Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f746b144-90ce-39ac-8e80-d069de0baaaf.roa
File:                     f746b144-90ce-39ac-8e80-d069de0baaaf.roa (raw, json)
Hash identifier:          yg3AHonYrVQZyOb6iuDdAOvOmi6WeRTE2fEaQQudgNk=
Subject key identifier:   6B:7D:A5:CB:EF:32:05:27:AD:A2:3B:6D:3E:A6:FE:F7:D4:80:E2:86
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2497015B1733FF928C86F560
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f746b144-90ce-39ac-8e80-d069de0baaaf.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.245.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:97:01:5b:17:33:ff:92:8c:86:f5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=c1df73db-7367-4313-9ec3-ae7fc20edb2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9a:26:a3:a5:eb:8e:2b:23:2f:d4:b1:49:fa:
                    1e:9a:4b:66:6c:c6:f3:54:0a:e0:4b:25:9f:43:4b:
                    7e:45:c2:8b:b4:6b:f2:bb:f7:20:7a:72:17:c0:36:
                    91:6e:1d:90:5a:49:72:f2:f5:f2:54:a5:b9:0c:49:
                    cc:f7:bb:6d:39:45:01:eb:5c:34:48:77:51:c3:e7:
                    0b:03:8e:b4:5e:67:ad:7a:e5:4b:50:08:f7:d3:c2:
                    16:90:d3:c6:d4:96:95:74:4f:cf:08:85:56:7f:c9:
                    c8:35:26:86:da:62:30:3d:fb:5b:60:9d:53:4a:79:
                    3f:2f:06:64:44:2a:58:d9:6b:e5:79:d1:82:e3:79:
                    13:69:93:05:d8:1a:bf:7d:97:7c:cb:4c:38:22:8a:
                    35:1b:52:ff:b0:89:0e:6b:66:ee:23:a3:cd:89:af:
                    a3:95:95:d4:57:8a:a8:7e:06:a3:f1:c9:2e:e3:60:
                    db:c2:1e:69:40:68:1c:36:23:c3:d2:ac:b2:66:ae:
                    78:b9:fb:ed:15:da:83:2c:ad:24:45:ab:2f:3a:b0:
                    bc:fd:7f:07:cd:e7:a5:1c:ac:c2:74:a2:6a:14:a2:
                    97:20:60:e3:5a:dc:53:b2:2b:16:f9:83:97:60:f2:
                    b1:c3:ba:ba:4e:8a:3f:e0:3b:a6:d5:dc:b5:99:28:
                    f1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7D:A5:CB:EF:32:05:27:AD:A2:3B:6D:3E:A6:FE:F7:D4:80:E2:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f746b144-90ce-39ac-8e80-d069de0baaaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.245.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:fb:53:5a:4f:58:66:af:cb:fc:a1:be:e8:5b:4b:35:01:3d:
         f0:26:47:a6:2f:dc:74:56:2e:cd:4a:97:1e:4a:1d:e2:dd:e3:
         84:22:5d:76:40:02:6e:10:ac:d0:fb:47:c4:5a:b0:55:83:49:
         ad:a4:16:6f:9d:2f:8e:6c:c0:bf:d4:37:66:77:c5:11:60:c8:
         4f:79:9d:a7:39:9b:af:76:78:6d:67:09:0e:0c:f8:3a:9d:8a:
         d6:ed:31:24:04:01:4e:6d:76:ca:32:bf:9c:39:cd:06:20:e5:
         b8:bd:c3:4e:d4:ac:26:01:2e:82:45:1e:77:44:b5:f5:d7:1a:
         ea:12:4e:f4:f6:11:d5:80:65:d3:18:5d:bb:09:7c:c0:ea:a0:
         7e:26:f6:c5:87:69:35:95:56:b6:83:48:9c:a7:ad:3f:96:0a:
         af:a7:5f:f3:39:76:3a:00:10:f1:70:d3:a4:51:a2:b9:0a:a9:
         35:14:0f:3e:8b:ea:e4:54:d4:ae:d9:66:e4:27:6a:e3:1d:14:
         be:91:32:41:f9:93:91:82:af:6a:79:f3:a2:b2:42:3b:81:2e:
         22:eb:7d:f9:49:9d:18:54:bc:b2:cb:c6:b0:6e:d8:fc:01:b5:
         a8:8c:57:28:c6:54:d2:4c:8d:10:1a:ea:93:aa:88:9b:a6:5d:
         07:24:dc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:54:54 2025 by rpki-client