Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/06f018d0-dcc1-3a8f-b36b-eda51597703d.roa
File:                     06f018d0-dcc1-3a8f-b36b-eda51597703d.roa (raw, json)
Hash identifier:          /D+achOkdmB/mxOhdFy5ZQBJgkf6sR0Gkmvs3w1BLdg=
Subject key identifier:   4D:5F:0B:F6:BE:4E:99:3F:31:74:95:10:41:25:8F:D6:39:52:95:0D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2496FE3B821039F2E6B35500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/06f018d0-dcc1-3a8f-b36b-eda51597703d.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.239.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:fe:3b:82:10:39:f2:e6:b3:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=85589a46-ca41-4e42-9100-1da4454679f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a6:9a:35:c2:0b:a3:c1:c3:05:93:3d:67:42:
                    db:0d:44:4a:58:a7:12:ce:d9:61:3e:25:15:9c:fd:
                    38:9a:96:0b:09:5d:d5:58:0c:7d:fa:90:2c:88:72:
                    e7:66:21:11:32:54:5d:c2:a3:7e:2a:dc:90:1d:45:
                    f5:14:bc:e1:33:49:c7:ba:b6:9c:f3:88:f4:7e:f6:
                    11:45:49:e3:13:6a:2e:5a:e5:0c:b6:24:94:d1:ed:
                    7a:23:54:60:ea:64:4e:95:e9:34:18:62:4f:9a:f9:
                    06:07:25:62:72:8a:d1:66:1d:1f:bf:7c:78:87:9c:
                    cd:0a:bd:d9:f6:1e:26:7a:62:1f:a9:02:bb:5e:53:
                    b8:ce:08:57:02:f8:46:32:df:12:f0:74:45:b3:63:
                    15:00:a3:ca:8e:08:ab:06:db:6f:85:3d:2d:01:bd:
                    33:da:30:23:60:36:25:46:30:d3:42:f4:80:6c:24:
                    22:28:fd:b9:e1:5e:4f:51:43:39:b0:a6:a2:34:0a:
                    02:93:19:9e:2b:87:fb:8a:93:ab:76:f2:a5:91:47:
                    60:81:21:b4:8c:b3:5c:29:46:32:56:06:75:4a:8e:
                    3c:21:56:3d:50:ca:d5:09:a6:e9:82:9e:b1:08:10:
                    5c:9c:e7:65:33:0f:c4:01:67:fe:98:33:08:91:60:
                    f8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5F:0B:F6:BE:4E:99:3F:31:74:95:10:41:25:8F:D6:39:52:95:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/06f018d0-dcc1-3a8f-b36b-eda51597703d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.239.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:a1:6f:45:66:10:12:5b:12:9c:ab:c1:46:e6:75:3f:86:6d:
         db:88:7b:4a:40:7a:df:57:6f:18:cf:f7:aa:7a:78:b2:55:9c:
         15:4c:48:c8:65:9f:25:39:ae:21:60:a9:4b:f0:f6:17:0f:07:
         4d:be:ea:d7:9a:bf:0f:ff:f6:6e:87:91:d9:1e:21:e8:3d:e9:
         fb:c6:d8:83:57:0d:41:c9:ef:a9:d9:24:d4:33:77:f4:6e:46:
         42:be:6a:5b:e7:0a:8c:68:2e:d9:05:50:d9:ad:7c:86:f7:6b:
         ca:4c:5d:eb:27:5d:60:2a:10:b6:d4:95:09:85:09:b1:fb:f9:
         ab:0e:18:41:f4:46:4f:67:4a:58:22:5e:38:d5:51:9c:59:b4:
         d3:aa:c6:d7:7e:e0:b7:61:61:2c:20:00:5e:c5:ca:33:e1:fb:
         9c:9c:f9:18:16:35:07:a7:63:18:47:73:9a:e1:67:84:9c:53:
         18:4b:79:fb:4e:f9:ca:1a:96:05:91:c6:58:d3:dc:b2:08:e2:
         f5:55:bc:a1:c3:07:36:6c:0c:54:64:56:27:a3:5f:36:d1:a4:
         84:14:fb:bc:ee:7e:95:44:87:e5:1b:64:99:99:3d:07:ad:7e:
         ed:89:12:a1:39:94:00:f7:66:d9:46:26:c3:78:da:80:3c:53:
         2a:88:75:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:49:25 2025 by rpki-client