c2:
         65:6f:08:1b:f7:7d:e0:b4:df:45:27:fb:11:e7:56:13:87:76:
         c5:08:15:e1:a7:d6:65:67:55:4a:a2:c9:0e:37:4d:62:2d:ca:
         38:d4:7f:49:0f:eb:93:f7:36:b2:ac:38:18:96:6b:de:da:5d:
         f3:d0:8b:26:93:ab:1c:41:d0:6d:e0:6b:02:b0:70:2d:0d:14:
         63:4e:11:84:77:cd:0d:1b:b2:e3:5d:6a:c2:f4:fa:d6:eb:d7:
         bd:17:9a:94:43:95:65:ff:85:9c:cd:f6:c1:12:e4:87:a4:19:
         50:91:14:2a:ba:d5:b5:69:be:31:33:d4:33:0f:dd:de:e9:74:
         0d:98:06:c3:f7:83:e8:41:7e:19:9e:d8:90:e3:6d:8f:f4:7a:
         10:95:67:ae:0f:a8:dd:3f:fe:5c:fe:5a:d1:f6:b5:66:90:58:
         b0:ba:e7:a0:57:4b:be:8e:7f:fb:47:93:57:13:2a:72:ec:2b:
         32:bf:ac:bd:50:3b:a3:c3:1b:82:86:54:f3:2e:2e:d5:7b:fd:
         2b:42:8f:a5:08:40:6b:7a:3f:6a:fb:08:36:de:2e:0f:dd:b4:
         6c:e6:d0:c0:9a:20:6b:df:00:e1:df:dc:3c:87:75:0d:54:97:
         60:b7:26:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:20:11 2025 by rpki-client