Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cae558d5-5cb1-461b-9c33-43f664d3b3b1/75b40b6a-2ebd-3c0b-990b-9a161629f87e.roa
File:                     75b40b6a-2ebd-3c0b-990b-9a161629f87e.roa (raw, json)
Hash identifier:          7Uo3pz2HDnXGMZUohQsy9JjCBKqQL6C4chBB1t7F3Bc=
Subject key identifier:   EA:91:E7:43:22:2F:1A:4E:6E:08:96:79:C6:69:7F:7C:89:78:67:B6
Certificate issuer:       /CN=cae558d5-5cb1-461b-9c33-43f664d3b3b1
Certificate serial:       010D0C9F4328584B434C5BC805310F566589FB80
Authority key identifier: 35:50:74:0B:AF:F9:63:BE:9F:E7:D2:B1:D1:16:33:BB:AD:46:52:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cae558d5-5cb1-461b-9c33-43f664d3b3b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cae558d5-5cb1-461b-9c33-43f664d3b3b1/75b40b6a-2ebd-3c0b-990b-9a161629f87e.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     14618
IP address blocks:        209.142.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cae558d5-5cb1-461b-9c33-43f664d3b3b1/cae558d5-5cb1-461b-9c33-43f664d3b3b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cae558d5-5cb1-461b-9c33-43f664d3b3b1/cae558d5-5cb1-461b-9c33-43f664d3b3b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cae558d5-5cb1-461b-9c33-43f664d3b3b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:5b:c8:05:31:0f:56:65:89:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cae558d5-5cb1-461b-9c33-43f664d3b3b1
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=d875441e-4f93-4a5b-b7ad-f2c28a964f7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a2:7c:fe:3a:3f:d8:2f:75:f2:a8:9e:c7:0b:
                    81:e5:19:fe:d8:d8:9e:53:4d:4c:16:c5:a4:91:b1:
                    18:24:3f:00:d3:dc:ad:52:85:6e:c1:5c:be:1d:26:
                    10:2a:e1:13:2c:1e:0d:bf:e1:56:92:42:ff:4d:f6:
                    6a:bc:64:ea:94:e3:c5:31:86:2f:d6:11:53:e9:d0:
                    6a:7a:72:34:41:30:64:71:98:25:3a:41:6e:d8:e2:
                    b7:bd:14:67:e1:db:76:af:f7:78:0d:50:dc:7c:64:
                    a3:50:f1:de:db:be:a0:37:67:df:58:ae:fe:91:62:
                    18:cc:f0:e6:ae:6d:fc:8c:4c:0c:8b:2d:ae:9f:1d:
                    f6:bc:16:6d:68:d9:f6:40:59:fd:f4:4d:54:6f:2c:
                    c2:98:27:52:5b:84:9e:ef:bf:69:0f:59:8d:17:29:
                    9e:25:a6:b4:0a:d8:eb:5a:55:a4:c8:60:5c:30:d1:
                    0a:d7:6f:c1:7c:26:cc:db:18:95:15:4b:a1:01:a1:
                    fb:be:ac:3f:6f:6c:56:4f:ed:41:1f:12:21:b9:72:
                    d1:4d:f5:26:bb:45:31:3e:ad:40:41:2b:11:7c:9f:
                    50:af:b7:24:3e:3c:1b:7f:8a:84:a8:5c:e1:ec:c6:
                    98:10:f9:fe:58:2d:b0:16:31:bf:cc:5d:0a:c7:06:
                    6c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:91:E7:43:22:2F:1A:4E:6E:08:96:79:C6:69:7F:7C:89:78:67:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cae558d5-5cb1-461b-9c33-43f664d3b3b1/75b40b6a-2ebd-3c0b-990b-9a161629f87e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cae558d5-5cb1-461b-9c33-43f664d3b3b1/cae558d5-5cb1-461b-9c33-43f664d3b3b1.crl

            X509v3 Authority Key Identifier:
                keyid:35:50:74:0B:AF:F9:63:BE:9F:E7:D2:B1:D1:16:33:BB:AD:46:52:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cae558d5-5cb1-461b-9c33-43f664d3b3b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.142.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:8d:f1:95:3a:45:d0:63:a5:c6:30:44:13:8f:dd:5f:a0:6b:
         e0:80:7d:df:61:db:02:72:74:de:36:8a:2b:f2:03:80:56:1f:
         15:35:1e:47:a9:2c:cd:5f:2f:35:87:de:d2:6d:8c:6e:90:21:
         4a:cd:2f:34:c7:74:61:0e:fe:96:5b:58:8c:9c:70:69:0d:f9:
         b9:db:24:ae:1f:3e:80:94:44:0d:fb:d1:ee:72:6d:ce:70:51:
         43:d8:54:86:75:5c:b0:76:48:71:22:2b:ff:c7:e4:b9:ed:7e:
         20:9e:b4:ca:ed:55:5d:d9:d8:df:a8:50:cd:4b:53:36:b3:76:
         04:cc:91:ae:38:e6:83:d6:a6:1d:b9:8d:ba:ff:b2:82:9d:1e:
         2c:01:e5:c1:f5:ef:fa:52:ea:b9:62:c6:46:60:62:1b:a1:24:
         fd:de:ec:9c:c6:80:af:12:1c:e3:3b:27:76:0e:31:26:57:ed:
         5a:5e:35:34:a3:90:c1:a7:cb:ee:49:9f:4f:10:1a:7e:27:aa:
         a2:1f:d6:13:b8:ee:e0:fa:16:bf:c2:91:38:fb:cc:22:2b:04:
         81:c8:88:eb:c7:50:37:07:86:71:bf:3f:f3:66:a6:c6:92:44:
         e8:1b:bb:ee:83:aa:87:cc:96:80:0b:0f:60:ea:13:81:18:0f:
         fe:39:cc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:30:56 2025 by rpki-client