Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/75482567-bf9a-32f9-8896-65732b3ae544.roa
File:                     75482567-bf9a-32f9-8896-65732b3ae544.roa (raw, json)
Hash identifier:          YpGnvhhvJCmParbtovdqAuiSZ4berqpg1Fk+SDWBgyU=
Subject key identifier:   4F:AE:EB:E4:C7:80:93:E3:CC:3F:33:FB:BD:01:7F:ED:A8:44:5D:91
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F4328584B4AF0FE115C70D5CBE6F58B70
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/75482567-bf9a-32f9-8896-65732b3ae544.roa
Signing time:             Tue 23 Sep 2025 18:43:05 +0000
ROA not before:           Tue 23 Sep 2025 18:43:05 +0000
ROA not after:            Mon 22 Dec 2025 19:43:05 +0000
asID:                     14593
IP address blocks:        173.250.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:f0:fe:11:5c:70:d5:cb:e6:f5:8b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: Sep 23 18:43:05 2025 GMT
            Not After : Dec 22 19:43:05 2025 GMT
        Subject: CN=d715b650-8f7d-4c84-947d-d3a51c023f41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ce:c5:42:2a:71:99:e6:1a:83:26:8f:5b:8b:
                    f4:02:2e:35:38:d6:a5:18:5c:0f:a2:ac:28:ab:66:
                    a8:21:e0:f4:0a:c6:a8:d7:8a:bc:81:19:35:e9:57:
                    dd:7a:37:42:45:65:ce:a3:a1:82:0d:93:a3:2f:09:
                    07:a9:68:4b:22:94:8d:f3:b3:dd:d9:17:fe:46:49:
                    ff:1d:94:3d:cc:85:67:9c:e9:73:bc:b7:b8:6d:a2:
                    cc:dc:cc:c4:37:e7:0e:00:79:19:0a:b0:1a:80:6d:
                    6f:fc:25:63:11:d8:e0:67:29:fc:c6:c3:9b:ec:bb:
                    60:a2:58:07:84:9d:52:f4:93:ae:e5:82:6b:c2:12:
                    b0:31:84:0b:58:6f:58:e8:89:88:6e:27:ff:65:05:
                    da:ab:16:6a:35:3c:a9:88:84:6c:53:61:3f:2e:19:
                    ea:6f:34:25:13:ef:62:23:b3:81:33:88:94:31:d2:
                    62:f3:8d:2f:8a:6e:7e:c8:da:bf:5d:f8:53:d7:55:
                    60:6a:45:80:00:f0:13:93:89:d9:e2:f4:8f:b7:01:
                    2f:2f:97:04:30:75:f5:06:76:06:9d:c4:89:9a:00:
                    d8:1c:a3:61:8c:c0:10:78:57:f5:6c:e9:11:de:1e:
                    d4:c6:31:c8:b1:f4:82:6c:c5:05:0e:0f:a0:1a:d3:
                    52:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AE:EB:E4:C7:80:93:E3:CC:3F:33:FB:BD:01:7F:ED:A8:44:5D:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/75482567-bf9a-32f9-8896-65732b3ae544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.250.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:77:e4:20:e8:8a:8e:eb:9c:00:24:ee:99:9f:d8:96:88:39:
         71:06:a7:86:16:e3:16:9d:34:77:67:6b:f4:9c:f8:da:52:54:
         6a:fe:16:92:d3:64:94:fe:40:3d:fa:be:e8:f1:13:06:79:e1:
         b5:8a:bc:bf:53:94:d3:3d:82:d3:6a:39:9e:11:a6:40:76:3c:
         13:c4:72:92:d5:d6:c4:0b:95:d2:0b:c8:3a:25:4b:9d:3e:bd:
         49:8b:09:43:0f:e6:96:70:e3:28:f7:0c:b2:c8:ca:4a:71:97:
         67:a0:bf:b2:07:8d:5e:69:a0:3f:38:99:de:4f:f3:1a:fb:1a:
         76:aa:b5:b2:9f:3d:d7:81:ce:05:64:b1:cf:45:68:a0:b4:fc:
         d9:12:51:39:2c:23:7a:fd:ad:84:bb:14:34:97:b1:2c:cf:ff:
         af:38:6b:0c:b4:9c:e3:fe:39:7f:ed:10:9f:e2:7f:07:0b:fe:
         dd:93:99:dd:d0:04:56:12:96:71:2b:59:c1:78:51:30:41:82:
         7e:31:23:2c:52:ae:d0:4b:2a:a6:e7:83:48:aa:e7:70:74:0e:
         e4:a0:95:91:a8:84:8d:e4:57:f8:6b:d1:aa:96:f2:36:97:58:
         99:2f:25:14:06:ab:a8:c1:c6:fd:e9:78:b1:ee:e5:e3:97:d4:
         e8:e5:b1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:08:32 2025 by rpki-client