Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3933ab0c-bf83-3f8d-8cb2-8a533e472eb3.roa
File:                     3933ab0c-bf83-3f8d-8cb2-8a533e472eb3.roa (raw, json)
Hash identifier:          PCZ9X83kR6b3K/tJKRUnLLAQ5X5JwkU3Eg3xQp326S8=
Subject key identifier:   C8:DB:22:AF:4F:59:1F:C7:67:04:9A:47:1F:DB:CB:63:6F:05:3A:88
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2496DE1B4E18A832A4CC0500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3933ab0c-bf83-3f8d-8cb2-8a533e472eb3.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.222.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:de:1b:4e:18:a8:32:a4:cc:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=bf655d94-9b75-4389-89dd-e3dc87c60223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:47:07:98:92:66:84:d7:e2:33:39:98:0c:28:
                    d5:db:57:7c:bf:75:eb:15:93:52:68:5c:d3:4e:f0:
                    31:b3:96:7f:77:68:0f:b3:fb:98:05:58:47:ba:0e:
                    c0:46:7b:60:f2:8e:39:8e:74:a6:84:2d:67:70:37:
                    02:a8:a0:b2:52:c3:54:46:d5:6f:5a:0d:32:62:13:
                    69:68:ad:f3:91:69:59:51:18:4d:7e:73:ff:61:a9:
                    6e:bf:17:bc:75:c7:b2:b8:dd:8b:64:c0:91:55:e6:
                    bc:0c:51:a6:c4:72:46:be:dc:11:04:47:b1:0d:d1:
                    11:ed:c5:84:74:1f:db:0d:61:70:75:a8:4e:ed:c6:
                    47:99:d9:ee:be:fe:1d:ae:2c:ed:ac:27:b4:3e:a5:
                    c5:32:39:d1:20:db:c4:6f:80:09:11:08:3a:c4:8e:
                    ec:01:61:7c:46:3c:34:ff:e9:d9:44:57:a8:66:04:
                    fb:ac:c5:21:2a:bc:6f:6b:35:1d:29:0b:57:7e:3c:
                    f8:7a:de:04:df:50:a2:70:72:2f:4b:83:4b:56:dc:
                    f3:c7:b2:e0:65:88:35:04:fa:28:3e:10:6c:20:5e:
                    ac:22:e0:96:cd:52:b6:8f:63:27:fc:c0:dd:c7:47:
                    b1:82:38:9b:c1:da:26:5f:ac:3a:c0:d3:49:9a:d9:
                    27:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DB:22:AF:4F:59:1F:C7:67:04:9A:47:1F:DB:CB:63:6F:05:3A:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3933ab0c-bf83-3f8d-8cb2-8a533e472eb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.222.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:d5:30:68:61:cf:76:eb:aa:65:ab:26:7e:b6:52:c4:57:2f:
         7c:7e:1b:48:a8:9a:e4:68:09:f9:d9:e7:2e:86:96:53:15:c9:
         55:d0:52:32:06:54:1e:6c:9b:01:be:ac:b4:75:94:69:29:b5:
         99:bf:4e:1d:9c:cf:78:e4:e4:23:24:96:d7:d7:b6:f8:f4:6a:
         6a:4d:a0:f2:18:23:78:a8:02:72:95:ff:0b:92:05:6e:59:c2:
         fd:52:c8:b8:ae:82:2b:55:b3:79:6b:be:ae:45:17:6b:74:65:
         49:95:c2:d1:d9:d6:9e:14:ad:08:b6:9d:5f:77:a1:b6:2a:3c:
         1e:6e:f9:5e:49:b0:c6:9a:b1:a6:87:cf:f6:27:c6:db:79:53:
         ed:5a:6a:be:24:72:96:ca:1f:51:3a:19:a4:1f:95:8a:bb:0f:
         9f:fa:8c:5b:a7:18:1f:d4:c9:05:c6:50:f3:37:5d:78:65:7a:
         5e:8c:3c:eb:41:df:62:35:2b:a4:64:23:d0:6f:c0:4c:24:79:
         6b:7e:8a:2a:7d:26:76:97:af:9d:b6:a5:92:2d:f4:44:5a:df:
         cf:35:e8:0d:11:ee:a0:7f:8a:a3:23:82:9b:83:99:b5:e5:40:
         30:3f:25:8f:6e:97:be:d7:54:75:cd:b9:e7:e8:44:53:66:55:
         bd:44:3b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:58:15 2025 by rpki-client