Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/53fc6b2e-8cad-3e89-9821-e01f78292cfd.roa
File:                     53fc6b2e-8cad-3e89-9821-e01f78292cfd.roa (raw, json)
Hash identifier:          wJ1Q0SEl70hlZ1v58XmylLW9UHPrZOKiMi/MiUeuqZs=
Subject key identifier:   EA:29:8D:BA:18:58:0E:61:C7:75:65:8F:2B:3D:86:21:E6:E5:6D:54
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2496DF6ADBC2A58D2F6A4100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/53fc6b2e-8cad-3e89-9821-e01f78292cfd.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.225.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:df:6a:db:c2:a5:8d:2f:6a:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=14b930e6-4acd-449c-acd7-cad9f47b6d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3f:a4:4a:1c:df:5b:64:19:35:a7:76:2e:00:
                    78:d9:97:95:de:46:7d:ea:3d:ef:7a:46:6d:35:14:
                    82:e8:33:cf:9d:62:de:5a:10:6f:bc:57:ae:f1:8c:
                    8b:6c:2c:3e:b4:7f:47:d7:06:6a:37:bd:64:0b:0e:
                    2b:cb:94:9e:52:9d:23:06:f4:98:5a:e3:65:d4:3f:
                    99:e5:e1:a0:32:0b:ba:24:1c:c1:e8:d7:0b:ff:68:
                    fe:ea:bf:c6:a6:44:bc:b4:9d:d8:85:d2:eb:ad:ed:
                    a4:02:52:83:16:51:6d:f8:ba:0d:a2:b4:d5:70:56:
                    1e:11:ed:93:72:56:42:f4:ad:99:6e:25:ad:50:1e:
                    ae:90:db:5b:9b:ca:5f:74:07:98:77:b1:c9:5d:0c:
                    c6:ce:50:1e:ac:ae:e2:15:57:ff:07:19:3f:9a:35:
                    bf:a5:bb:19:68:f3:fd:9e:60:5e:c4:83:b6:64:60:
                    66:90:91:17:d0:77:ea:a7:3b:26:c3:74:ca:a9:5c:
                    d5:aa:46:5b:80:d6:cd:a8:9a:a7:4d:e0:f4:c6:07:
                    3f:55:f7:b8:61:69:9a:a4:e4:24:8e:f6:27:44:f8:
                    b8:19:56:95:75:8f:bc:34:87:71:3f:05:13:56:1f:
                    fb:42:6d:ca:32:0f:b6:98:de:e0:5b:23:0b:51:98:
                    2c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:29:8D:BA:18:58:0E:61:C7:75:65:8F:2B:3D:86:21:E6:E5:6D:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/53fc6b2e-8cad-3e89-9821-e01f78292cfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.225.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:5a:d9:a8:7c:8b:8a:c4:d2:4e:d6:5e:53:b9:d9:42:16:b7:
         1f:df:e3:f3:d6:08:e1:89:75:a2:af:2f:79:f3:46:72:44:e2:
         74:a3:eb:47:7f:43:c6:c1:0f:25:b6:66:e8:f1:0f:53:94:84:
         48:c1:49:23:d9:a5:7f:27:42:78:c3:ee:4c:af:44:36:a3:8c:
         bd:4d:34:d8:cf:e3:f7:7d:58:49:ba:52:a4:c3:93:e7:af:c4:
         36:ca:3f:18:ee:06:7f:ac:2b:97:c0:88:f5:48:28:98:8f:8f:
         f8:e7:24:76:19:4f:d8:33:83:df:7d:2f:74:78:88:84:ba:43:
         5e:9f:b9:91:7c:e4:fa:41:b3:9f:04:4f:44:80:aa:65:19:d8:
         73:f9:8e:b0:fd:1e:47:2d:14:58:7b:19:09:a4:06:8d:b8:b4:
         ed:f8:52:67:1d:ca:47:a6:9d:2c:c6:e2:e7:77:e9:f9:16:b3:
         b6:e7:0a:d1:53:29:48:df:19:e9:36:fa:ec:b5:13:1b:c8:47:
         04:1a:c0:2d:85:0d:5a:0d:00:05:74:b3:06:c3:38:18:d8:d7:
         75:f7:a1:a2:09:0e:d7:80:fd:f7:3c:fb:cb:9a:0d:40:57:56:
         f9:b5:ba:ff:c1:71:42:e5:10:53:28:38:d2:f1:d5:c9:76:e3:
         6b:f6:31:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:54:06 2025 by rpki-client