Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fbb538e1-5eed-3b8c-b1a5-75bbb96d0baf.roa
File:                     fbb538e1-5eed-3b8c-b1a5-75bbb96d0baf.roa (raw, json)
Hash identifier:          aXGsMOQVufL0o9YD9BZ1LZ9uba8eupsQrUZuwoxPG4U=
Subject key identifier:   CE:37:2D:AD:27:FD:FB:1D:D4:68:17:6F:B5:45:49:D8:4E:56:F7:FF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BA39D2BBFDDF51364C4494980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fbb538e1-5eed-3b8c-b1a5-75bbb96d0baf.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     701
IP address blocks:        209.220.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:2b:bf:dd:f5:13:64:c4:49:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=208a8c05-c084-4b32-859b-8d0c4eda2a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c5:98:4b:12:97:b7:44:1a:32:3c:18:bc:8b:
                    1d:c7:62:2a:02:5c:43:53:18:53:99:bc:b3:73:05:
                    5a:66:c3:32:ee:77:d2:a9:21:f0:3c:41:b7:ba:09:
                    89:14:8c:63:70:85:a6:22:04:8f:67:8c:66:d7:17:
                    96:96:c9:2b:ba:67:76:82:d0:76:c4:db:eb:7d:e8:
                    75:60:ae:af:b5:51:0a:36:19:8e:c3:50:60:18:40:
                    45:7b:21:c8:28:6e:77:dd:bc:05:d2:7f:24:38:4f:
                    e0:e1:a2:0c:17:2f:fb:84:ce:c8:f9:cc:cd:79:65:
                    b1:f3:63:40:95:5e:cb:5e:c2:d0:fc:d3:fe:d2:cc:
                    b8:38:d1:db:f8:50:7c:58:89:8b:86:4f:69:19:2b:
                    68:e8:6f:1f:e7:0b:af:13:9d:7d:1c:37:f8:53:8d:
                    06:16:09:d1:07:4d:99:1c:50:11:4d:68:9d:48:3b:
                    73:63:1d:0b:00:b7:05:40:f3:50:23:f8:d6:f7:99:
                    de:b5:75:ed:ea:0e:ff:b8:bc:f1:a1:68:b7:5b:bf:
                    7a:5a:b5:cb:18:28:97:58:5b:3b:10:2c:7f:78:61:
                    b1:b1:d7:dc:90:60:fc:32:8a:90:2a:e8:0b:44:b3:
                    e0:f9:ee:96:0a:e5:29:72:c8:f4:9b:d2:ce:da:9a:
                    0f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:37:2D:AD:27:FD:FB:1D:D4:68:17:6F:B5:45:49:D8:4E:56:F7:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fbb538e1-5eed-3b8c-b1a5-75bbb96d0baf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.220.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:44:2e:08:9e:db:67:36:ff:06:a3:33:9f:da:a3:d8:c2:9a:
         73:56:ad:64:ce:b9:6b:7e:5d:ae:d5:7f:34:fd:45:d0:c9:37:
         a1:a0:b6:0c:22:bb:12:64:eb:03:c5:7b:c5:3c:f5:d2:df:75:
         08:83:5c:cc:3a:f4:3c:b6:91:9c:61:90:97:18:bc:e8:c2:8f:
         41:ff:17:ea:ad:39:51:8f:b9:cc:fa:53:ee:7b:8f:e5:75:44:
         14:d2:f6:c6:c8:36:3a:ff:09:e1:90:e1:0c:eb:be:27:3a:e3:
         51:16:c7:00:8e:34:c3:fb:1e:8f:ea:7d:07:6e:c7:a1:b5:60:
         71:a3:d4:e7:37:0a:a4:fb:1a:3e:98:2c:01:6c:09:fd:7f:78:
         e4:1d:8f:4f:8b:9c:b2:ad:a2:ca:62:da:24:fc:dc:bd:f9:eb:
         e7:d5:86:e3:96:68:b3:49:08:2b:6f:0f:ab:fa:63:69:d1:e1:
         9e:32:6c:b2:c0:63:51:3c:d0:9b:a3:d0:b1:80:83:7e:e5:71:
         dc:0c:1e:e7:c5:f6:af:68:12:bc:ef:78:48:47:8e:9a:07:d3:
         fe:1e:01:3c:bc:c7:c9:c8:67:7f:e3:e4:5a:80:77:bf:0d:fe:
         dc:77:a0:36:03:f9:f9:dd:c7:8d:50:13:b8:0f:8c:e2:b5:a5:
         9a:a0:5f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:20:12 2025 by rpki-client