Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c0b8712-92cb-3aea-8fa9-3a51466a243d.roa
File:                     1c0b8712-92cb-3aea-8fa9-3a51466a243d.roa (raw, json)
Hash identifier:          rX3HNO/4aPZbaxh7kvRmtJLezcMmNWDH5yta2EWFlRE=
Subject key identifier:   66:FA:60:4E:C6:8F:83:06:15:DB:98:E2:87:37:AF:73:BB:B0:98:A1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2496DED288565C3A23924980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c0b8712-92cb-3aea-8fa9-3a51466a243d.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.224.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:de:d2:88:56:5c:3a:23:92:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=645419f6-38e1-44b5-919a-425a425114a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:02:af:fd:fe:9e:72:fd:16:8d:ee:92:33:a2:
                    f1:bd:7e:5d:f6:4f:20:e1:3f:a0:6c:18:95:e8:95:
                    98:95:dd:94:06:8b:94:e6:0d:96:6a:3f:16:24:e7:
                    c4:fb:ce:b0:05:20:88:28:0d:e2:0a:77:d6:b2:70:
                    2f:8a:3c:b9:85:3a:1c:42:0d:2e:9d:29:fc:b0:b4:
                    88:5e:29:7d:87:f7:e9:05:6a:ce:51:30:6c:f1:a4:
                    e7:35:09:e1:3d:93:33:0d:69:01:ca:54:3a:f4:fe:
                    b0:c5:50:58:76:cb:0e:84:89:23:1f:ab:b1:85:78:
                    32:7a:16:d1:9b:2e:27:ba:e7:a6:88:8a:e0:39:8c:
                    31:37:46:af:f8:31:23:85:5a:8c:58:4c:7d:9e:26:
                    6a:e7:c8:43:58:ae:93:f2:23:1a:d5:88:b2:f3:e2:
                    b3:ee:24:91:c3:b3:2c:34:dd:97:ad:f0:6e:ae:e2:
                    c6:a2:fd:e5:50:4b:8f:a5:6f:01:5e:be:46:2a:30:
                    fa:18:81:6e:97:e2:5a:fe:29:b3:bf:3f:fe:92:34:
                    03:d3:8d:45:37:42:4f:4d:4c:9d:b3:2d:18:9e:eb:
                    99:97:b9:13:ff:11:31:b6:a5:44:0e:30:5a:71:8b:
                    b5:ef:ed:7c:64:76:5b:1a:04:61:5e:71:87:55:a1:
                    93:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FA:60:4E:C6:8F:83:06:15:DB:98:E2:87:37:AF:73:BB:B0:98:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c0b8712-92cb-3aea-8fa9-3a51466a243d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.224.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:21:55:48:77:d2:94:40:e7:df:95:80:8d:14:31:ff:06:2f:
         3c:0e:41:a5:25:39:e8:d2:a6:e6:44:77:04:7a:80:11:18:da:
         4f:82:de:38:67:91:4f:b0:21:1c:c4:7b:cc:92:af:1a:d8:28:
         f5:7f:7a:68:8c:75:e1:b4:49:28:d4:2e:ef:cf:bc:40:23:0d:
         4a:f3:88:ea:b5:68:09:e7:76:57:5c:36:67:d8:12:90:cf:e4:
         c1:03:e0:1c:93:3e:3a:8f:1d:17:11:64:6a:74:4a:14:5c:b0:
         5d:fa:27:93:be:9b:65:c8:19:0e:29:54:1d:8b:c6:91:5e:76:
         f8:2e:7a:48:35:fd:8d:34:d9:09:4d:35:24:14:e8:a9:f9:b1:
         b3:89:e1:c6:20:c2:4c:b2:7c:4b:bd:da:22:d6:35:8b:fc:21:
         3c:c4:2e:0f:cf:87:a1:97:21:f5:59:28:fb:8f:69:e8:15:ae:
         63:d9:53:fe:98:ed:c3:ae:f6:46:5b:65:98:43:3f:3f:dc:5a:
         16:44:f0:3b:bd:d2:eb:a1:55:04:56:66:35:de:df:ba:2d:37:
         e2:6e:27:e4:27:a3:4b:38:1b:a1:c2:80:ed:84:78:82:13:b5:
         1b:ca:3d:92:64:b4:ae:0a:89:86:e0:ff:6a:e8:64:37:d8:bd:
         a1:5c:3d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:06:08 2025 by rpki-client