Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/352d5c27-11b3-3b6a-9ee2-ee38ca0785ad.roa
File:                     352d5c27-11b3-3b6a-9ee2-ee38ca0785ad.roa (raw, json)
Hash identifier:          nYu+CMQjXHP2d958rtwPjx7ybIyW0EYEJMqdN2YBwqM=
Subject key identifier:   B6:A7:E7:55:00:59:60:73:BC:10:B7:44:50:67:8A:A1:C8:C7:D5:DC
Certificate issuer:       /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Certificate serial:       010D0C9F4328584B7A709BD0134ED4A2ACBA9680
Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/352d5c27-11b3-3b6a-9ee2-ee38ca0785ad.roa
Signing time:             Fri 10 Oct 2025 19:03:13 +0000
ROA not before:           Fri 10 Oct 2025 19:03:13 +0000
ROA not after:            Thu 08 Jan 2026 20:03:13 +0000
asID:                     6939
IP address blocks:        142.248.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:70:9b:d0:13:4e:d4:a2:ac:ba:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
        Validity
            Not Before: Oct 10 19:03:13 2025 GMT
            Not After : Jan  8 20:03:13 2026 GMT
        Subject: CN=f0dc327b-4510-4c4b-861a-f351f0b022c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ff:d4:83:9d:5b:43:37:7d:f7:2b:23:b1:7f:
                    33:6b:25:32:17:51:2a:61:9d:4c:1e:09:90:00:cc:
                    ea:b4:99:b0:25:df:55:a1:57:ac:98:6b:5b:47:e8:
                    16:ca:a0:82:ab:aa:9f:61:a8:0a:23:61:b3:60:f5:
                    48:c2:78:f5:b9:b6:6b:2d:96:2d:6d:1e:26:47:d5:
                    21:ee:ca:6b:ee:23:94:fc:98:bb:6f:41:95:e7:06:
                    90:c6:65:ab:10:5e:10:cd:6a:64:23:bb:56:e3:7d:
                    27:10:46:23:55:9e:ff:1f:1c:99:a6:ff:f3:8e:9b:
                    94:25:06:66:54:38:80:96:41:3a:9f:64:ed:f7:44:
                    7e:cb:11:37:16:d9:cc:42:21:ae:aa:d7:3e:11:93:
                    3b:82:77:67:c2:ac:12:8a:b7:cf:cb:41:c9:06:97:
                    ed:d2:15:4d:e8:a3:6f:06:60:bf:86:b7:e7:bf:06:
                    c1:ec:5f:45:81:44:de:e9:c4:70:29:1d:35:32:90:
                    52:46:ec:d4:97:23:22:e2:43:b9:f8:e9:73:15:48:
                    b0:f3:4a:a7:ef:ee:6d:79:25:76:c4:01:4b:e8:37:
                    e4:59:82:68:7c:bb:d7:8b:a8:50:7e:a4:6e:0d:08:
                    8f:db:54:df:71:6c:f5:16:50:e9:89:a0:51:4c:aa:
                    ea:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A7:E7:55:00:59:60:73:BC:10:B7:44:50:67:8A:A1:C8:C7:D5:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/352d5c27-11b3-3b6a-9ee2-ee38ca0785ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl

            X509v3 Authority Key Identifier:
                keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:b4:23:f1:24:82:25:08:22:fe:5c:95:8c:b0:e3:12:a9:32:
         0a:c1:14:59:07:50:f7:71:31:6f:87:94:b5:70:98:01:de:48:
         32:d0:6a:85:4f:28:b8:9c:0d:8e:33:25:a7:ff:f8:01:b7:cb:
         59:e8:54:b2:90:5f:29:8b:68:fa:dc:73:8b:0b:01:77:d4:c4:
         8c:35:7a:48:a0:ab:4f:26:25:0a:83:51:1b:32:a5:a2:6e:8d:
         5a:34:34:e2:45:35:00:94:f1:6f:ad:e6:ab:1c:65:2f:f6:bf:
         e2:e6:b2:eb:00:8d:b1:02:8f:d3:2c:9d:1f:04:ca:e9:d5:64:
         e7:8e:26:a0:66:ff:69:5c:a5:9b:54:7f:21:38:50:36:8e:cb:
         64:91:c0:df:8b:9b:65:16:0b:53:96:0a:b3:d6:fc:1f:8b:92:
         6b:cc:c4:4d:a6:39:ff:72:a0:30:47:f0:f4:17:15:ce:a9:23:
         a4:32:b3:df:77:e5:4f:0e:6b:cf:21:af:27:54:0b:6e:93:00:
         03:76:23:b8:8b:0b:e1:cc:52:20:b7:63:d2:a5:0e:d2:1a:60:
         fb:36:48:9d:4d:33:8c:a3:05:61:0e:97:8c:76:d9:d7:6e:4d:
         37:75:b1:36:28:ba:85:d4:a5:ac:5d:76:0e:35:4a:93:4e:35:
         f5:41:6c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 12:08:48 2025 by rpki-client