Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a9dd56b8-d457-3b4f-b21d-b70575434263.roa
File:                     a9dd56b8-d457-3b4f-b21d-b70575434263.roa (raw, json)
Hash identifier:          SSqPiAwIPIVbHj+G/+ISUwdZBuZp7xb8GozyUPGe8Vk=
Subject key identifier:   32:B6:6E:77:31:66:6F:44:BC:72:72:AE:BC:9A:5E:EC:B2:7D:5E:26
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B24970036ED2DAC64959FEC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a9dd56b8-d457-3b4f-b21d-b70575434263.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.244.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:97:00:36:ed:2d:ac:64:95:9f:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=aae37762-0ec2-4dee-b208-7b1723081271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2c:8d:a2:41:f7:8b:c0:2b:3c:ae:4d:13:9c:
                    63:8b:d6:55:98:d1:bd:d7:f4:f6:28:0b:cd:e3:9e:
                    b7:76:f0:2f:8c:fa:f4:2e:39:1a:c8:04:1c:aa:c3:
                    91:f3:0b:ae:e6:b4:69:46:e5:ec:ce:43:70:c0:bd:
                    0b:37:32:3d:0a:44:06:f1:6d:15:1a:5b:a0:32:98:
                    7d:66:92:63:6f:b0:57:fb:50:a8:b6:05:a2:7c:bf:
                    0e:75:4e:77:a5:30:be:fd:1d:a2:ce:d1:33:bb:9c:
                    8f:aa:1b:3a:ff:f4:d6:53:6b:8d:41:c4:1e:f9:ea:
                    ea:ad:6a:3a:25:f7:f1:2a:86:d9:0e:1b:78:18:7a:
                    d4:ce:b9:87:32:a8:a0:f7:23:82:c1:e8:58:75:e1:
                    65:40:98:b2:d8:fc:ea:9b:07:1b:d7:04:30:04:7d:
                    7f:37:9d:20:8e:51:9d:92:3b:c4:5a:16:82:5b:03:
                    b1:5a:1d:78:87:6c:07:8b:69:f4:d1:72:42:b4:35:
                    0c:bc:1d:5d:49:25:97:48:25:9e:10:88:1c:bb:4d:
                    ca:97:87:10:c1:70:2e:2f:fd:a1:2f:3c:dd:e4:fe:
                    df:2c:8c:4d:90:25:4c:f7:b4:cb:17:e0:79:b5:3b:
                    7b:de:bc:f6:43:7e:03:f4:ab:ea:f5:3e:28:8a:a1:
                    8f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B6:6E:77:31:66:6F:44:BC:72:72:AE:BC:9A:5E:EC:B2:7D:5E:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a9dd56b8-d457-3b4f-b21d-b70575434263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.244.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:e4:a3:c4:f9:89:d0:ea:78:06:c9:6b:92:2a:ef:ba:23:a6:
         e4:59:3a:65:48:5a:e9:d1:e0:63:53:d8:7c:0c:80:1f:eb:70:
         21:42:45:de:b9:aa:d4:00:63:be:57:c7:31:6b:37:33:25:4a:
         80:24:33:65:bb:ef:4d:27:d4:2e:ce:c0:d8:77:13:ab:3e:07:
         ff:1c:37:ca:8f:8b:1b:bb:95:cc:7c:aa:41:8a:00:a4:fa:63:
         a5:7c:02:89:a6:33:a6:51:4f:ea:51:34:ed:28:50:43:f8:7b:
         30:93:39:17:67:8c:e4:10:39:08:4d:f7:2a:8c:e6:d9:b5:55:
         b4:76:7e:00:dc:1a:5a:f1:39:0b:26:a3:09:a3:0f:05:b0:5e:
         5b:58:47:5a:1f:ef:47:89:c2:5b:22:97:b1:55:8a:c4:c7:ea:
         95:b7:35:5b:73:8f:ab:6d:6f:dd:f6:36:b7:34:4c:26:10:b8:
         aa:85:92:c4:59:26:35:70:97:a1:5d:a7:1c:7b:8d:69:b0:d8:
         73:a7:58:c4:bd:7c:40:eb:f1:7b:14:78:ee:3b:f4:85:b1:1e:
         b1:57:9e:0b:b6:3b:c5:dc:5b:c1:e6:20:7e:09:58:cb:46:92:
         e5:8f:44:3f:29:50:fc:37:bd:59:3c:39:a6:af:11:66:fe:f2:
         e3:76:a8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:52:20 2025 by rpki-client