Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98a0de2c-5066-3f50-bc0f-8ecf760f612d.roa
File:                     98a0de2c-5066-3f50-bc0f-8ecf760f612d.roa (raw, json)
Hash identifier:          98ytnHMCod0jSA0MhntIWiJK6PsBoR1n+P9U6rYagpM=
Subject key identifier:   B7:01:C3:DA:A5:9C:2A:9A:8D:B6:E2:50:3C:E9:D0:D8:AC:99:5B:90
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BBFA59FBBB9C32B4BB72ECA40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98a0de2c-5066-3f50-bc0f-8ecf760f612d.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     6167
IP address blocks:        97.250.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:9f:bb:b9:c3:2b:4b:b7:2e:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=8fa76a7b-9a15-45e4-9ff8-5ce29a1a9c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:27:a0:5f:90:bb:0f:b2:1b:c4:3a:97:ac:9d:
                    6a:fb:ed:ab:62:5c:61:19:6d:7d:4c:13:e2:35:bd:
                    ab:7c:16:10:19:0e:cf:90:c8:84:46:08:ff:5f:be:
                    de:98:89:bf:c0:fe:1b:b6:a2:53:ea:1c:3a:ec:7f:
                    95:53:04:b1:20:fe:18:f3:51:92:4f:eb:8c:e3:d4:
                    35:4f:26:d1:7c:1f:29:4c:eb:2a:6e:86:d1:3a:26:
                    84:8f:47:21:30:b9:88:fb:60:95:11:08:42:05:67:
                    95:a5:63:cf:6f:71:21:d5:1b:2e:49:42:d9:90:5d:
                    f7:f9:c2:21:af:a0:72:ee:a9:2a:16:18:9f:cb:e4:
                    64:f7:90:2f:0c:74:ff:7f:d8:12:2e:7f:97:fc:46:
                    c5:d0:a9:51:2d:19:72:94:5a:00:9a:87:a5:f3:97:
                    34:34:d7:0f:de:44:ed:39:e1:03:d1:92:40:ae:ca:
                    aa:ff:47:06:09:21:d8:14:05:f6:28:87:4a:88:16:
                    da:c6:db:73:45:42:fc:39:2b:fe:30:14:35:0f:e0:
                    6e:ad:46:33:7d:10:2b:e2:52:fb:f4:d7:36:52:a0:
                    2f:e9:56:87:d9:03:9f:60:40:ca:6f:80:20:7b:5e:
                    72:3e:2d:b8:30:67:33:d6:b7:10:03:9c:4b:8d:92:
                    60:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:01:C3:DA:A5:9C:2A:9A:8D:B6:E2:50:3C:E9:D0:D8:AC:99:5B:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98a0de2c-5066-3f50-bc0f-8ecf760f612d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.250.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:4a:d4:e7:68:77:6a:4b:4a:a4:c8:5d:6b:44:fe:00:64:ed:
         6a:32:75:95:9b:c7:a4:be:ba:37:69:bd:b4:34:83:d6:9d:2b:
         c9:db:4c:ba:dc:a2:7b:7e:4e:30:f1:95:ad:65:fd:48:fc:77:
         51:08:2c:b6:c0:22:5e:e0:de:88:54:f5:36:ee:5f:11:a0:f6:
         05:cf:bb:1e:45:e8:17:40:28:d1:fa:af:cc:72:86:f8:ce:a0:
         0e:ab:a2:7d:0d:c5:1b:f5:7f:b1:0f:eb:1d:54:51:ee:ed:e4:
         8b:99:51:1e:2c:b5:24:20:96:10:90:e3:67:a5:db:0b:0b:30:
         26:3b:7e:d6:25:38:9e:cc:72:73:11:03:d0:c5:e7:fe:43:52:
         8a:2c:0f:6a:03:b9:50:ad:dd:2a:f3:6a:62:10:85:dc:e0:31:
         ec:02:3b:c4:4a:3d:7e:57:cc:14:c0:e9:54:6c:89:58:4c:11:
         c1:8a:45:6c:e9:e0:14:cf:8a:fe:ec:5f:7d:1e:8c:13:af:de:
         8e:c5:56:28:46:e9:2a:78:b9:0d:9f:99:41:54:5e:b6:b2:43:
         8d:cf:55:9a:2b:0d:07:91:e9:79:db:9e:52:39:2b:72:29:49:
         ca:75:0a:12:26:4d:34:7d:01:91:4b:19:e2:37:82:2c:68:1e:
         f1:99:a7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:17:43 2025 by rpki-client