Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/75c9ae00-3895-385c-8913-67c442d2f4e6.roa
File:                     75c9ae00-3895-385c-8913-67c442d2f4e6.roa (raw, json)
Hash identifier:          FYEiiaqPBVqp1jSYhfdKGupKwRTYQPScwham2q5Pc4Y=
Subject key identifier:   95:13:61:F3:11:05:90:1E:72:CD:05:38:EE:F8:80:E5:B7:A0:82:B7
Certificate issuer:       /CN=3a975a5d-2307-4688-a186-4a355ff45581
Certificate serial:       010D0C9F4328584B25FC41353B66EE093221B600
Authority key identifier: 0C:2D:81:CC:F7:46:F4:16:73:1E:6C:69:B6:5D:95:2B:82:6C:51:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/75c9ae00-3895-385c-8913-67c442d2f4e6.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     32473
IP address blocks:        64.52.21.0/24 maxlen: 24
                          67.158.61.0/24 maxlen: 24
                          69.72.30.0/24 maxlen: 24
                          137.83.90.0/24 maxlen: 24
                          141.193.149.0/24 maxlen: 24
                          172.86.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/3a975a5d-2307-4688-a186-4a355ff45581.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/3a975a5d-2307-4688-a186-4a355ff45581.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:41:35:3b:66:ee:09:32:21:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a975a5d-2307-4688-a186-4a355ff45581
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=1c6c079c-bd2b-41e6-b8c2-e3c1286e5cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8f:7f:cd:ec:56:17:ef:2f:0e:ef:58:7e:9e:
                    8a:6b:a8:ad:28:67:66:22:37:6a:12:32:7f:59:08:
                    a5:33:35:4c:e9:c5:b5:61:06:3f:71:5e:76:b2:ff:
                    06:68:bb:db:28:dd:d9:a1:99:9b:13:bc:d1:72:4d:
                    9c:6a:f5:86:cf:dc:07:87:dc:b9:a9:a1:98:3f:7e:
                    41:50:db:67:0d:f4:06:a2:ab:cf:ef:b9:45:b4:d3:
                    7a:ae:83:26:99:39:82:98:2a:5f:94:9f:1e:eb:c9:
                    2d:dc:93:eb:bb:16:25:27:e1:b0:a1:69:d8:be:be:
                    c9:1c:cc:65:44:08:e6:2d:c8:02:55:26:a7:0a:ac:
                    47:d9:fe:3d:d9:71:50:ea:f7:b3:74:7e:73:2a:2c:
                    3f:61:5c:12:bc:38:2c:a0:ee:ce:26:fd:54:d5:d6:
                    44:1b:10:da:bf:d6:48:c7:7a:22:0f:6a:57:64:f0:
                    78:13:c1:8c:32:4a:65:b2:75:34:1d:32:5e:7e:62:
                    fc:e9:79:e2:54:5f:31:02:7c:0c:ea:3a:8d:fe:d1:
                    e4:09:f6:d3:43:db:18:49:df:da:ef:cb:8b:42:00:
                    2f:63:4f:b1:97:3d:17:4b:75:24:93:bd:57:08:2f:
                    8a:eb:1a:dd:68:5f:ef:94:98:87:9d:71:55:5e:0e:
                    0b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:13:61:F3:11:05:90:1E:72:CD:05:38:EE:F8:80:E5:B7:A0:82:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/75c9ae00-3895-385c-8913-67c442d2f4e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/3a975a5d-2307-4688-a186-4a355ff45581.crl

            X509v3 Authority Key Identifier:
                keyid:0C:2D:81:CC:F7:46:F4:16:73:1E:6C:69:B6:5D:95:2B:82:6C:51:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.52.21.0/24
                  67.158.61.0/24
                  69.72.30.0/24
                  137.83.90.0/24
                  141.193.149.0/24
                  172.86.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ee:16:18:d6:7e:51:8c:a4:cd:27:70:c4:cb:93:23:64:5d:
         ed:de:11:8b:31:65:74:b9:0d:9c:05:9d:b2:9e:4e:0d:b7:54:
         5e:82:41:d0:58:25:52:c2:f1:71:7b:3f:d1:a7:a9:26:0a:21:
         1e:13:de:36:3a:28:d6:7e:5a:82:cc:55:ad:6d:25:f6:5e:2c:
         26:fb:13:d3:48:cf:ac:b8:96:ab:d9:67:84:5d:8d:fe:8f:4b:
         bf:9d:a0:e4:43:71:02:57:97:63:8d:44:83:81:ee:69:64:98:
         92:48:2e:21:0b:04:64:ed:74:c8:58:61:21:71:49:83:9d:d2:
         9e:27:23:6e:36:09:9c:ce:45:0c:b0:6b:27:07:31:30:6e:10:
         f6:ff:ad:fb:06:eb:fb:b9:5f:91:5f:a9:b3:f9:61:6c:e8:b8:
         3c:6d:c3:12:88:09:e0:1e:70:b0:76:ac:97:be:31:1f:67:fa:
         03:d4:6c:23:38:8b:a6:e6:ac:5a:a1:5c:8d:df:a1:ea:c9:80:
         3f:13:1c:b2:ff:bc:86:ab:e0:69:34:78:11:94:b8:44:04:8b:
         4b:22:1c:6e:aa:0a:82:06:4f:10:b0:54:a8:bb:3a:c5:e8:2a:
         9a:7f:d9:6c:b8:cc:62:88:02:cc:dc:ed:38:f4:c2:fb:ff:79:
         72:b0:0e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:54:03 2025 by rpki-client