Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/eaf1f2dd-5b09-3584-ac52-f7356cfe81b6.roa
File:                     eaf1f2dd-5b09-3584-ac52-f7356cfe81b6.roa (raw, json)
Hash identifier:          s37bM95Z2XMcsYvZpay9wHsI0XTqVsgs3KM+QfUv7D4=
Subject key identifier:   66:43:A7:9E:1A:A6:D1:08:9C:D1:15:E3:F2:F2:4F:51:93:57:36:56
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A7A4B39AD729FC3452C0DAB18
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/eaf1f2dd-5b09-3584-ac52-f7356cfe81b6.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     852
IP address blocks:        75.154.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:39:ad:72:9f:c3:45:2c:0d:ab:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=542ce345-5cab-432c-847b-a26a7209ba4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bd:01:eb:b6:01:05:27:06:62:92:3e:3b:76:
                    20:2d:10:ca:11:ac:8e:62:db:ca:d8:37:ef:ca:4b:
                    ba:8d:08:85:30:70:e0:00:ff:15:2d:65:7c:25:a5:
                    f7:51:26:ba:7a:d6:6e:a8:dc:65:1e:c6:73:10:f9:
                    cc:ce:4b:37:33:c6:ff:1a:29:70:db:90:8e:bf:f1:
                    56:47:19:7b:1d:6b:99:5a:05:22:26:b1:c8:d6:1f:
                    9d:00:2f:a3:15:1b:29:e1:56:a4:d8:84:a6:85:d5:
                    87:ca:bd:49:24:9d:d8:57:ab:f0:4d:6a:e3:1a:fc:
                    35:2d:57:eb:ba:c6:45:c5:72:05:c6:e7:7e:35:8b:
                    d5:ea:41:bc:f9:95:70:2d:98:99:c3:3a:ac:a7:82:
                    04:2c:cb:73:b8:05:80:78:06:9d:4b:16:fe:fc:12:
                    d4:99:f3:22:b4:d0:f1:74:1e:ed:6e:0a:1e:62:dc:
                    33:d9:df:6d:43:42:0b:2b:23:73:4f:c1:9d:62:6e:
                    e5:10:3b:74:f3:48:4c:ff:1f:80:d0:dc:48:2a:9c:
                    c8:b2:5c:8e:71:7c:f3:e6:73:b5:a2:a4:e8:3c:3d:
                    3e:f2:c3:65:a8:75:b1:c3:4f:fb:28:27:9c:1b:1f:
                    07:4e:6d:2b:5f:c8:c2:f5:7a:91:f4:e5:c0:18:58:
                    8d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:43:A7:9E:1A:A6:D1:08:9C:D1:15:E3:F2:F2:4F:51:93:57:36:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/eaf1f2dd-5b09-3584-ac52-f7356cfe81b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.154.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:ca:1a:ce:fc:50:a7:ab:82:80:e0:4d:f9:11:e3:11:d0:50:
         15:d8:8d:72:61:66:ba:1d:17:58:0d:92:96:e9:73:bc:6a:c1:
         4e:75:76:57:82:c0:10:64:c3:e8:39:ff:24:84:14:c0:89:7f:
         ba:86:f6:40:d3:a0:4e:72:b8:e7:53:95:e7:74:c6:ef:7a:0c:
         ec:18:dd:7b:0e:fd:b9:bf:7a:0a:e4:1f:62:f3:30:88:a5:72:
         3e:39:65:13:52:98:4a:2b:6e:79:d9:c1:1e:1d:5c:79:dd:0c:
         ef:f9:58:03:c1:0b:97:09:33:10:65:70:b7:97:73:6b:78:d6:
         39:04:80:6d:27:bb:60:0e:29:af:fe:5b:10:29:da:71:f3:bb:
         89:53:ef:4f:1e:e4:68:9b:61:4a:36:63:59:2f:0e:a0:6f:db:
         47:68:25:6e:bf:e1:68:6d:ab:95:bb:b9:b6:29:38:f3:3e:0f:
         1b:60:64:3b:7f:72:7d:3f:5a:05:59:e6:81:ac:31:fd:19:41:
         80:ef:59:c7:a9:2f:3f:86:81:c7:ed:97:8e:15:b5:04:0e:67:
         3e:5e:08:62:af:ba:7d:98:a6:10:02:e9:8a:77:74:36:3e:66:
         a0:45:35:b2:b0:65:10:56:a4:29:eb:fe:ed:48:36:88:76:28:
         6f:11:c0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:30:00 2025 by rpki-client