Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd503a87-b8b0-33d4-ad72-7748ce036c91.roa
File:                     bd503a87-b8b0-33d4-ad72-7748ce036c91.roa (raw, json)
Hash identifier:          RI1oFZXzepp1qRDTstruWdZ4oYOK9HlQ0SuKzYkasfY=
Subject key identifier:   4D:C1:3C:B2:07:58:F5:3E:1D:4B:EB:DC:E2:D2:C0:33:02:08:A7:E8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2496E04804C81F4022F08940
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd503a87-b8b0-33d4-ad72-7748ce036c91.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.226.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:e0:48:04:c8:1f:40:22:f0:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=2fb03bc5-e52e-40d0-b3b4-8664f6c58040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:da:5c:10:40:75:2b:a1:76:1e:07:d3:f3:20:
                    0c:fc:72:a0:9f:d2:a7:c2:ca:41:3c:f9:cf:e9:ed:
                    45:60:9b:d5:80:2a:ef:26:0e:2f:a9:99:d5:a0:49:
                    72:2f:c4:57:f4:b7:23:d1:a6:7a:d4:36:3c:84:40:
                    cb:3a:b3:21:94:74:04:0c:ae:1b:34:cb:7d:28:a0:
                    86:58:e5:45:97:e0:96:23:75:bb:b5:1f:a2:c2:b9:
                    47:e8:ca:08:51:60:7b:0a:42:b4:5e:89:4c:39:08:
                    b5:df:ae:e3:e1:1e:5b:c7:21:f9:f3:89:1f:f5:d9:
                    bf:5b:ce:e7:c8:f2:6d:75:f2:c2:f4:ff:71:1e:d8:
                    5f:31:3d:c8:4b:f1:95:a2:63:89:9a:83:c8:06:c2:
                    ac:60:cf:5d:df:9b:62:44:78:8d:ca:cf:8e:f9:cf:
                    34:fc:c8:22:a1:c3:75:91:1c:86:ec:6b:a8:6e:02:
                    27:3a:41:a3:eb:09:3e:72:c2:2f:23:8d:43:d6:52:
                    11:c8:a9:72:ed:c0:48:68:06:94:91:28:1d:97:44:
                    4a:30:5d:75:6e:38:e2:d6:8e:3e:03:71:85:6e:09:
                    78:96:bf:75:5f:91:5d:59:e5:c9:41:f9:ef:8c:e8:
                    51:11:5a:a2:7e:34:74:12:e3:a6:87:6a:49:d1:20:
                    b9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C1:3C:B2:07:58:F5:3E:1D:4B:EB:DC:E2:D2:C0:33:02:08:A7:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd503a87-b8b0-33d4-ad72-7748ce036c91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.226.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:75:c7:d1:5d:54:f2:98:b3:4d:47:c8:f6:16:19:fd:4a:0c:
         c6:a8:26:44:ad:ec:59:5f:77:2d:42:33:1a:e7:03:d1:b7:f6:
         f8:fb:c4:cc:13:df:87:c1:a7:53:ad:ad:e5:4c:94:15:bf:d7:
         6a:ac:32:8e:04:5c:50:b9:23:2f:20:cd:c2:03:13:cb:91:26:
         47:42:63:fe:96:8f:3d:ea:1f:79:9f:c1:5a:74:df:fe:93:2a:
         d9:fb:e1:0d:b5:0f:2e:16:40:41:08:4a:77:0a:4c:71:93:88:
         3c:f4:e5:f4:5e:f5:13:8c:4a:9f:40:79:b8:4a:c6:5b:bd:f1:
         d8:29:61:a3:a4:67:09:2c:0c:71:de:c4:fd:e2:ed:e1:be:2b:
         c2:0e:df:83:c9:40:bb:c7:07:09:85:89:17:f6:de:05:1a:64:
         63:9f:ad:01:56:12:95:23:c2:26:29:88:bd:95:cb:75:af:bb:
         a4:ba:85:d6:f6:9a:27:e8:43:fd:32:8b:bf:88:48:bb:a7:9a:
         0d:9e:20:51:53:a3:65:78:d3:e2:d6:83:b9:03:e9:ff:30:09:
         3e:90:fb:5f:f4:96:69:8c:46:e0:de:b2:ec:b0:62:cf:72:55:
         3d:78:9e:24:ba:b4:2a:e8:f1:ab:b1:6c:e8:59:68:f2:a5:47:
         f2:1d:a9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:54:51 2025 by rpki-client