Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bc3f2478-8d9e-365b-b849-6cefc7b82c5b.roa
File:                     bc3f2478-8d9e-365b-b849-6cefc7b82c5b.roa (raw, json)
Hash identifier:          EWz75yKdorxvFbcPmhl89mL71POrB6XAjm30hrLmOTw=
Subject key identifier:   CA:59:5D:91:E4:9F:89:4D:F1:72:86:01:65:44:10:69:63:BB:B5:B7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2496FAD091028DA7CC71DA80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bc3f2478-8d9e-365b-b849-6cefc7b82c5b.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.220.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:fa:d0:91:02:8d:a7:cc:71:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=a0681e9f-2b16-43bd-a3f0-1bb5da17fff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cd:13:8d:ab:b7:f8:c2:bd:47:df:41:e0:94:
                    80:89:82:4a:7c:c4:df:f2:0a:18:18:3e:ca:e9:3e:
                    ff:98:03:c8:b9:40:dc:3c:76:7e:ff:ba:12:ec:42:
                    31:c1:1d:7c:a1:a5:ee:27:74:2d:de:15:da:8f:19:
                    37:52:13:f3:07:97:dc:25:de:74:35:40:98:3a:db:
                    81:ee:38:93:dc:1c:bf:5a:4c:17:49:55:48:14:cb:
                    35:21:d1:71:e5:3c:96:a0:d8:62:8c:cd:c4:be:b9:
                    ce:94:9d:75:af:8f:5d:8a:d5:29:3a:95:42:86:85:
                    59:68:18:68:62:cc:a0:96:44:f7:99:42:fa:61:42:
                    05:63:a5:37:d7:31:be:f9:cf:14:19:5b:f8:bd:c5:
                    a1:3b:d6:73:83:5f:a3:35:52:14:68:24:e6:36:f3:
                    f6:6a:70:29:a2:28:d2:63:4f:87:77:ba:b1:10:40:
                    be:bf:67:f7:f9:48:21:c1:98:63:a5:bf:34:91:ac:
                    35:58:08:bd:60:f8:58:c9:cf:ea:56:3c:f8:61:94:
                    8f:ad:3a:20:cf:bf:df:75:c6:ba:e8:b8:f1:f3:c0:
                    25:26:d0:92:a2:95:6f:a6:19:09:0a:b0:48:ed:26:
                    ff:21:60:a1:99:cd:55:33:68:cf:b7:79:81:3d:24:
                    4a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:59:5D:91:E4:9F:89:4D:F1:72:86:01:65:44:10:69:63:BB:B5:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bc3f2478-8d9e-365b-b849-6cefc7b82c5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.220.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:65:dc:c6:d6:57:91:6f:0d:3c:f8:19:22:c0:ad:00:89:4f:
         f2:18:46:aa:a3:8d:f8:2a:ea:63:99:bd:27:fc:e6:ea:fb:ee:
         c2:8c:c6:e2:a5:08:9f:0a:eb:bd:a5:e0:f1:ae:13:b4:ec:1c:
         b2:62:44:61:fc:62:ee:a8:d0:a7:12:f1:c8:9f:75:39:7f:65:
         ee:73:22:78:f2:e2:3f:a8:a1:eb:e7:8a:39:20:bf:39:ba:e4:
         ae:32:b1:df:14:f4:af:ad:8e:16:af:e4:a2:42:63:04:19:3b:
         1a:eb:1e:cd:0d:ea:8d:c9:a6:11:19:69:7a:c3:98:e2:32:f6:
         f4:35:a2:18:0a:b5:61:b0:78:02:09:4b:c4:05:e3:66:64:48:
         51:fa:79:ea:bb:81:6b:ed:66:34:e7:e5:8c:ae:f2:c1:62:e7:
         97:df:29:5e:df:d8:e2:ed:f9:52:d0:c2:ae:ee:22:63:d9:72:
         17:26:70:3c:23:f5:6a:1a:87:01:ad:24:2b:22:12:82:bc:35:
         0b:95:c8:67:2a:62:c1:55:e4:e0:16:c2:67:5a:34:eb:a1:61:
         99:4d:b6:31:d4:2f:0a:d5:93:78:7a:41:5e:6f:e8:c5:6a:2f:
         04:ed:75:32:83:c6:88:28:56:66:08:36:36:78:77:2f:8c:4e:
         cc:e2:fc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:00:38 2025 by rpki-client