Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3d84bb7-a862-3c6a-8cf5-aaa55fb11eff.roa
File:                     d3d84bb7-a862-3c6a-8cf5-aaa55fb11eff.roa (raw, json)
Hash identifier:          Ctk6P+HUN1hh8oocj85X96ZA6kd9dqUKbMFbaTYgrec=
Subject key identifier:   87:3B:08:B1:64:71:65:8B:C6:6A:5B:73:41:13:25:CB:F8:F6:E1:00
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2496FBACA268EC019BC9FE60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3d84bb7-a862-3c6a-8cf5-aaa55fb11eff.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.231.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:fb:ac:a2:68:ec:01:9b:c9:fe:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=58f82280-7364-4f26-97be-bb42f839800b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e1:c0:5b:28:77:43:d4:f2:81:13:0c:56:f7:
                    37:79:58:21:50:a0:a9:c6:ce:d6:48:e6:c1:1a:0f:
                    77:cc:71:1e:5f:f1:25:8a:47:78:13:ce:e8:00:52:
                    d0:e4:71:b5:0b:d7:9c:5f:56:db:ae:ba:04:3f:2d:
                    56:cb:6a:44:d9:d5:3c:78:92:e4:34:e4:6d:3b:65:
                    af:19:e0:9e:48:44:68:d9:48:4b:16:b0:62:55:e9:
                    8d:de:73:48:52:78:fc:7d:78:db:da:ac:41:e5:7c:
                    87:a2:a8:c6:50:12:83:dd:b9:91:74:cb:d0:06:ca:
                    b1:df:56:7b:99:42:d5:70:73:73:b2:06:49:c5:ac:
                    81:0f:5d:fd:21:fb:0b:ec:b3:bd:50:ee:8b:42:ec:
                    1c:13:ca:2f:9f:b1:0c:16:1a:f7:14:5a:62:a9:6b:
                    8b:bb:95:a7:b6:d8:32:89:ab:af:c3:d9:8a:b8:5a:
                    6d:5d:c8:c1:ed:9b:4d:ff:62:7f:35:28:f7:e4:34:
                    fb:c1:7e:2f:eb:b6:60:af:3a:53:ea:88:a0:bf:55:
                    cf:13:bc:c6:09:69:fd:01:05:9e:01:a9:5b:cd:2e:
                    b1:8b:3e:2d:5b:8c:2f:89:e2:91:72:e6:1f:ac:d4:
                    d5:6f:4a:77:ba:08:34:9d:d7:a5:c1:2c:b4:f9:f6:
                    2b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3B:08:B1:64:71:65:8B:C6:6A:5B:73:41:13:25:CB:F8:F6:E1:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3d84bb7-a862-3c6a-8cf5-aaa55fb11eff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.231.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:53:41:5b:06:64:af:a4:40:e8:ac:a9:6a:db:38:91:28:c6:
         41:1f:53:fe:63:76:7c:70:2c:8c:cf:99:df:6a:af:3d:8e:13:
         33:b1:07:2c:9f:e5:1e:6b:f2:7b:b4:34:b2:11:97:e8:64:c6:
         60:fd:2a:49:b6:29:a1:2c:07:48:26:a1:73:31:b6:88:37:28:
         dd:48:6f:c4:4e:56:eb:c6:4a:e8:65:9b:1c:e4:f4:de:a4:e6:
         71:be:34:35:9d:8b:a1:c0:e1:af:a1:46:f2:76:67:a8:35:95:
         da:47:20:ef:05:83:1b:26:d1:3a:d6:b0:bd:af:a6:27:21:85:
         51:39:bd:7c:4c:c9:9a:11:ee:b9:0d:d0:8d:9a:8f:a7:2d:b4:
         70:9f:e0:8a:50:98:bf:10:7d:60:a8:de:9e:1e:96:3c:95:37:
         05:92:76:b5:98:d8:0d:07:0d:f3:9c:b0:8f:4c:d6:49:fb:28:
         3a:3e:0a:22:a3:2b:b7:ea:02:52:91:c9:2e:58:00:72:f2:17:
         20:03:30:c5:0f:52:de:f1:f2:bb:87:f6:33:72:89:d6:a0:e5:
         7c:c7:28:8a:c1:e1:32:f1:63:98:27:bb:1c:06:5e:86:d2:78:
         4c:83:6d:06:4b:bb:09:96:89:13:1b:ff:a6:67:07:d3:51:8d:
         86:17:ec:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:19:53 2025 by rpki-client