Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f481ea6-1caa-3555-ae12-be19c9eb3a9f.roa
File:                     0f481ea6-1caa-3555-ae12-be19c9eb3a9f.roa (raw, json)
Hash identifier:          GP0LQv8Vw+grDag2gud6zHB9rOnkoyjbZxEs86n/wI0=
Subject key identifier:   E3:4E:88:91:7B:63:51:6E:45:52:CA:07:80:37:4E:3C:83:BD:05:F3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2496FF89FD01CDF1BC7FE900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f481ea6-1caa-3555-ae12-be19c9eb3a9f.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.243.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:ff:89:fd:01:cd:f1:bc:7f:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=48bce2bd-5081-4f1f-803d-e6bee23df67d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1f:ab:3f:4f:8a:aa:40:89:f4:44:b1:37:09:
                    08:17:6e:33:c9:b1:cc:2d:ad:0c:2e:3b:76:d4:a8:
                    a9:ff:65:84:e0:82:2b:d5:b2:09:2d:36:8f:f6:e0:
                    5e:17:aa:1f:21:cb:24:38:73:09:3e:d2:99:1e:63:
                    ed:e2:bb:db:1c:1e:b3:e9:6f:9e:2d:da:81:55:e5:
                    64:d9:7d:f0:1f:58:69:f5:2a:92:20:29:a8:2f:16:
                    72:b0:0a:7c:40:8f:b4:3e:4f:27:5f:d6:b0:ad:50:
                    85:20:7b:db:27:bd:d5:26:33:1f:3d:df:ff:81:74:
                    c9:66:d3:3a:bb:48:1c:c7:5f:a6:97:7c:20:0c:54:
                    f2:43:50:f0:a5:95:81:0a:d6:ff:c4:ef:d0:1b:82:
                    60:82:f8:f4:36:68:45:bb:9d:f7:f9:f6:eb:d0:3c:
                    15:4b:7f:82:00:98:65:12:b2:48:e0:45:98:b9:1e:
                    90:9b:58:d6:b3:6e:60:6e:99:9f:e7:fa:a9:1a:e7:
                    ad:8a:41:34:d1:8b:e4:75:ce:0f:5c:cb:42:93:7d:
                    cc:ed:bb:fc:b7:fd:17:f0:07:d7:d9:1f:b8:1f:9f:
                    cb:33:67:9a:a1:c4:5b:8d:d7:e6:07:9f:53:d2:32:
                    eb:73:83:51:e2:a7:24:f5:83:91:bf:e1:c4:67:f8:
                    77:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4E:88:91:7B:63:51:6E:45:52:CA:07:80:37:4E:3C:83:BD:05:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f481ea6-1caa-3555-ae12-be19c9eb3a9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.243.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:49:07:b6:00:ad:de:a5:e8:86:d6:26:b4:ab:dd:d6:a3:04:
         2a:44:aa:8a:24:cb:63:c0:47:a9:21:71:2d:45:d3:b5:12:47:
         73:85:5a:6e:17:c5:28:94:5f:54:50:e0:84:70:87:b6:6e:8a:
         b9:22:76:03:01:50:57:5a:9c:ac:e1:8e:68:9b:da:aa:93:bf:
         55:a0:c0:61:e5:b1:c3:80:21:ba:b7:48:bb:70:54:8c:7e:f5:
         f3:39:2c:d8:8d:96:0e:ee:e0:69:0e:07:8c:81:48:2c:2e:6d:
         c8:09:eb:85:42:d2:84:35:e4:1a:01:87:27:73:c3:fe:b1:cc:
         19:bd:f3:4a:da:71:3d:1d:70:21:6d:de:b3:f7:22:5a:0c:a6:
         aa:b5:f0:f6:57:50:9d:8a:bb:25:ac:67:48:df:8d:dc:48:b0:
         c5:bd:d8:0d:b0:2e:87:0b:1e:ee:e8:e7:9e:d9:5f:ad:f6:76:
         b3:78:52:16:ae:59:57:b9:15:0b:0d:f7:a2:33:1c:fb:63:97:
         58:d5:5e:52:90:cc:32:d8:6f:d9:ff:03:84:71:a5:7e:01:8a:
         8e:90:73:4f:59:84:ff:a9:a4:5a:f2:cb:fe:58:12:28:c5:e4:
         42:1a:3a:4c:47:cb:f0:6a:e2:9f:c3:73:2d:51:ee:e5:b6:bd:
         ea:a8:66:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:58:25 2025 by rpki-client