Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1fbb013-0962-38c6-8195-501fa2a6acd3.roa
File:                     a1fbb013-0962-38c6-8195-501fa2a6acd3.roa (raw, json)
Hash identifier:          wxrCrr/0/CF2oXLB6Rnm93pfd9ssD/lVB6MuMrquqDI=
Subject key identifier:   6B:C2:60:AD:B3:15:FD:D7:71:7A:BF:D6:B5:AB:74:A5:2C:CF:EF:2E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB2F7DD4EFAED860C98206180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1fbb013-0962-38c6-8195-501fa2a6acd3.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     701
IP address blocks:        108.50.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:dd:4e:fa:ed:86:0c:98:20:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=aff6d501-57ae-4422-b6cb-0151ac2c6e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b4:42:2c:5a:58:30:73:fa:d6:40:d8:ab:8c:
                    2f:62:e9:15:b5:38:5d:72:88:47:a1:35:ba:75:5f:
                    d1:1e:09:04:81:4c:a5:23:ff:46:ba:59:19:e2:f5:
                    0f:26:7b:1f:75:6c:8b:82:87:7d:f0:2a:c6:a0:14:
                    63:1a:d7:7a:f1:e5:d3:bc:45:61:df:0c:b7:ff:14:
                    af:e8:0b:32:be:66:3c:26:12:a8:0a:05:26:36:28:
                    ce:9d:3b:0e:92:44:6a:aa:5d:31:8d:9d:dd:d8:93:
                    2b:70:4e:bc:6d:4a:af:20:02:60:70:82:82:24:01:
                    df:ce:0f:04:a0:1d:74:d8:94:f0:b7:4b:7e:1d:14:
                    47:98:93:9c:64:8c:73:4d:07:fd:26:0d:eb:83:c0:
                    3d:a0:2f:93:37:3a:a9:43:99:77:ad:c9:51:45:13:
                    4c:da:50:c1:ca:f8:8e:77:33:71:ee:17:46:75:5d:
                    ca:59:23:6d:83:df:98:0f:27:95:f2:66:52:cc:85:
                    cb:12:f9:db:77:9c:40:57:c6:7c:ad:b2:35:e5:d2:
                    e0:f8:2c:ce:6c:a5:2a:ff:68:83:4a:ed:65:6e:8b:
                    37:fe:43:5d:df:a0:24:fe:6d:99:73:b9:88:a0:e6:
                    df:c2:e3:6c:b1:fb:2c:f9:9a:33:5c:88:26:ae:c1:
                    71:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C2:60:AD:B3:15:FD:D7:71:7A:BF:D6:B5:AB:74:A5:2C:CF:EF:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1fbb013-0962-38c6-8195-501fa2a6acd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.50.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:fd:46:8f:a6:85:f1:e1:bc:57:d2:6e:01:15:2b:3e:9d:e1:
         5f:e3:77:5b:94:5f:c3:cf:b5:8c:a6:e7:b4:60:78:f8:58:22:
         b3:f1:a1:42:87:b0:75:4d:30:5b:b6:eb:a9:be:2d:4b:21:93:
         2d:f4:27:c0:36:34:0f:53:eb:50:8f:ad:ff:2e:43:e4:52:7e:
         cf:02:e9:89:46:44:fb:16:95:0b:41:de:65:da:4c:e3:35:2e:
         d3:49:f5:81:8d:bc:03:cd:14:5b:13:f1:7e:3b:94:52:50:f4:
         94:fd:61:a9:cf:71:f2:3b:91:38:f7:96:6b:69:11:ba:1f:70:
         e2:7c:d4:3a:1a:00:74:41:b6:d9:a0:7f:63:dc:49:ce:af:3d:
         8c:5f:d1:88:82:9e:0b:1a:e1:a0:3a:65:11:af:31:68:50:87:
         73:e8:83:b1:81:cd:d5:81:29:6b:d4:e1:ca:4c:cc:13:d0:1a:
         89:d3:81:b0:a4:4d:1e:b3:bd:bf:9f:b4:b1:58:0c:e3:46:17:
         69:24:c9:ed:aa:fb:41:96:7a:e6:5e:f6:0e:74:a9:28:38:91:
         66:f4:4c:bb:47:61:ac:3d:25:9c:c5:68:b4:35:7b:ef:e0:44:
         eb:3e:c8:ab:8a:ad:9a:f4:48:72:22:2e:75:60:4e:19:a8:73:
         13:59:0b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:23:05 2025 by rpki-client