Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/97919732-be48-3d0e-966f-1c792d340e74.roa
File:                     97919732-be48-3d0e-966f-1c792d340e74.roa (raw, json)
Hash identifier:          f6Q0UVGNOUFczHuYHNYB7o9kIhM78TfCBNvgpXA6H0I=
Subject key identifier:   04:77:3C:14:E4:A9:40:89:06:9D:9C:D8:F9:C5:6A:D0:15:99:A3:9E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BA39D315FA4E9FB5F273758C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/97919732-be48-3d0e-966f-1c792d340e74.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     701
IP address blocks:        204.51.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:31:5f:a4:e9:fb:5f:27:37:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=920f3c98-e2eb-4865-b8bc-d227f0c85308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:47:59:12:dc:e3:af:73:e4:f1:f1:a2:22:c8:
                    6c:0f:f1:47:33:6e:64:49:79:f6:df:c8:c7:af:f0:
                    a1:12:be:d3:56:0e:63:5f:e0:6f:6b:c1:b9:0a:8a:
                    8e:4b:13:fa:9a:e5:c1:5c:46:a2:c8:e0:2d:86:45:
                    47:e5:93:2a:d9:21:0b:93:34:cb:05:23:3d:2a:d2:
                    1a:7d:dc:c3:ef:1a:4b:97:0b:00:51:97:25:77:c7:
                    f7:86:0f:d7:ce:ed:04:1a:95:d9:08:8d:e2:a3:00:
                    72:82:36:18:5c:f8:f8:f5:b9:bb:a1:81:4a:fa:68:
                    18:d1:ac:5c:61:e4:4e:4c:4a:89:84:41:a3:62:40:
                    23:86:b0:22:4f:37:f4:5d:d4:40:e6:5d:74:f6:23:
                    c0:c0:db:96:69:d1:c9:eb:52:cf:99:6e:90:08:6f:
                    e7:54:c1:24:a7:91:4d:24:3d:3e:46:6e:04:79:28:
                    b7:5c:2c:82:7c:c0:21:89:7a:d1:0d:72:7d:5f:92:
                    22:75:42:4a:92:8d:92:97:ce:de:31:68:a8:eb:5b:
                    9a:78:b5:7e:d0:f2:f3:73:6a:69:6c:74:95:7b:a5:
                    50:27:18:60:1a:d7:08:15:2b:f9:71:40:d8:1a:07:
                    a7:22:a4:ef:6a:c9:86:f5:38:b3:5f:b5:a1:7f:e2:
                    79:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:77:3C:14:E4:A9:40:89:06:9D:9C:D8:F9:C5:6A:D0:15:99:A3:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/97919732-be48-3d0e-966f-1c792d340e74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.51.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:57:04:80:3b:7d:46:93:ea:29:a4:2a:66:3e:f2:1a:0f:f5:
         ef:ba:d4:b1:56:11:47:d5:e7:f9:89:f1:d4:8d:b3:31:13:d4:
         53:aa:e3:2c:39:0e:ee:4f:84:b6:6c:ca:12:0b:3b:ff:5d:c4:
         f7:b8:ac:12:eb:d6:1f:aa:e5:4c:d6:ef:25:8a:28:fb:a3:25:
         89:2d:f9:00:ef:0d:13:8b:d5:f7:23:02:3c:44:e4:d0:e0:af:
         0e:71:35:6b:6f:8f:2b:6d:c0:b1:7b:34:9c:2a:de:91:d3:56:
         3e:79:3f:63:75:54:99:f0:bb:5e:2e:46:e1:ab:4b:a2:d3:d7:
         11:72:1d:1c:4e:d5:55:12:48:d7:1d:d9:a7:6f:ac:7b:23:2d:
         0d:3c:96:b9:19:9b:a6:8f:82:4b:57:4e:de:fe:b2:78:40:32:
         d7:88:dd:a4:b5:6d:59:a2:fc:48:4f:94:cc:03:e3:9b:9b:64:
         d9:f6:c9:e2:b9:d6:c9:ca:0c:7c:2a:bf:49:4f:86:29:38:f0:
         af:5b:d7:d0:a7:ba:79:28:6a:7b:60:b5:8c:02:bd:4b:bb:50:
         3a:3a:d8:ab:af:5f:48:01:54:73:e9:f5:f6:fc:e0:08:23:73:
         93:f3:eb:a2:62:af:7b:49:9f:52:5a:d2:35:2e:a7:fb:ea:64:
         13:1a:1e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:19:57 2025 by rpki-client