Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c09282c-79dd-3c27-abea-ab86fc6ccbf4.roa
File:                     5c09282c-79dd-3c27-abea-ab86fc6ccbf4.roa (raw, json)
Hash identifier:          dVCykjPcWU80tEFxQHoXLr2hKobGX+YgHsdcIGe0+2E=
Subject key identifier:   40:24:6C:2E:7F:B3:DA:BA:B8:B2:F6:33:30:59:F4:DC:00:CC:AC:E1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2496FA86D3BD615467212B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c09282c-79dd-3c27-abea-ab86fc6ccbf4.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.219.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:fa:86:d3:bd:61:54:67:21:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=93bbdb6d-dd41-41eb-939c-d7ff18820efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dc:6e:a3:9b:31:64:57:5f:bd:77:17:bd:67:
                    59:b9:6a:17:e8:b7:3e:1b:fb:64:57:96:d9:72:1b:
                    e3:2a:59:f5:dd:e1:db:44:e5:fc:a6:07:a1:4d:2c:
                    b6:d8:86:85:cb:5b:b3:a0:76:41:b9:89:03:67:9f:
                    9c:c5:bf:77:ca:c4:e6:bd:df:a0:89:c8:52:eb:aa:
                    a4:f1:5f:86:75:95:40:67:9c:e2:d5:b2:30:2e:44:
                    94:d5:10:63:90:4e:f6:4d:e8:d8:64:a7:3f:09:f5:
                    ff:60:01:0d:14:57:a0:ff:5a:1c:eb:7d:6e:b3:b7:
                    b6:94:97:06:4e:2a:4a:79:a6:82:6a:f2:ff:19:5a:
                    be:57:0b:5f:76:b3:cb:e1:2d:70:cc:0d:5d:1c:27:
                    10:57:40:dc:86:33:d5:5c:95:73:a4:39:1b:e8:64:
                    dd:24:4e:54:b4:87:df:45:94:b9:d7:dd:85:6b:ae:
                    2b:6e:68:f1:49:21:1c:d3:a0:9e:61:d3:da:11:74:
                    eb:e8:71:fe:c1:fc:f1:a4:15:a6:8d:c4:d1:82:d6:
                    f6:db:dc:97:cf:1f:79:c3:c5:93:92:d1:fe:f3:77:
                    97:4f:cd:ac:8e:09:48:31:ed:53:f1:58:e6:be:09:
                    79:ad:a8:c8:f1:dd:3f:f6:cf:f6:1a:8e:0e:ff:07:
                    91:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:24:6C:2E:7F:B3:DA:BA:B8:B2:F6:33:30:59:F4:DC:00:CC:AC:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c09282c-79dd-3c27-abea-ab86fc6ccbf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.219.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:db:73:ab:b2:d0:ea:7d:78:e0:43:d4:5a:ea:d9:f2:9d:7b:
         c4:29:7e:15:b0:ec:89:12:3b:53:95:2c:19:61:3d:8c:eb:ca:
         70:aa:f5:57:e8:d0:2f:13:2f:76:e6:89:dc:a7:f0:ee:39:55:
         7d:9e:e7:d9:92:8e:40:2d:57:d2:0c:f1:a1:98:94:43:c5:80:
         5d:97:a5:a3:69:5b:92:47:f4:93:d1:ea:1a:ca:f0:96:44:a5:
         36:47:b1:3c:35:f5:f2:d2:b4:27:7d:fb:63:6a:27:36:72:52:
         ed:61:7d:f5:19:b0:73:b3:32:4a:f4:98:c9:e4:b8:d0:d1:94:
         56:1a:c8:66:d0:e8:9a:81:72:69:36:fa:61:00:a4:bd:9f:0e:
         ab:a9:6d:2a:d2:ed:c8:60:d7:dc:ad:c6:be:65:64:53:c3:5d:
         a3:40:43:af:07:01:7b:2c:25:b8:24:ed:bb:f8:56:20:1e:88:
         00:39:4e:7b:65:01:ff:39:23:0e:c6:0b:c4:72:8d:8e:9b:4e:
         98:db:6c:fa:90:48:bc:57:70:f6:be:72:42:79:a4:e5:cc:ce:
         92:aa:24:41:fb:1a:34:c8:78:3f:75:5f:c5:c5:c6:ca:ec:8c:
         e5:72:2f:52:89:ad:46:19:65:c1:25:c0:89:0b:6c:c5:34:9d:
         6d:e3:75:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:08:01 2025 by rpki-client