Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7f418109-56e8-36f2-bd16-6a8f22da6670.roa
File:                     7f418109-56e8-36f2-bd16-6a8f22da6670.roa (raw, json)
Hash identifier:          uCppap1ajAr2x8pOku6gcZDu47+hv1vGT9IB5iHumIc=
Subject key identifier:   FB:16:50:8F:39:36:D8:2A:08:D7:11:9B:6F:6C:0B:F7:F1:CA:FB:03
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B249700A1B60561EA968A7300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7f418109-56e8-36f2-bd16-6a8f22da6670.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.245.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:97:00:a1:b6:05:61:ea:96:8a:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=1ca3fb7d-bf85-486f-acd8-222440b1341b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a3:db:aa:f4:10:e4:07:cc:d0:c0:92:e2:c3:
                    18:ae:e9:bc:d4:47:30:77:ab:97:e5:dc:3e:06:eb:
                    93:e6:ef:2f:73:4a:e3:56:41:64:7b:6a:bc:7b:2c:
                    3e:08:d3:ce:3f:84:23:89:46:6c:97:37:dd:0d:99:
                    8f:04:5b:e9:d9:29:41:c9:f4:83:60:04:55:ee:67:
                    bd:31:d2:5a:cd:52:fc:72:fd:a1:a8:94:70:3e:7e:
                    d7:41:f5:ea:90:c1:26:4b:92:75:fb:33:f0:cb:65:
                    52:4f:97:a4:fb:45:24:90:89:4d:0a:5f:b3:ac:ce:
                    f8:df:17:ff:2b:bb:24:e7:a2:05:66:18:84:4e:51:
                    85:f5:eb:00:ea:0f:69:aa:e4:3c:c6:42:84:ef:8a:
                    22:f7:e1:1c:9a:16:52:3d:43:1e:2d:7b:d0:cf:32:
                    c2:7b:0a:07:d7:07:cb:47:f5:33:68:1a:72:b8:2f:
                    7d:80:e2:52:52:14:55:da:d1:0a:fd:c2:fe:43:ab:
                    8a:ec:b4:3d:53:25:ee:16:cc:d1:03:0f:a6:46:c2:
                    f4:8f:6d:03:e4:f1:bb:a5:ea:f9:11:ca:17:02:d6:
                    0d:59:7b:c2:c0:cc:60:7d:66:be:c0:69:2d:ec:05:
                    1a:31:06:db:ae:bf:bb:1b:0b:54:3c:50:07:98:be:
                    5d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:16:50:8F:39:36:D8:2A:08:D7:11:9B:6F:6C:0B:F7:F1:CA:FB:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7f418109-56e8-36f2-bd16-6a8f22da6670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.245.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:7d:89:3e:51:d7:3c:48:d2:e5:3b:f2:84:93:47:b5:12:7d:
         6d:e8:ba:0d:70:35:9f:39:a1:2e:cb:a1:e0:87:ff:de:7c:12:
         c4:fd:51:1e:0b:99:05:5a:af:c9:12:d9:02:c7:2e:31:cd:8f:
         99:ff:24:5a:7b:57:84:c4:d8:a2:57:07:7e:29:1b:9f:bd:1e:
         2e:f4:ad:c0:ee:14:b8:b7:ac:41:61:b8:66:37:2c:b8:a4:42:
         66:21:32:df:cf:ce:5f:0f:02:a5:46:79:d1:d7:af:32:a6:37:
         12:ad:cf:2e:05:fa:ac:67:af:ee:95:93:c6:d3:a6:3c:cd:5c:
         6c:1c:f5:56:21:3c:80:5f:17:9a:58:a8:d9:db:82:5a:7c:ce:
         c5:d4:59:38:37:8a:e0:5a:12:66:45:52:ac:af:ed:84:fe:ec:
         6d:a7:bf:12:5b:2f:25:f5:24:b0:1c:63:32:5c:18:69:ee:de:
         a4:3b:60:35:ae:fc:89:48:8c:76:90:1e:d9:7a:b7:62:60:05:
         97:d2:8a:f8:8f:ac:6e:65:ea:a1:bd:33:59:69:8e:c3:0c:ba:
         58:f7:80:e1:1b:e0:f6:0e:01:c1:07:68:a1:7c:d1:81:c3:5c:
         44:3a:a0:86:3f:e4:ea:7a:44:c8:60:96:ad:01:d9:0f:05:1d:
         28:85:3e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:54:06 2025 by rpki-client