Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/20a24b34-0a94-3bbe-ba97-e5359e3eb61a.roa
File:                     20a24b34-0a94-3bbe-ba97-e5359e3eb61a.roa (raw, json)
Hash identifier:          tFvbgfi8UZ1llLVDsXFJV5N8fsZDZ9XnCC+2xib5uA0=
Subject key identifier:   43:F1:7C:31:B3:46:CE:42:C3:EE:2A:31:37:7D:9F:C8:35:E5:B8:F2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B249701FFE3084165A4CE0280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/20a24b34-0a94-3bbe-ba97-e5359e3eb61a.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.248.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:97:01:ff:e3:08:41:65:a4:ce:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=9c199091-6b37-4686-80ff-019e01a9c090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:db:bb:36:0c:4f:d5:79:26:47:45:07:6d:cb:
                    30:08:0c:54:e8:48:25:1c:be:43:46:7c:21:97:22:
                    39:62:8b:e1:8a:b7:2c:56:14:4a:52:44:44:ed:12:
                    6b:2d:68:cc:d6:16:8a:d5:92:19:18:71:4b:37:1b:
                    df:c3:23:12:7b:76:45:cb:74:70:21:18:d2:fe:11:
                    a9:d9:9c:bd:e8:d5:75:38:ba:73:b4:d7:cf:34:d8:
                    fc:d2:9f:bd:87:61:bf:a0:f0:15:82:f4:df:e9:dc:
                    97:64:3b:75:56:70:0e:90:1d:4e:30:ba:8a:f9:95:
                    e8:ab:6e:fb:91:f4:e6:c1:ef:24:a6:a0:17:0c:ff:
                    58:80:ec:a9:83:29:7b:94:f2:2b:39:e1:98:55:c8:
                    5e:74:7a:59:76:57:74:39:0d:8f:ba:d6:77:d6:c6:
                    24:3b:51:22:bb:f8:fa:2a:9b:b1:cb:84:08:e0:8c:
                    69:67:c2:8d:e6:55:f0:3e:e6:51:3e:d4:51:c1:a6:
                    e4:7c:15:1d:4b:cd:61:fb:f5:59:df:66:2b:d4:0e:
                    50:33:fb:21:78:1b:7a:35:26:6c:af:82:8d:6c:57:
                    fd:29:c3:b8:31:56:e9:92:61:19:7f:13:8d:c0:00:
                    6c:44:13:07:6e:8a:f1:e6:80:3e:76:63:eb:b1:d0:
                    93:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F1:7C:31:B3:46:CE:42:C3:EE:2A:31:37:7D:9F:C8:35:E5:B8:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/20a24b34-0a94-3bbe-ba97-e5359e3eb61a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.248.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:41:b8:63:35:6d:9d:38:bb:65:06:c8:38:65:d7:28:3d:5e:
         a7:7f:14:95:4c:2e:3d:07:d9:7a:08:4b:d9:81:f0:94:65:96:
         c2:81:c7:55:8f:56:e5:06:4c:2b:15:dd:21:4a:4b:a9:9b:4c:
         df:fc:bd:e8:62:33:a6:c9:dc:a6:c0:e8:41:65:7c:3c:78:f5:
         5a:df:42:4f:00:c7:cf:be:87:bf:34:72:af:f9:5b:a6:96:b8:
         a2:c6:a8:2f:1f:72:3b:bb:6a:cd:30:4a:b8:7b:46:46:3a:90:
         31:30:5a:73:82:4b:20:39:0a:af:1a:91:5a:a0:a3:b3:3c:e1:
         f3:5e:5a:27:3a:8e:bc:8d:e4:c6:cd:0f:98:1d:81:d4:1a:6b:
         a4:d5:eb:27:8c:7a:2c:e7:59:cb:6e:5d:25:20:47:aa:31:ca:
         64:cc:70:86:dc:f0:c3:0c:cf:c4:df:b8:db:9b:28:41:47:cd:
         e6:02:8f:d8:8a:89:1c:1e:ed:94:c2:f2:59:6b:59:19:d5:17:
         0e:17:e8:e6:38:e9:f9:6d:3a:0d:dd:ba:00:ff:3e:c6:aa:94:
         4e:65:c5:d1:2e:37:0a:7a:d7:25:79:7c:22:94:98:af:e5:95:
         57:6b:42:7c:98:f4:08:26:23:d2:57:36:5f:e4:9c:33:73:30:
         80:a1:42:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:04:36 2025 by rpki-client