Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c4c50d56-0b87-3d48-8326-a250ef9df4fa.roa
File:                     c4c50d56-0b87-3d48-8326-a250ef9df4fa.roa (raw, json)
Hash identifier:          J7VuQjdWFPwr/3ibZ7Xf51rY2eJ6UYFt516gbrJGrZQ=
Subject key identifier:   BB:7B:B9:DB:A1:93:B6:66:27:A4:6E:73:B2:FF:EF:78:CA:F6:D3:38
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584B5DD1DAA296C39E0B943D3D28
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c4c50d56-0b87-3d48-8326-a250ef9df4fa.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     21859
IP address blocks:        75.127.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:da:a2:96:c3:9e:0b:94:3d:3d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=4db2b96d-2409-46e6-a6c3-9004cbc2eab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6f:78:72:40:8c:1b:56:4c:ac:2d:f5:f7:40:
                    77:5f:c8:c2:bd:e6:69:6e:1f:6c:ae:0a:87:2c:2b:
                    ed:fe:fe:78:e6:e8:86:0d:a9:e9:62:2b:37:88:94:
                    7b:d9:02:10:7c:7a:9a:9b:a8:43:6d:04:8c:86:fc:
                    a4:df:f3:49:f5:54:74:32:b3:4e:02:91:90:0f:ef:
                    8c:b2:a9:61:91:6e:47:9a:11:68:76:6d:67:70:ae:
                    c5:fc:2f:a1:30:44:7b:18:b9:27:71:f1:14:5c:1b:
                    0b:51:c6:24:67:df:2e:54:49:42:1d:52:f6:6f:d9:
                    41:ce:d9:16:d4:cb:73:22:7f:6d:d1:2d:e9:a6:a8:
                    29:85:25:a1:87:23:cf:bb:70:ce:b6:bc:64:64:f0:
                    90:7b:e7:ca:3a:66:e6:f3:4f:a9:84:83:cc:2b:b2:
                    34:a5:8b:6a:70:20:7d:89:ac:0a:06:61:64:ff:da:
                    2c:a3:6d:94:e8:82:ae:23:5b:0b:9d:6a:a2:25:dd:
                    70:4e:52:d7:00:bb:82:d4:63:dc:f9:45:0c:d0:31:
                    0c:f4:b6:06:2a:36:bd:50:ca:57:3a:cc:b3:21:b3:
                    d7:e3:f9:3a:c6:3c:7b:00:47:5e:7f:81:f5:e3:eb:
                    4c:cd:f3:8d:24:c8:90:8a:c9:9b:83:99:fe:a2:1f:
                    d5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7B:B9:DB:A1:93:B6:66:27:A4:6E:73:B2:FF:EF:78:CA:F6:D3:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c4c50d56-0b87-3d48-8326-a250ef9df4fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.127.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:11:b0:16:ad:35:e3:ae:c4:5e:fd:65:7e:50:f4:89:98:48:
         9b:a9:2f:74:b4:37:9f:7d:1f:d8:0d:3d:cd:53:3a:01:f0:fc:
         96:8b:2d:d2:49:f3:5b:1b:4a:77:ed:84:6d:e1:3f:39:a7:89:
         87:0f:51:0f:1e:1f:56:6c:de:f8:c6:43:a0:cb:cd:81:83:a7:
         10:11:fa:49:52:b8:d6:e9:b8:40:62:e8:52:26:9d:36:3c:49:
         01:10:d7:e5:bb:fc:a5:76:88:51:c7:c3:3b:c5:ca:49:8a:6b:
         c2:4b:2b:e4:42:24:a9:63:97:99:f9:5a:10:51:77:8c:98:a1:
         20:d8:37:02:a4:f9:f1:d6:c8:80:fb:fe:33:18:57:a0:1f:cb:
         81:e3:4f:2c:73:80:f0:7a:7d:d6:6c:5d:94:92:d1:a2:e3:0b:
         52:5b:f9:fc:1e:a6:91:59:e6:84:7f:e9:54:1c:a4:62:a3:7c:
         0c:df:79:50:68:a5:f3:0c:4f:74:30:3b:b5:28:96:f8:c1:32:
         dc:4a:6b:76:1d:47:bb:26:a7:2a:ef:4f:e9:17:bd:cd:08:97:
         16:35:c6:cd:36:39:c2:79:1f:d2:e4:77:1b:72:c2:3c:38:2d:
         69:3d:18:c0:27:41:b0:ba:a6:7e:81:40:f8:ba:95:d6:fa:9e:
         0b:d6:04:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 14:57:07 2025 by rpki-client