Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8409ac5-b26d-3e59-bb74-9a8debd3fa23.roa
File:                     b8409ac5-b26d-3e59-bb74-9a8debd3fa23.roa (raw, json)
Hash identifier:          iRi9QZHXDizkrCwTmb3sTZMq6aMx/fMSYSjuf6HFYYs=
Subject key identifier:   D2:72:80:6B:70:81:F0:7C:7B:1F:D5:A3:BC:EE:21:3F:14:25:00:11
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B24970007C43A11413463F880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8409ac5-b26d-3e59-bb74-9a8debd3fa23.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.243.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:97:00:07:c4:3a:11:41:34:63:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=a45b0f54-3283-4a5a-9d12-7ec91de6df39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:58:9e:0b:ea:d0:44:ee:ec:3e:77:59:36:e7:
                    0e:cb:c8:8a:f4:99:c8:e0:47:7d:96:53:a4:a6:9b:
                    2f:22:ab:30:41:47:b3:2d:06:51:b2:f4:f5:73:e9:
                    53:51:a5:87:89:34:ca:5b:b8:bc:27:57:37:c7:30:
                    73:fc:50:48:df:25:16:42:2f:42:2b:93:38:78:b7:
                    cb:de:6d:fb:20:6a:06:3d:81:9e:41:7f:59:e7:61:
                    71:3c:40:91:82:c6:03:8d:f8:d0:e3:c8:d3:c3:8c:
                    64:08:bf:a0:66:b8:4e:1b:06:98:8d:ea:b7:c5:56:
                    f3:68:4f:a9:38:7f:6e:6b:e7:9f:2e:d4:23:1f:7a:
                    a9:46:a2:70:3f:c6:cf:52:13:ee:d8:81:e6:52:4a:
                    54:8b:00:2c:bd:72:0a:f7:30:58:95:f7:7a:52:cb:
                    16:be:a8:59:35:b8:5d:87:49:cd:d0:80:be:db:91:
                    a2:f3:27:bc:13:53:00:2b:11:37:73:54:01:ff:7e:
                    01:3e:67:10:b5:9c:5c:ba:d9:79:d3:a8:76:61:88:
                    a8:10:af:f6:54:dd:d0:49:7e:08:ac:d1:3d:14:bb:
                    e4:cf:8f:b6:76:dc:cc:ce:88:13:95:36:80:90:08:
                    80:7c:3a:5a:aa:a1:53:d6:0a:85:f6:4a:d4:72:d4:
                    b9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:72:80:6B:70:81:F0:7C:7B:1F:D5:A3:BC:EE:21:3F:14:25:00:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8409ac5-b26d-3e59-bb74-9a8debd3fa23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.243.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:40:62:f6:e1:28:ef:c3:ba:1e:b3:8b:d8:7c:cc:c8:67:33:
         a2:b6:4c:e9:6b:1c:88:f4:48:dd:ec:ac:be:70:c5:00:b8:ef:
         49:91:07:39:b0:a3:eb:0d:cb:ac:8f:5c:ab:2c:fa:d2:53:05:
         5f:f9:53:35:b3:1e:77:e0:41:35:44:64:1b:a7:3b:ac:b1:95:
         a9:79:33:34:15:fb:53:0b:25:35:06:67:10:c5:9d:31:12:4b:
         34:6c:7f:4c:3a:eb:f5:8b:0a:0d:4c:75:d4:81:07:c3:9f:61:
         73:ee:e4:48:8b:47:5e:e7:ae:a0:1a:02:6b:1f:85:0a:9c:07:
         07:3d:7c:56:6d:7b:fd:d1:3f:58:91:bf:f7:9a:29:b2:c3:1c:
         62:f0:38:3a:d4:94:48:86:9e:ef:dd:67:ff:e0:fc:f7:db:a0:
         74:ce:b4:eb:65:b9:36:df:67:9b:76:1a:5b:77:d0:91:c0:64:
         fa:c6:5e:e8:57:ec:79:61:b9:a5:ff:34:a2:0e:c2:39:3d:e8:
         07:ef:8f:7f:47:36:42:9c:90:b7:17:a3:20:f7:f7:58:07:fd:
         88:9e:c8:2f:96:96:36:4d:a3:7d:8e:e2:67:78:f2:98:3f:59:
         08:98:1b:dd:8b:55:ec:2e:98:68:d9:fd:31:51:e1:d8:d0:2f:
         69:10:40:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:58:33 2025 by rpki-client