Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd9411e2-655b-3bf2-b42e-17480edab77f.roa
File:                     bd9411e2-655b-3bf2-b42e-17480edab77f.roa (raw, json)
Hash identifier:          qkEOOGOUu4qJYL6AjhCjHUob57H1cGZajODY4heI41c=
Subject key identifier:   15:26:51:0C:4B:1E:13:FF:AA:77:15:00:7C:81:41:EF:95:75:6D:92
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2496E0E05FF19A1EFE00F080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd9411e2-655b-3bf2-b42e-17480edab77f.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.228.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:e0:e0:5f:f1:9a:1e:fe:00:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=4908ce66-4ec6-4563-be9c-1f9652a71188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1b:fa:22:c0:4a:6f:bb:9f:28:44:95:c6:d3:
                    4d:c8:45:33:c4:9a:86:45:8d:11:2c:02:dd:d1:36:
                    98:3e:af:ee:5e:eb:42:d8:9c:6d:d6:86:06:11:63:
                    1a:b5:58:28:ec:9c:a0:37:ce:c4:9f:49:66:94:92:
                    86:97:1d:d1:fd:58:cf:ef:ca:91:3d:2f:bc:2a:80:
                    c6:74:84:93:d9:f7:64:1d:ab:a0:cd:c4:39:13:e3:
                    bd:92:57:6f:a3:33:b6:55:6e:08:e5:9b:ff:ab:9e:
                    bf:85:84:44:58:e9:49:59:04:7e:a8:e9:47:7d:11:
                    1e:a4:a3:35:1b:fb:f7:e5:a1:28:1f:61:97:dc:5f:
                    da:cd:72:03:40:ab:5f:c9:81:54:04:7a:c7:31:32:
                    b4:47:e2:56:99:02:95:a1:f1:c5:b4:36:36:4c:f1:
                    1f:0e:fd:ff:e8:3d:5a:e2:ad:f8:75:9c:15:42:36:
                    43:8c:7d:99:de:af:9e:84:0a:61:9b:50:85:f9:3a:
                    1b:c1:63:f1:63:91:40:3d:84:2b:a7:33:04:03:9b:
                    b5:6b:b6:0e:35:0b:ba:0c:34:cd:05:df:f8:d2:0d:
                    91:49:a0:de:63:87:03:2e:50:43:8a:36:b9:4c:c5:
                    26:79:76:7f:47:c9:20:e2:1b:2b:08:43:0b:f8:82:
                    80:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:26:51:0C:4B:1E:13:FF:AA:77:15:00:7C:81:41:EF:95:75:6D:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd9411e2-655b-3bf2-b42e-17480edab77f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.228.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:12:80:ab:42:f1:99:c6:76:9e:f0:30:0a:f5:70:f6:fb:75:
         c8:a0:c6:bc:a8:c3:b5:ef:e7:5c:c2:e2:f4:db:ea:56:32:2f:
         46:77:9e:50:59:cb:e9:e1:34:0d:03:76:a4:fd:b0:73:70:ee:
         e4:63:d5:2e:8b:79:be:6b:d1:f0:5a:64:82:77:1e:64:15:30:
         25:cb:78:18:39:28:0b:d6:ff:b5:47:b5:82:fd:1a:14:0a:57:
         26:b9:4c:9b:e0:71:3c:db:e9:a0:f0:fc:72:53:a3:c3:e7:55:
         76:a8:c1:b1:f3:14:b4:c5:b1:bc:2c:ce:e6:cb:4a:31:58:d4:
         e3:9a:0f:fb:c0:f7:3e:2b:80:8a:51:8e:fe:1a:d5:3d:d3:43:
         36:98:d8:01:de:4a:48:e1:c5:ae:ea:5b:f7:cd:47:95:2c:6b:
         b3:6d:21:2b:4d:4c:4a:68:d2:ec:21:e6:4b:19:c9:23:78:f5:
         fe:13:2a:bf:3b:23:a9:82:c9:3a:ef:ef:25:77:81:65:fe:af:
         a3:89:6c:05:e5:79:bd:1b:2c:3a:de:33:d5:93:7d:f2:09:7b:
         84:3d:4f:56:63:85:56:9e:8f:1b:41:f1:f7:eb:47:a1:6d:37:
         cb:d8:80:f4:da:d6:45:28:07:53:61:51:cd:13:4b:24:31:cd:
         1c:78:a1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:06:08 2025 by rpki-client