Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ef4290d-3e2b-37bc-a8ea-1620aaa9532d.roa
File:                     8ef4290d-3e2b-37bc-a8ea-1620aaa9532d.roa (raw, json)
Hash identifier:          JwNvUvxEkWbnE9NF79jGxqF4ZdECCkds9cmf/yAaz7s=
Subject key identifier:   34:DC:30:93:E4:E3:73:E4:52:6D:CB:F7:8B:13:40:DF:10:E3:19:55
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A43DB26ACCCA565449E67D900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ef4290d-3e2b-37bc-a8ea-1620aaa9532d.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     6167
IP address blocks:        75.229.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:26:ac:cc:a5:65:44:9e:67:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=1aabbfe9-21ff-405f-979a-cfea24b8c6aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e3:03:f0:7c:bd:d8:33:30:83:2f:18:4a:1c:
                    b9:ff:dd:99:a9:4c:23:7a:fe:46:94:f1:01:9a:f9:
                    2d:ff:4b:d5:f8:e6:62:f6:f9:d2:67:18:d1:66:59:
                    7d:8d:8a:11:ec:c4:ca:29:d5:23:7f:67:88:b4:67:
                    ff:6f:23:ac:53:74:47:96:5a:46:8e:40:c3:0d:44:
                    b7:fe:af:4f:27:fb:94:b7:07:3d:75:f7:78:33:95:
                    2d:cb:e6:e1:42:9a:4c:62:f7:74:48:f5:53:d8:78:
                    6d:af:5d:dd:ff:8d:cb:a8:75:8a:81:5f:e0:e7:a4:
                    3b:3b:c5:e1:16:ba:3c:dd:90:3b:63:f2:b7:df:f3:
                    a2:ee:a4:55:60:67:2c:ca:a9:9a:63:65:29:2f:39:
                    ce:8e:9f:26:fb:21:7f:ed:3f:13:0f:e1:70:0c:fb:
                    17:93:b2:3e:5c:f3:63:63:dd:48:62:aa:9c:c5:87:
                    b6:04:b1:70:13:ce:09:58:8e:28:7b:17:d7:29:6f:
                    92:a2:e7:77:a5:80:2f:b2:f6:59:34:0f:5b:4e:42:
                    8e:88:2b:22:46:5f:31:ae:5b:59:1d:80:ef:bd:03:
                    a0:eb:52:06:f0:47:84:a0:fb:2c:1b:46:33:df:12:
                    3e:21:36:ab:9b:a5:9b:8c:01:4a:00:b2:49:e6:0b:
                    ad:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DC:30:93:E4:E3:73:E4:52:6D:CB:F7:8B:13:40:DF:10:E3:19:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ef4290d-3e2b-37bc-a8ea-1620aaa9532d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.229.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:fd:09:f1:c0:6a:f0:0b:ef:07:b7:e8:ae:b2:17:fb:a4:6e:
         be:7e:d3:53:c5:10:e2:c9:1f:06:35:9b:75:4e:bd:cc:54:a1:
         e7:5f:9f:ec:83:bd:ee:ef:55:8d:b8:e7:fb:e5:99:d6:76:1d:
         ec:a7:ee:12:92:b5:2b:b0:c5:e5:5d:7f:23:a9:f2:96:f9:f4:
         aa:51:43:38:30:39:20:50:31:fd:32:30:a1:0d:e6:a4:07:06:
         c3:8e:b3:89:6a:e1:bf:91:e2:da:76:26:d8:03:9e:77:ba:39:
         c2:65:64:83:e6:6a:e9:37:cc:ae:21:43:fe:2a:30:73:7a:91:
         f6:34:2d:84:1b:91:1b:39:b3:af:95:0d:bf:13:ac:4f:d5:69:
         55:1d:dd:52:e1:77:60:8d:a4:38:c0:f4:e4:b5:fd:ea:6d:da:
         4e:3f:15:ec:17:0b:26:42:ef:38:6b:08:4b:9c:a2:8d:eb:9f:
         5f:ce:e0:d1:13:a2:cf:51:27:2b:c3:39:26:60:70:a5:f8:7c:
         55:37:d2:c1:2b:0a:f5:ae:38:77:19:72:92:06:2e:50:71:32:
         41:9d:7e:a9:17:c9:9c:15:3a:92:38:21:0e:78:6d:69:33:d2:
         2b:50:73:e3:86:e6:9f:3a:14:64:3c:a4:98:71:af:07:da:81:
         75:69:b3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 22:07:59 2025 by rpki-client