Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e3fc475d-f445-377e-9c02-3bbb66043806.roa
File:                     e3fc475d-f445-377e-9c02-3bbb66043806.roa (raw, json)
Hash identifier:          8U9MK6PkFFY005H6iG+ixrdtQV/k70DJarLcft3Z0EE=
Subject key identifier:   90:6F:EC:33:86:26:5D:90:90:74:49:44:CB:98:23:A9:55:3B:BC:EC
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A7A4B3478F9E7A85A5AAC0700
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e3fc475d-f445-377e-9c02-3bbb66043806.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     852
IP address blocks:        75.154.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:34:78:f9:e7:a8:5a:5a:ac:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=d1d4bbd7-f070-4823-8776-e22758ef1bec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0e:1f:84:3d:9c:b0:67:57:6f:fb:e2:33:de:
                    ad:8b:53:a7:1d:d0:ce:8d:8d:89:24:a4:fa:1e:dd:
                    39:4d:00:0b:91:bd:a2:d4:7c:59:4b:e3:da:28:dc:
                    44:c5:58:96:c3:2a:eb:bc:3c:d8:b9:0b:50:a8:1a:
                    cb:60:28:96:d1:c4:d2:b0:07:90:5c:b9:3c:29:d3:
                    1d:d9:a7:39:44:c4:64:bc:af:66:3f:2c:cb:ed:5b:
                    83:9a:1c:27:26:09:a1:db:12:ce:a7:7d:00:87:8a:
                    d4:26:ca:c9:6c:15:0e:70:b1:86:f1:38:3e:cf:10:
                    74:e1:4d:ab:75:4c:6f:6e:67:a5:c6:8b:41:4d:c6:
                    91:f5:e9:e9:9f:ef:3d:69:b3:9c:6f:e3:29:6c:80:
                    f8:9f:ac:6a:f2:94:97:f4:ee:3b:16:3c:45:b2:e0:
                    3a:63:78:18:e2:ea:68:bd:64:8f:b5:43:1d:19:6d:
                    45:d2:db:58:fc:98:d2:e7:0d:75:b6:04:ea:7a:f5:
                    b2:25:ac:b7:aa:a4:ca:32:53:c1:99:51:d8:0c:95:
                    0a:da:be:b0:cd:ba:29:74:91:f9:ad:b5:4a:2c:69:
                    17:64:65:36:96:86:68:e7:1e:26:84:08:36:31:aa:
                    74:d6:f4:16:dd:bd:5b:e1:80:82:12:19:d9:58:4e:
                    e6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6F:EC:33:86:26:5D:90:90:74:49:44:CB:98:23:A9:55:3B:BC:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e3fc475d-f445-377e-9c02-3bbb66043806.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.154.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:69:ee:38:98:b2:c1:c0:c4:71:dd:7e:9c:62:d5:b4:2c:b0:
         c8:1d:89:c5:11:1c:84:8c:c2:b2:b1:0c:fd:4e:13:1a:74:6c:
         5e:6b:83:2f:3f:5e:e0:bf:46:40:48:75:af:e9:c3:e9:55:b5:
         84:27:11:9f:3e:0c:5c:14:f9:67:55:68:cc:5d:15:89:2c:20:
         14:c5:cb:50:b3:cc:d1:b9:fe:4c:35:24:e5:7a:69:cb:b8:b7:
         4a:17:f1:61:64:a7:a8:73:41:fd:2d:4c:b0:03:75:32:00:b3:
         7e:d6:d2:90:ae:c0:ec:a5:cc:71:cf:ac:17:94:c6:01:b9:ae:
         7e:e5:4b:4f:28:63:96:a3:1d:cf:1e:07:9d:ed:37:1d:f5:9c:
         5f:74:23:72:e1:9b:a6:01:5e:c7:65:04:51:2f:38:bb:b9:8d:
         cc:72:ae:21:77:75:52:d3:2c:55:e3:c5:86:e1:d4:cf:f6:0f:
         99:36:a0:75:c9:c6:f5:2c:07:53:5b:18:48:b3:61:78:18:56:
         a1:92:a9:c8:52:53:22:fe:a3:da:cf:4e:41:fb:7e:b3:35:ff:
         39:e4:03:ed:fb:f8:20:3d:d5:d8:1b:ef:b3:d9:d8:10:16:d4:
         fb:ad:6e:f8:16:25:15:4e:08:1a:50:fb:11:c4:80:13:a1:14:
         cc:1f:a6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:34:05 2025 by rpki-client