Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f425164-b69b-31ba-9426-0735820c6e0e.roa
File:                     5f425164-b69b-31ba-9426-0735820c6e0e.roa (raw, json)
Hash identifier:          Ztkzw8Gsv68MjPIxwmVoGyHpjiTpgVTWvOGFwGtyQVc=
Subject key identifier:   8D:BB:EC:B4:1C:FE:62:3B:F0:9B:27:18:6A:D9:4E:DA:1D:0C:C2:12
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2496F8F86072461A23183640
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f425164-b69b-31ba-9426-0735820c6e0e.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.213.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:f8:f8:60:72:46:1a:23:18:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=18f3147c-23dc-4fb4-941d-007bb5f69d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dc:4e:63:91:b4:de:63:6d:1b:08:55:03:81:
                    8f:97:ef:1e:7e:02:cd:98:7d:8e:b4:4c:9d:81:d0:
                    51:37:0e:e8:4f:ad:5f:26:4d:6a:b0:72:3f:50:46:
                    a9:6c:0c:00:93:e1:db:a1:87:25:56:16:03:bf:93:
                    f4:3d:e3:84:f9:48:28:8b:c8:b6:9f:14:c2:04:83:
                    d3:41:c1:63:be:82:fc:cf:d7:7d:07:4f:9b:9c:cb:
                    ae:2b:0a:d1:93:5c:55:c4:f7:59:59:a3:e5:20:c6:
                    25:8d:01:4f:73:c0:33:f7:81:3f:fb:72:77:25:df:
                    8d:7c:53:d9:37:48:0b:ef:75:2b:92:09:27:33:b3:
                    9c:2f:eb:a2:97:86:c8:68:85:0b:3c:f8:4e:54:ee:
                    26:72:c0:f4:4d:e8:e2:0e:38:f5:0e:c9:3f:93:e3:
                    44:23:2b:55:6b:ba:f6:53:f4:eb:44:15:b0:e3:37:
                    da:fb:fd:f7:17:28:4a:e4:44:3b:fb:38:fe:43:dd:
                    ac:25:5b:16:05:32:c2:16:b0:fc:b0:14:27:53:c5:
                    3b:1d:0c:3f:c8:f7:99:2f:61:0b:72:b0:30:c9:1c:
                    a5:68:4e:60:a6:a3:ae:a6:13:24:ac:6b:d5:b2:56:
                    92:15:4e:1c:4f:dc:c0:db:33:5b:e0:6a:92:bd:f7:
                    ec:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:BB:EC:B4:1C:FE:62:3B:F0:9B:27:18:6A:D9:4E:DA:1D:0C:C2:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f425164-b69b-31ba-9426-0735820c6e0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.213.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:d3:81:cf:63:cb:c0:ce:6b:14:fa:93:1d:6e:51:45:f8:46:
         b2:8c:c1:d0:26:db:aa:b5:87:0e:2a:c1:c0:eb:b3:ed:52:32:
         b8:ff:27:ac:f3:c8:01:e4:19:2a:1a:17:a4:0f:e8:68:e0:47:
         ea:ea:a7:9b:6f:8f:d3:43:9a:2b:40:85:cf:d4:99:59:e2:2b:
         50:9a:24:df:69:81:04:21:be:d4:08:12:fe:79:50:55:73:75:
         da:7a:2c:f0:a9:76:b7:0d:0f:61:9e:da:1c:eb:68:a5:1e:e5:
         07:e1:81:19:f1:0d:8e:54:0e:2e:8a:9f:fc:74:71:e0:ee:d9:
         4c:90:de:71:b0:0a:dd:07:c9:e5:87:65:9e:0b:c8:64:fb:73:
         8b:a5:0b:98:76:65:33:2a:98:de:f2:8e:1e:65:7e:6f:b4:ee:
         65:e2:d6:71:b0:99:e9:0f:02:28:7a:d6:64:5e:02:8c:6b:ac:
         a3:73:06:c3:73:ac:26:6b:13:0f:9f:8c:b7:9e:75:09:b4:4a:
         06:af:c6:5a:05:13:7a:60:07:32:57:af:62:69:ed:9e:06:9f:
         17:cd:cf:5c:7b:64:bb:67:e5:5b:02:19:70:ba:ab:f3:ef:4a:
         eb:11:eb:3a:8a:81:e1:7d:85:c4:a4:87:bf:2f:4f:cc:61:74:
         f4:7f:ff:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:04:17 2025 by rpki-client