Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/75725bd5-4eda-3957-a869-63395d89f461.roa
File:                     75725bd5-4eda-3957-a869-63395d89f461.roa (raw, json)
Hash identifier:          JtrCZ7lpjAs6UPk7QILLiAsbxgo+NiM16mSjf+QMFOU=
Subject key identifier:   43:6A:10:C5:AB:53:A9:5A:70:7B:6F:1A:A4:CE:B3:40:3C:F0:24:0C
Certificate issuer:       /CN=c6dce4dd-aa4a-4077-aa50-8e935d660edc
Certificate serial:       010D0C9F4328584B3D44AB5FB86351C575BCE040
Authority key identifier: E0:47:A7:1C:8B:EF:3B:F3:70:6B:6D:40:6B:ED:03:01:E9:5F:D3:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/75725bd5-4eda-3957-a869-63395d89f461.roa
Signing time:             Thu 18 Sep 2025 21:10:22 +0000
ROA not before:           Thu 18 Sep 2025 21:10:22 +0000
ROA not after:            Wed 17 Dec 2025 22:10:22 +0000
asID:                     46592
IP address blocks:        69.67.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/c6dce4dd-aa4a-4077-aa50-8e935d660edc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/c6dce4dd-aa4a-4077-aa50-8e935d660edc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:44:ab:5f:b8:63:51:c5:75:bc:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6dce4dd-aa4a-4077-aa50-8e935d660edc
        Validity
            Not Before: Sep 18 21:10:22 2025 GMT
            Not After : Dec 17 22:10:22 2025 GMT
        Subject: CN=bc55e686-fe50-4443-b2cf-842388f972fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a4:7b:ee:6b:fb:96:b2:42:07:e4:17:3f:af:
                    54:f7:60:75:79:09:bd:d0:c0:30:4e:da:e2:78:5f:
                    f1:4c:58:da:3f:8a:de:74:e5:09:ba:fe:5c:61:dd:
                    ce:7b:14:2a:6e:6f:eb:62:f2:47:20:c2:de:64:8c:
                    95:01:8d:54:a0:e7:c6:0e:6d:18:9c:09:06:b9:59:
                    82:b3:c1:1e:ce:61:5a:e2:fc:50:b9:18:39:dd:d8:
                    b7:83:1f:87:06:da:c6:49:c4:7d:f9:02:7e:60:24:
                    aa:bc:0c:f0:54:c7:e9:63:25:7a:16:73:de:3b:24:
                    de:e4:f6:46:07:3d:24:1f:ee:99:b4:aa:99:42:ae:
                    0e:59:2f:ec:b1:28:f9:30:76:aa:15:a7:e0:03:ec:
                    b0:91:3f:74:0e:16:61:87:34:21:0a:60:ad:01:89:
                    9b:be:81:6b:53:b0:75:e9:40:c1:5f:54:a3:a8:02:
                    03:19:15:91:75:20:18:6b:d6:b0:3d:9c:e3:66:67:
                    c2:f7:7f:bc:df:5b:a1:fa:77:0e:e7:7b:49:23:9c:
                    cd:69:85:02:0c:fe:65:5e:3f:7a:64:4e:dd:66:67:
                    df:a2:0f:61:9a:9f:33:d0:eb:af:76:b5:39:26:5f:
                    a4:22:91:7a:c1:ad:ab:6d:de:ea:9f:f8:a3:e8:8b:
                    04:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6A:10:C5:AB:53:A9:5A:70:7B:6F:1A:A4:CE:B3:40:3C:F0:24:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/75725bd5-4eda-3957-a869-63395d89f461.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/c6dce4dd-aa4a-4077-aa50-8e935d660edc.crl

            X509v3 Authority Key Identifier:
                keyid:E0:47:A7:1C:8B:EF:3B:F3:70:6B:6D:40:6B:ED:03:01:E9:5F:D3:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.67.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:51:17:ce:b8:b0:f0:a0:9f:a0:50:b2:7b:89:8f:33:f8:6d:
         25:a0:b7:aa:8f:3e:99:db:c8:2e:35:0e:5c:1c:22:ab:98:13:
         da:b5:2f:9c:24:10:2d:17:d6:17:52:cc:55:41:d4:ee:13:6b:
         31:b9:09:9c:3c:6a:44:e5:3a:33:96:b8:50:9d:c5:e7:d3:46:
         d1:1a:0f:ba:34:3c:d2:14:53:90:63:46:d8:12:81:be:bc:07:
         06:0e:3e:96:eb:be:b2:1a:f8:80:3e:2a:11:04:10:f8:56:40:
         3a:25:58:b4:5e:f6:d5:13:ee:43:0c:53:31:cf:23:69:8b:7b:
         ad:52:ef:f7:fb:19:f5:ef:ca:8d:08:44:cf:9e:65:4b:35:01:
         a6:34:8a:ca:a8:87:78:57:f5:af:aa:ab:9e:dd:f4:ac:02:36:
         0f:88:59:6b:fe:48:ac:3c:ce:26:46:9f:50:fa:d1:fb:13:b0:
         e0:12:5b:07:ce:a9:16:e4:c6:04:c2:83:7c:98:96:5a:5a:e7:
         5b:75:b6:2a:0d:8c:1d:04:b6:3a:ed:a1:b8:d4:8d:cd:77:bd:
         20:d7:a5:9d:12:d4:6b:a2:79:57:0f:32:2b:69:65:39:11:b6:
         ae:05:2e:d9:5a:dd:b6:e7:75:56:1f:84:6c:c2:6d:d2:3e:9f:
         da:eb:72:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:00:18 2025 by rpki-client