Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89d39ae0-37e4-3c72-ac98-4a004f021d14.roa
File:                     89d39ae0-37e4-3c72-ac98-4a004f021d14.roa (raw, json)
Hash identifier:          dXeRpwdpebUb5FoOtDRcWzvsv9v+hhgtQdpYgPpuQYQ=
Subject key identifier:   A6:88:EB:6F:0D:18:4D:69:33:57:70:33:BB:FC:3C:78:21:B3:BA:31
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2496FB5D7F09F1F855DACD40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89d39ae0-37e4-3c72-ac98-4a004f021d14.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.221.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:fb:5d:7f:09:f1:f8:55:da:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=37704b6b-ec2b-4718-b0cb-9d0362c45caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cf:3c:ba:9c:f4:22:94:af:7f:a6:75:9e:38:
                    87:f5:cc:9c:52:20:80:c4:dd:41:8d:ef:5d:a3:d2:
                    f8:9f:d5:01:2a:2b:f0:38:d8:13:ac:ad:3e:89:a2:
                    7d:d8:80:7f:1d:46:24:b7:ac:cd:d1:7f:14:f8:31:
                    ff:9b:3c:4f:a2:35:51:45:83:6e:b3:94:56:b5:c3:
                    c0:68:0b:f8:fc:6d:bf:61:e4:96:9e:60:25:f3:88:
                    c6:d8:99:15:f8:dd:f6:03:24:0b:87:ed:49:e2:8f:
                    0f:a7:93:d7:e0:17:40:5e:38:9b:bc:1f:ef:d5:38:
                    ed:91:3e:cf:6c:4e:90:9c:76:c3:a2:a2:e8:c8:c8:
                    05:97:76:3b:1a:82:30:d2:76:e7:00:79:65:7f:7a:
                    f1:34:12:0c:9d:f2:58:44:56:66:32:c5:71:f9:53:
                    77:bd:6c:db:7d:3c:d5:36:0f:14:63:da:79:ce:37:
                    2a:13:98:37:d3:a7:45:f6:46:c1:2d:5c:7f:0f:88:
                    a6:91:d9:88:05:2e:00:a0:5f:e4:ef:ea:34:fb:6e:
                    ce:dc:89:56:55:e5:35:e8:10:1b:c2:02:01:7d:4e:
                    9d:50:11:9c:59:3f:fb:64:f3:39:e2:65:9b:16:21:
                    69:48:69:07:89:c4:9e:d7:6b:28:d6:61:28:fb:39:
                    55:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:88:EB:6F:0D:18:4D:69:33:57:70:33:BB:FC:3C:78:21:B3:BA:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89d39ae0-37e4-3c72-ac98-4a004f021d14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.221.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:3a:27:af:c5:15:dc:2b:b1:2d:53:6e:fe:d0:16:59:23:7a:
         33:cd:47:c8:30:ba:8c:84:89:e7:53:a0:27:73:f9:d3:c7:80:
         15:46:32:66:96:ae:e6:3a:8b:eb:b8:01:d0:70:73:a9:6e:db:
         6d:8f:78:0b:5e:6a:41:a8:41:9e:1d:d2:e2:fc:70:7e:89:ec:
         e8:98:73:7b:47:48:f4:3b:c8:80:b5:64:a5:68:96:fe:81:a9:
         09:43:20:a0:78:71:73:b8:78:e6:ca:18:c8:4b:4f:06:db:49:
         9e:12:16:59:46:d8:e1:c0:19:22:e8:0f:54:95:46:0c:ca:18:
         a3:9b:c1:50:56:90:df:f1:12:d3:8b:6e:98:c4:c9:91:a3:94:
         2d:63:b5:ce:23:2a:fb:6d:cd:1f:2f:52:fb:31:6d:f3:69:3f:
         e6:7a:9f:e8:3b:11:50:4b:76:cf:81:bd:77:e5:eb:bf:da:98:
         d2:a4:18:df:8b:7c:e1:11:45:4b:4d:3a:a3:ec:8b:6b:e7:e3:
         15:0f:52:97:31:0a:d3:2c:a3:4c:0a:12:a5:eb:c5:51:98:fe:
         41:d6:e9:23:6e:df:c3:0d:86:29:85:72:31:59:f2:fb:60:aa:
         b3:92:d0:54:33:05:57:1d:bb:f4:fb:84:fb:96:d6:23:80:cc:
         9e:4c:eb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:10:48 2025 by rpki-client