Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b4d0a29e-c9de-3370-85fa-9a014751ae68.roa
File:                     b4d0a29e-c9de-3370-85fa-9a014751ae68.roa (raw, json)
Hash identifier:          VhMGoLIV+734SM4sw5BRif5FBrzv1bgmWR9rlV8iO8Q=
Subject key identifier:   B2:99:65:E9:A1:5D:2B:4B:FF:8F:0C:F6:CD:3B:FF:5E:29:F6:07:63
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BABFD38E5E338184397C4DD40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b4d0a29e-c9de-3370-85fa-9a014751ae68.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        97.217.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:38:e5:e3:38:18:43:97:c4:dd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=dc36663a-597d-470a-827c-0d40dff0740b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c4:e9:b8:ea:36:13:5b:c4:d9:44:97:68:1e:
                    e5:bc:93:4f:99:5d:7e:df:aa:7c:31:c3:58:7a:d2:
                    23:63:dc:38:68:29:c1:4a:8c:8d:7f:f0:00:6b:32:
                    b0:24:fb:2b:8f:f6:f8:ff:aa:64:f5:60:97:66:4b:
                    98:2e:96:81:55:f2:9e:b7:cb:51:b4:37:40:c2:7d:
                    df:7b:aa:28:6d:23:1a:02:54:ee:7a:26:f8:d9:c3:
                    01:a1:cf:9d:e2:1b:6e:84:ab:08:55:18:8b:bc:f9:
                    58:a7:c7:3f:84:42:bf:75:5f:67:f4:03:cc:54:19:
                    41:67:ab:30:c2:26:5b:54:43:46:78:66:56:26:6d:
                    2f:12:87:68:b3:a5:ea:10:6d:96:23:06:e0:3c:ff:
                    67:e9:e7:fc:a2:f0:64:28:c1:4c:05:14:47:f6:cd:
                    56:c7:f9:73:63:5b:1f:1f:33:8b:42:22:38:f6:4b:
                    18:11:4a:2c:14:13:09:2f:f2:c5:5c:ca:91:ff:6c:
                    37:6f:88:57:4d:30:0d:64:26:61:b9:6e:b0:81:72:
                    14:dc:a4:42:d8:bc:ef:8d:56:f6:71:17:03:0e:fc:
                    76:fd:f6:ae:9e:c2:86:59:77:ba:e1:1b:a6:d6:4f:
                    23:3f:be:a7:64:21:46:48:02:08:2e:41:84:a6:96:
                    65:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:99:65:E9:A1:5D:2B:4B:FF:8F:0C:F6:CD:3B:FF:5E:29:F6:07:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b4d0a29e-c9de-3370-85fa-9a014751ae68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.217.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:8f:22:de:5b:a7:0c:52:eb:dd:db:e1:1c:3d:a2:5a:a4:19:
         9e:ba:29:78:bb:68:2f:c3:65:26:ce:ed:59:ae:0e:f4:1d:a4:
         d1:a7:94:4c:96:4b:f8:ae:4d:25:ea:a0:fc:5e:d6:7d:d9:64:
         fa:73:f0:69:bb:36:04:bb:fc:cf:4e:f1:a7:eb:25:27:1b:3b:
         06:60:26:cd:d0:a3:39:45:5b:35:94:96:eb:a0:8a:a8:c2:5c:
         43:49:3f:bb:67:7b:30:7d:b5:42:2b:09:82:f8:b9:51:7c:09:
         c9:ef:21:55:f2:5e:dc:74:33:fb:a7:72:4d:02:40:82:28:ec:
         7d:da:e9:fc:02:35:26:c5:ff:92:be:77:71:97:c7:47:35:52:
         fd:7f:cc:dc:b6:f4:57:72:58:87:83:e2:48:a3:91:84:04:2c:
         08:fa:03:78:ee:e7:25:10:2b:e9:34:69:f7:06:e1:82:bd:1b:
         c5:de:30:38:cf:b1:f1:11:1e:ee:99:96:73:dc:19:16:0e:95:
         ff:4e:83:83:85:bc:f6:73:36:86:bc:60:7e:d8:e4:ef:01:0b:
         94:55:17:91:91:85:b8:d8:d3:6e:9d:95:0a:07:bc:85:f3:46:
         95:55:8f:97:52:15:36:5f:60:16:9a:41:51:04:03:a6:e6:21:
         68:1f:74:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:32:39 2025 by rpki-client