Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/75a2bee8-36d0-354d-8707-2b29ff67359a.roa
File:                     75a2bee8-36d0-354d-8707-2b29ff67359a.roa (raw, json)
Hash identifier:          oawNy/lJTLn87kWfSZWBsnj3KqtwLcIEeELjKw6OoWI=
Subject key identifier:   C1:D5:FB:90:2B:1D:DF:BA:46:97:AF:CD:1B:B7:7F:15:0B:7B:01:3A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2496F19FD43E90EE02DD0640
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/75a2bee8-36d0-354d-8707-2b29ff67359a.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.196.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:f1:9f:d4:3e:90:ee:02:dd:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=9ba82657-afba-4a70-8516-eb757200d6bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ac:74:66:2e:a4:74:0c:a1:f1:31:51:0a:93:
                    3a:78:cf:7b:ca:88:7a:2c:3b:bb:bb:89:f1:4e:02:
                    d8:06:f4:49:9c:df:06:76:13:3e:97:c5:47:01:80:
                    13:22:7a:8b:16:b5:13:6e:94:a8:a2:d0:d4:1e:88:
                    ed:bc:12:73:df:a5:7c:57:bb:b3:bd:04:b3:6c:a9:
                    ae:fd:f6:fb:95:64:54:76:ca:46:09:63:4e:40:72:
                    b7:75:41:dd:19:47:37:5e:14:91:77:f3:e1:ed:98:
                    76:52:de:c3:8d:2c:17:64:19:00:50:16:26:7c:77:
                    e3:b3:bf:10:3a:79:c8:c0:89:4a:26:fd:e8:90:51:
                    3c:f2:3c:1d:85:a9:1c:bc:cf:4e:27:ef:03:28:0a:
                    7d:66:74:55:5d:31:11:5d:56:c6:3e:16:39:88:85:
                    fa:a7:99:e1:4e:a2:84:a7:45:85:e3:5c:c9:9f:4f:
                    31:de:a6:51:5c:3a:1d:ca:f4:18:74:04:7a:95:2d:
                    30:c3:c9:99:92:fe:38:b4:85:ee:9e:26:ba:ee:17:
                    b4:cb:d9:36:3b:2d:0f:84:12:22:4b:ee:1c:1e:fc:
                    cf:8c:b7:c4:4e:23:fa:6d:21:95:5a:12:83:dc:10:
                    f6:75:6c:9b:aa:d6:63:ec:c6:f3:06:8f:f5:80:1b:
                    7c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D5:FB:90:2B:1D:DF:BA:46:97:AF:CD:1B:B7:7F:15:0B:7B:01:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/75a2bee8-36d0-354d-8707-2b29ff67359a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.196.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:fd:52:3d:66:99:b9:49:ba:01:61:7d:53:82:4e:22:ae:37:
         ad:61:cb:7b:c3:d3:0d:6d:76:51:ea:d1:8e:24:6e:14:7c:48:
         29:04:6f:44:90:fa:08:de:b2:95:28:74:9c:32:82:d2:63:44:
         64:ef:df:45:9a:ab:ae:57:e7:16:20:4f:6d:89:b1:02:f9:2a:
         7d:0c:86:49:fe:38:ee:da:72:f1:7f:e2:12:41:26:61:51:bf:
         b0:02:84:51:a7:a2:cd:ad:eb:4b:53:96:b5:c5:b1:c4:0a:57:
         c7:b9:da:d5:4e:aa:85:fd:73:cd:36:27:93:78:d7:ed:3a:2d:
         3e:43:51:66:53:0a:2b:b8:19:ca:a4:fe:1d:3d:d1:e6:88:b0:
         c0:7d:44:78:e9:c6:f1:9f:d8:44:12:30:30:16:1a:af:91:bf:
         ff:cc:4b:63:05:c4:3f:b4:ff:96:ea:e0:79:4e:5c:c4:c1:da:
         f5:e3:18:e8:e8:2e:aa:9c:23:bb:8e:6e:d7:77:20:35:6d:30:
         4c:30:e5:7d:52:ef:45:98:f5:a4:88:cb:4c:89:f4:70:fa:10:
         ff:47:91:85:0c:43:e7:21:7e:eb:f0:1c:62:5c:d9:fb:05:ac:
         26:aa:21:59:13:1f:d8:d9:cb:63:83:12:fc:18:01:f1:21:e7:
         fc:3a:31:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:04:21 2025 by rpki-client