Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d56bfbc-80fd-3bbf-aa4e-f26bec5826ad.roa
File:                     3d56bfbc-80fd-3bbf-aa4e-f26bec5826ad.roa (raw, json)
Hash identifier:          wMBnAoQ210gjBtTSWBdTOfelPAmRmobYcRG0yQKc39o=
Subject key identifier:   04:EF:00:BD:7E:43:54:3B:FB:B5:FC:FD:CA:3D:03:B6:6B:71:24:E8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584964846568E20B27A048C2CE80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d56bfbc-80fd-3bbf-aa4e-f26bec5826ad.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        75.230.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:65:68:e2:0b:27:a0:48:c2:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=63137874-4a27-4199-becd-d7d63b42db46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a9:da:5c:0b:01:07:78:96:55:6c:2b:1c:56:
                    32:93:29:fe:37:ee:d8:a3:98:ca:98:33:15:db:e1:
                    68:1e:1a:36:88:3b:0d:64:6a:21:1a:8c:f1:2a:cd:
                    c4:8a:81:3e:4f:36:f2:09:3f:b9:bb:dd:9b:9e:d0:
                    d8:88:98:45:2c:bc:0f:9c:15:2c:dc:8d:7c:ed:d9:
                    e6:d8:53:c3:7f:e5:81:f6:dd:35:4b:17:a8:79:da:
                    20:23:c1:7d:78:c2:75:9e:61:40:27:65:09:06:40:
                    6f:6c:8f:95:ee:17:75:cb:b4:16:cc:65:7d:e1:17:
                    92:2a:51:57:71:82:f5:27:81:90:06:c8:59:11:db:
                    96:75:7d:d8:d4:30:ab:e7:16:0a:54:cd:92:b0:55:
                    f9:f2:9c:b7:00:ac:02:f9:cc:e0:3f:5d:64:b7:29:
                    d7:f5:92:2c:09:c2:d8:59:ed:e0:45:ca:3a:09:43:
                    f7:36:03:f4:d5:76:97:91:86:31:20:a6:dd:00:57:
                    46:32:e1:eb:42:1d:f0:f1:12:29:17:c2:f3:53:3e:
                    5e:d9:44:85:05:c5:22:26:88:c7:3a:83:3d:a5:5e:
                    62:63:d2:0a:b8:01:3f:05:16:4c:77:f6:21:96:c1:
                    7d:06:30:9a:97:56:8c:d0:09:c3:14:7d:24:08:96:
                    0c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EF:00:BD:7E:43:54:3B:FB:B5:FC:FD:CA:3D:03:B6:6B:71:24:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d56bfbc-80fd-3bbf-aa4e-f26bec5826ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.230.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:49:1e:70:30:e1:d6:b5:43:39:98:91:5c:fe:9f:12:43:e8:
         55:df:1b:6a:89:3b:d0:74:39:3e:ac:e9:e8:23:31:0f:fb:4c:
         ce:ed:0b:26:50:b3:cf:6a:93:86:d0:14:a3:4a:93:18:8a:b6:
         6a:07:aa:26:6a:2d:0f:89:9b:2f:c5:d5:f1:f2:98:ca:c6:ce:
         4e:10:fb:0a:83:f3:04:16:01:c5:d4:d0:0e:82:0d:31:65:43:
         fd:4f:43:e7:0a:50:7c:c3:34:6f:10:b0:f7:66:05:a8:3a:18:
         2b:11:4c:7c:92:15:94:a4:5a:16:1e:a9:23:8b:52:e7:ab:95:
         8a:e4:3c:fc:50:3b:70:2a:ee:42:aa:69:b5:59:e6:95:fd:11:
         8e:22:eb:40:1e:6e:31:d7:6b:f5:36:b5:50:4c:f6:59:8a:cb:
         16:d6:5a:31:62:b2:90:55:d3:0c:56:18:de:49:d0:15:bf:18:
         ee:4a:9e:12:11:fd:af:f4:63:9e:54:55:a9:50:0b:d1:10:0a:
         2e:7e:94:67:bf:e9:e2:c5:0b:b3:ed:48:d1:87:78:dd:3d:6d:
         cd:fe:ab:12:28:90:70:7a:f2:99:26:f5:9a:8b:c0:00:8e:4c:
         62:4e:a1:92:7b:d5:15:cc:f9:f2:5b:93:11:7d:85:32:3f:b7:
         18:6b:af:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:01 2025 by rpki-client