Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS13768.roa
File:                     AS13768.roa (raw, json)
Hash identifier:          8VVULkVup87wPcWDqobXMSaU+0wn5LslsNKS4o9jxYI=
Subject key identifier:   3A:BC:1E:56:9C:E3:AC:F1:E8:FA:9F:A9:AF:CC:4A:AE:80:3F:B1:6F
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       587728D7699053F72314A8CD041B3B72DC99B806
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS13768.roa
Signing time:             Fri 17 Oct 2025 19:30:38 +0000
ROA not before:           Fri 17 Oct 2025 19:25:38 +0000
ROA not after:            Fri 16 Oct 2026 19:30:38 +0000
asID:                     13768
IP address blocks:        75.102.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:77:28:d7:69:90:53:f7:23:14:a8:cd:04:1b:3b:72:dc:99:b8:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Oct 17 19:25:38 2025 GMT
            Not After : Oct 16 19:30:38 2026 GMT
        Subject: CN=3ABC1E569CE3ACF1E8FA9FA9AFCC4AAE803FB16F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:02:49:63:ad:5b:62:be:66:e2:91:2d:aa:85:
                    a4:b1:b6:1e:2b:56:c0:fc:e8:59:fb:60:cd:c0:e6:
                    89:30:3f:bb:4f:03:3c:32:0f:68:0e:02:17:87:21:
                    28:cd:e4:89:c5:7b:d1:c5:19:e8:6f:74:0b:e0:1f:
                    7c:d1:8f:90:9b:a4:b8:2a:f4:db:81:25:f0:0c:74:
                    27:32:66:2e:ae:78:31:27:1b:b9:9b:ce:21:18:d3:
                    f9:fc:85:05:5a:91:6e:9d:a7:a7:65:56:b4:1c:5b:
                    7a:98:3a:16:f1:72:f1:68:44:ba:b6:31:c1:3b:99:
                    4f:2e:13:04:62:c6:63:23:1b:91:f1:ee:ba:fa:b4:
                    c4:68:9d:4e:fd:3e:0a:19:54:20:b8:aa:91:17:c3:
                    2a:99:6f:a2:32:e2:c2:4b:09:9e:0f:79:66:ed:53:
                    53:e1:13:65:e5:75:0c:f7:39:d4:48:4b:d0:b2:eb:
                    3f:4c:78:79:3a:31:be:2c:6e:70:fc:df:df:43:f6:
                    f7:0d:3c:99:2b:84:d2:ca:b4:c2:06:ed:69:90:5d:
                    66:90:a5:cb:8c:25:37:22:fc:bc:9e:f5:d6:e7:ab:
                    1a:95:68:f5:c9:35:4a:75:42:bf:38:b3:ba:d8:49:
                    8a:47:dc:b9:b2:52:cd:14:8b:40:86:76:af:d1:1d:
                    65:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:BC:1E:56:9C:E3:AC:F1:E8:FA:9F:A9:AF:CC:4A:AE:80:3F:B1:6F
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS13768.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.102.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:4b:74:14:e0:4e:8a:f6:5e:ff:4b:25:fd:91:ac:92:e0:b0:
         e2:7f:96:0c:c9:86:96:c5:c3:2e:32:e6:3e:24:25:00:67:ee:
         b7:96:e0:5f:c4:f4:b7:cf:77:ba:85:a9:d9:34:bb:5b:b7:b0:
         b3:9c:d1:ed:4a:5f:03:c7:4f:18:71:1d:5c:6e:b4:c1:93:3a:
         65:db:ec:a8:52:1d:39:6a:99:34:47:7d:c4:ad:42:9d:6d:28:
         6d:5a:b2:9a:00:09:01:dc:04:54:d3:ba:61:74:95:b2:b4:a2:
         5b:8a:39:27:49:81:e6:58:20:1f:da:ed:36:7b:31:27:65:2e:
         e4:58:1b:d5:06:95:83:27:71:26:7a:ff:97:61:23:11:b5:80:
         64:dc:33:37:5d:9c:a2:88:5b:ca:18:f2:cd:7b:02:7f:fc:5c:
         91:bc:92:7b:33:d9:bd:43:57:c5:79:e5:8f:d3:fc:57:46:bd:
         00:8f:7a:72:f5:c3:05:8c:a5:d2:d1:5a:6e:58:5a:51:aa:8b:
         5f:d1:5e:16:98:3a:c4:94:d7:a1:55:bc:a7:14:6c:fc:4f:60:
         21:0a:e0:b8:a7:d5:ce:45:7a:93:81:04:c8:0c:53:52:20:89:
         3f:c6:95:64:db:00:dd:a4:43:7c:ce:8c:fc:10:e2:8b:f9:62:
         c5:14:fb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:07:48 2025 by rpki-client