Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/849c28b9-21c5-3a08-9bac-465bf04d188d.roa
File:                     849c28b9-21c5-3a08-9bac-465bf04d188d.roa (raw, json)
Hash identifier:          4nB3x3JFxL9I5VU4HyO5KUVpT77I7+dTlKrRNL0SQGs=
Subject key identifier:   59:49:F5:F5:C2:67:97:63:4F:C1:70:B4:A3:24:11:E2:81:99:C3:74
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2497007B3AA4EB8516D3DA80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/849c28b9-21c5-3a08-9bac-465bf04d188d.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.244.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:97:00:7b:3a:a4:eb:85:16:d3:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=cf9d94c8-1312-4ce5-a644-2f2a7d89eaac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b1:e9:27:24:c0:59:d1:1b:f5:f0:63:b1:d7:
                    b3:58:8c:c4:56:aa:ad:19:83:c7:e6:b8:95:b2:59:
                    b4:fa:96:d5:61:93:b6:19:a1:05:62:63:a0:e4:ce:
                    19:ac:c9:50:85:e3:86:85:fe:f0:96:bd:de:8c:fa:
                    8b:ce:fb:51:63:31:43:f6:c6:b6:ac:b7:cd:4e:90:
                    72:f5:15:e8:7a:b3:20:07:f1:70:33:1a:cc:11:87:
                    d9:88:89:0c:f7:af:23:b3:cb:6c:dc:8b:c3:14:ef:
                    40:a0:7f:43:a7:14:2b:f4:96:86:3e:5e:0f:94:ce:
                    b6:00:e4:d5:28:41:02:ec:74:ac:f3:d8:87:09:81:
                    bf:8b:9c:ed:12:20:42:8d:b7:19:8f:e6:61:f5:d4:
                    90:0d:8a:1c:6a:9a:10:46:61:cb:58:f7:17:1d:24:
                    7a:08:3b:5f:27:d2:27:bc:7e:85:16:c1:17:c1:6a:
                    7b:51:ce:de:b5:6e:cd:d2:ce:99:35:32:06:44:62:
                    6f:37:3c:39:86:6d:d2:6e:92:90:a9:71:bb:4a:49:
                    7b:44:1b:3a:75:2d:a2:48:9b:08:26:97:7b:c0:f7:
                    9a:9a:6b:3f:1d:e3:ec:cc:83:46:fe:25:a6:5f:89:
                    48:51:fe:3a:92:3b:67:12:21:16:a6:15:70:0f:0e:
                    97:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:49:F5:F5:C2:67:97:63:4F:C1:70:B4:A3:24:11:E2:81:99:C3:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/849c28b9-21c5-3a08-9bac-465bf04d188d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.244.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:af:71:37:91:ee:2f:49:14:4b:9c:dc:d3:93:78:4d:e0:da:
         ca:b8:82:b7:8c:c0:af:87:a0:44:b3:a4:39:75:fd:1f:0e:b7:
         d1:e8:93:46:35:a7:70:03:f3:b2:ba:ea:97:8b:0b:7b:56:2d:
         5e:05:ae:22:5c:48:25:8b:85:42:3a:99:f1:c8:f3:68:2e:57:
         a2:11:a4:f8:a4:6b:14:7e:84:09:07:92:4b:bd:71:73:e7:59:
         35:91:78:cd:07:53:61:3e:89:5d:07:57:52:03:36:39:20:8c:
         27:cf:f3:d8:9e:dd:e7:f8:9b:8c:66:22:10:11:f1:8f:c9:af:
         f6:84:b2:11:d3:cf:0c:f6:f0:64:e1:76:24:57:46:25:36:bc:
         29:9d:12:2b:c9:a6:8e:85:50:97:62:7b:eb:1c:22:0f:e5:db:
         e1:5b:a7:3f:a6:e0:61:11:66:c3:6f:1e:5b:33:c3:74:ea:67:
         92:a9:7c:6a:a0:9d:bd:86:6a:76:ed:b8:fb:74:06:8f:c9:24:
         1b:bb:4c:98:88:af:91:30:77:b6:1b:78:27:40:2b:d2:33:38:
         7a:15:d1:62:2e:67:dc:5a:92:f5:ca:0f:8c:a9:ed:e1:ac:b2:
         76:02:10:e4:ca:69:2f:3e:7b:5a:2f:86:d1:4d:24:46:5f:10:
         eb:ee:d6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:06:37 2025 by rpki-client