Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ca52f95-d363-3a7d-a65c-7194fe6744ec.roa
File:                     3ca52f95-d363-3a7d-a65c-7194fe6744ec.roa (raw, json)
Hash identifier:          1S1CAZHqwjWeQRguO+x5D6ZehF7jaXxlfGpIham7O2E=
Subject key identifier:   3D:1A:A8:6D:24:50:3E:F5:E1:CA:D5:CB:4E:D7:2A:DB:96:94:0D:3B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2496DD464350F65CDDE03400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ca52f95-d363-3a7d-a65c-7194fe6744ec.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.194.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:dd:46:43:50:f6:5c:dd:e0:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=81aed1ce-8aed-4ad1-b538-aa6520d0eab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:09:1c:56:9f:e6:53:0e:af:12:dc:a1:e0:2a:
                    5f:a2:7b:b0:e9:2e:c2:85:03:5a:f6:d2:48:c3:ae:
                    55:de:89:54:32:02:6d:1d:b1:6a:ad:81:e1:b8:cf:
                    fb:f7:a7:37:dd:24:4b:fc:e0:30:ad:39:5f:ee:fb:
                    68:19:6b:50:6c:5d:d2:14:9b:75:22:9a:ec:66:88:
                    9d:60:18:c5:51:2e:71:f6:80:e6:b3:22:53:06:e4:
                    b3:dd:dc:c7:ec:02:c7:34:92:82:7b:be:8c:a4:5d:
                    4d:a6:32:d0:3a:9b:68:f9:7f:97:2c:28:6b:4b:b1:
                    28:a6:82:99:35:64:21:b0:3d:a4:7c:82:d5:e4:e0:
                    84:c1:6b:c0:1b:29:8e:50:62:6b:23:8d:c4:99:2c:
                    1f:1e:dc:33:36:8d:69:67:8b:70:80:36:e7:3e:1f:
                    a7:d8:09:cd:46:27:4e:48:89:79:24:8c:bc:14:51:
                    30:73:be:0a:21:40:c0:dd:c2:bf:36:90:74:2b:78:
                    5e:b2:2a:0e:bb:69:b3:81:70:c2:6e:ae:1b:3f:60:
                    6e:4b:db:8a:7b:bc:a2:c6:dd:97:b9:28:9d:46:54:
                    2e:c7:38:6f:43:9f:2d:4f:08:c9:78:9e:6c:01:6d:
                    96:f1:50:ba:3b:f4:e1:32:06:30:11:be:72:0c:6e:
                    84:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1A:A8:6D:24:50:3E:F5:E1:CA:D5:CB:4E:D7:2A:DB:96:94:0D:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ca52f95-d363-3a7d-a65c-7194fe6744ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.194.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:21:e3:57:dc:f1:3f:77:a3:92:30:b3:ea:7a:88:4e:dd:7b:
         ae:cd:53:de:53:39:7f:32:92:e3:d4:f1:08:7d:8e:58:a4:b1:
         9f:b3:18:c4:31:98:a6:69:f9:22:90:eb:18:a3:09:5f:46:fa:
         5b:81:1f:24:89:ec:a3:55:a2:de:01:00:48:01:3a:98:89:5a:
         57:b4:dd:33:4f:37:25:c7:14:c9:fc:b1:8d:ba:a4:53:3c:c0:
         8b:30:30:b4:01:ad:b1:50:4b:aa:e0:f1:5b:68:66:77:b7:40:
         be:9c:aa:9c:bb:7f:9b:36:4f:23:30:55:ba:9f:57:ed:f8:b7:
         95:1b:56:8b:3e:37:45:06:1e:72:8b:72:01:09:35:22:99:bf:
         a7:88:c6:80:d3:93:d1:8c:f4:ba:11:4f:a4:c3:5c:13:70:c3:
         46:a7:4e:98:d7:aa:47:50:61:f1:b7:74:c6:13:a2:b6:b5:61:
         9e:c3:74:f7:3b:fe:4a:6e:ea:99:06:aa:48:00:7e:a6:d5:70:
         9a:ad:de:da:a3:3e:f5:51:0a:bc:67:5f:b4:ce:2f:f5:6c:70:
         3c:e7:a4:ef:6f:3c:ac:1c:78:93:28:b3:63:b8:e3:41:be:dd:
         a0:6e:6a:c1:07:3f:45:21:64:03:6d:26:a0:4c:c5:0d:f4:7e:
         99:d1:56:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:49:24 2025 by rpki-client