Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8317eff6-cde9-3a8f-a08a-7be1e2c13bf6.roa
File:                     8317eff6-cde9-3a8f-a08a-7be1e2c13bf6.roa (raw, json)
Hash identifier:          xaqm88mmYvCbvF8gLB7iaXUUMOrcm0OEDk9+K3zhCWk=
Subject key identifier:   BB:E3:CC:5C:FE:AA:91:8C:F9:53:9D:AC:07:9E:76:D8:A1:1C:2D:85
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2496DFB74B80CF3B48013280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8317eff6-cde9-3a8f-a08a-7be1e2c13bf6.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.226.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:df:b7:4b:80:cf:3b:48:01:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=bcc04b06-c2e3-4cc1-85f5-bdf18a7c846a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e9:71:93:45:e6:d2:94:82:93:73:59:e8:e0:
                    a7:55:b7:22:05:9c:f2:99:10:4d:b1:d6:9a:ad:6d:
                    0a:c8:51:72:46:2b:0b:1f:c5:e6:4f:e7:af:db:66:
                    44:57:cb:4c:72:6e:2f:53:23:70:a2:aa:5c:18:d3:
                    f5:32:0e:1b:21:a3:4a:bf:8d:35:f9:50:59:68:08:
                    6f:c4:c1:07:c8:3d:34:d5:44:af:c8:e5:09:4a:11:
                    46:27:3f:17:ff:44:7e:06:2b:90:36:1d:ca:85:bf:
                    53:f8:74:95:8c:95:cd:35:8c:16:a9:11:4b:7c:19:
                    5e:31:04:8b:ad:bf:79:c4:55:41:dd:ce:73:d0:e3:
                    fb:bc:26:81:ad:ef:24:dc:8f:8d:ef:cc:4b:e3:17:
                    9e:32:9c:b5:d2:c3:55:76:5c:50:5a:bb:d8:ca:31:
                    86:35:42:ce:53:a5:d1:f0:a5:3f:96:97:21:21:80:
                    3f:b4:b8:b2:ae:9c:05:b1:18:f0:c5:85:c2:8d:9b:
                    7b:98:d6:2f:56:0e:9b:64:26:c3:66:d9:06:ea:8f:
                    06:2d:fd:44:97:cb:b2:4d:23:bf:fb:96:a6:a7:76:
                    54:38:86:b1:1b:55:ab:5f:25:38:ca:7a:b1:a2:ae:
                    bd:4c:6a:0a:42:cd:8b:59:29:b6:f0:cb:b7:98:a1:
                    06:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E3:CC:5C:FE:AA:91:8C:F9:53:9D:AC:07:9E:76:D8:A1:1C:2D:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8317eff6-cde9-3a8f-a08a-7be1e2c13bf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.226.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:f6:4f:a0:c3:93:15:c5:90:05:99:e8:c1:13:76:d9:62:54:
         8a:f8:96:ba:88:bf:da:2c:02:fe:4d:a3:c5:36:36:55:9b:a3:
         d2:de:e6:1a:03:6f:73:6c:c4:93:1e:da:51:c0:17:85:1e:4b:
         8b:e8:c1:02:e1:12:7e:24:92:23:ea:74:d0:e8:b4:98:66:01:
         da:c0:99:57:b4:24:53:9d:1f:73:8a:21:bd:f9:96:ff:88:ac:
         e0:36:f6:e1:f6:44:70:bf:39:69:12:0f:ad:15:a8:e3:1d:12:
         9e:cb:54:f8:6b:57:d6:00:2a:7a:bc:ee:01:56:0c:e8:02:a5:
         fe:75:68:12:79:64:7f:29:ff:4d:27:21:ae:0c:01:b6:db:29:
         95:55:50:18:0e:84:32:ba:44:6d:f0:14:36:03:93:aa:47:cf:
         aa:b4:a3:6f:f2:8d:1c:fc:39:05:72:09:52:69:68:b6:3a:ab:
         67:98:bc:ef:30:6e:d8:49:71:ae:9d:75:ff:5b:e7:c9:f7:f7:
         27:e9:ea:02:c5:67:30:c3:1d:80:44:b1:09:f9:7b:17:ce:6f:
         0f:9d:71:78:9f:79:29:b8:ca:8a:5c:39:e7:26:0d:6a:e7:bc:
         43:78:69:12:e2:da:8f:af:b3:c3:13:d8:50:2c:7a:fb:20:f3:
         1d:4c:3f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:57:40 2025 by rpki-client