Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aad1288c-2e9f-3008-b9cf-746b69485bd2.roa
File:                     aad1288c-2e9f-3008-b9cf-746b69485bd2.roa (raw, json)
Hash identifier:          U+3VFolCmmWXDzuy0gW9OJ1GB6V6ifu7oppLVKOeVuI=
Subject key identifier:   C5:56:71:2A:87:C5:CF:C8:82:AE:33:DE:DE:F4:B8:3F:7A:0F:DA:AC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2496F2230988418B3FB0BF00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aad1288c-2e9f-3008-b9cf-746b69485bd2.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.197.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:f2:23:09:88:41:8b:3f:b0:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=0d7dba13-795e-4eed-a8fc-a557afb0095b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:15:c1:db:3c:c6:d1:5e:c6:23:a0:f4:75:35:
                    fb:c0:c5:60:d7:a7:81:39:8f:4f:0d:ab:a3:b7:07:
                    f6:3f:1b:85:32:8e:e1:55:5b:1b:e9:9f:53:70:55:
                    97:cd:99:dd:65:fe:f3:f3:1c:e4:7a:5f:d2:26:2f:
                    f5:c7:06:ad:01:f9:72:ff:82:a3:db:fd:d5:9c:a2:
                    ce:87:1a:a5:d1:6c:3f:8b:bb:75:08:b1:3e:05:11:
                    98:e6:78:70:5e:b2:ec:2c:92:ce:6f:4a:f9:d4:0c:
                    26:ee:70:05:dc:40:3a:95:50:b9:fb:92:76:59:6a:
                    a1:08:14:60:53:57:8c:ef:58:4c:9d:c1:82:24:f8:
                    81:e5:1c:8c:bc:3e:ad:1d:f8:9f:e4:9e:f0:37:61:
                    e8:a9:10:b3:3d:6b:d9:0d:aa:8b:24:c0:c0:c1:44:
                    ff:de:c1:8e:09:99:34:d2:84:6f:a7:56:51:aa:81:
                    13:39:2d:19:a4:06:5d:37:99:15:d3:69:69:5a:a6:
                    72:35:1c:7b:14:ba:44:a0:1b:0c:51:ae:a8:51:83:
                    a0:6b:97:a3:0b:ad:e0:47:41:86:c5:2d:dd:b7:b9:
                    36:d3:07:2e:dd:f0:22:7e:35:64:38:e2:35:26:3d:
                    57:34:08:50:a4:0c:9f:1c:ef:0f:39:0e:61:4d:10:
                    a0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:56:71:2A:87:C5:CF:C8:82:AE:33:DE:DE:F4:B8:3F:7A:0F:DA:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aad1288c-2e9f-3008-b9cf-746b69485bd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.197.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:48:a7:b1:56:05:48:6f:09:fe:ba:1a:ba:30:aa:59:42:a0:
         e8:bd:0b:2d:62:b1:e9:60:9b:25:82:81:dc:d5:d3:21:d7:fb:
         22:05:b1:53:23:37:17:d1:d5:80:f9:e8:88:87:6c:3c:0a:08:
         93:39:c1:0c:a3:e2:c1:d6:f7:16:49:07:ec:5e:df:f9:fb:eb:
         1a:f2:bb:80:4b:7f:9c:09:d5:51:db:07:92:21:35:0f:22:04:
         f3:8b:7a:e0:d5:c2:02:8f:92:77:cd:3f:cf:03:1b:44:d5:75:
         54:2f:f0:44:23:f7:0e:73:ad:8b:61:3f:a7:40:3f:54:53:e3:
         10:5c:d8:e7:20:d0:c9:0c:70:07:18:39:77:c9:bb:da:e5:cd:
         56:7a:8a:34:34:f7:0b:79:84:68:1c:6d:04:99:c5:0d:76:86:
         37:a3:bb:1b:c5:a9:df:91:48:ef:ac:c0:09:09:d7:69:48:5e:
         2f:04:6a:28:e0:e9:24:24:20:e0:b0:2b:c6:c6:bb:4a:eb:a2:
         7f:a8:7c:f5:20:82:19:8d:a4:9f:fa:7b:7b:5c:b4:c0:60:b6:
         53:0e:2f:2f:34:a7:f7:6b:3d:e6:48:d8:e6:73:3f:25:aa:15:
         b7:74:18:cf:98:0d:11:d8:cc:7c:34:de:aa:ec:48:cd:54:cc:
         fd:c7:f4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:51:28 2025 by rpki-client