Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/712c4f53-eb4e-3bbf-875f-dc639fe1bb7c.roa
File:                     712c4f53-eb4e-3bbf-875f-dc639fe1bb7c.roa (raw, json)
Hash identifier:          yhVQKeYbtIa0KpKW+2Fi0+qZq25CVULHvcXaynp4HlA=
Subject key identifier:   CD:58:DC:33:1C:85:93:F4:BB:A9:BD:8D:B1:48:37:11:63:8E:9D:AD
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584B64CE669DEA8BDEDC77DF0680
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/712c4f53-eb4e-3bbf-875f-dc639fe1bb7c.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     3477
IP address blocks:        137.75.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:66:9d:ea:8b:de:dc:77:df:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=c50fcb65-e68f-4c4e-9809-3d9afdc81f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:89:06:a3:14:90:d7:cd:d4:4e:94:3a:2f:26:
                    85:3e:ce:80:28:22:7c:55:9e:71:58:59:f4:24:cb:
                    79:42:e1:1a:47:62:2d:9d:ca:35:27:56:85:86:f0:
                    26:52:51:87:30:88:51:f2:22:37:fc:cf:6f:c6:fc:
                    49:74:69:e2:90:b2:95:7c:11:80:94:de:33:8d:28:
                    8d:c1:00:93:6a:d5:5b:c8:3e:6e:42:dc:8f:5e:c3:
                    8b:a2:39:ee:b6:94:8d:8e:c9:af:0f:ab:b8:66:2b:
                    47:6a:59:0b:28:2c:45:d4:6c:12:ae:c0:45:39:eb:
                    3f:97:c2:5a:6c:d8:5b:a4:73:87:56:40:0c:cc:72:
                    00:ef:c5:51:03:03:34:1e:b9:ca:2c:cf:12:65:71:
                    d6:a7:00:ad:8f:e2:b9:6a:ec:83:e6:d2:8e:3d:e6:
                    73:68:3f:8d:1a:7c:a4:57:36:21:a9:d5:ef:49:28:
                    1f:a3:80:f9:7b:08:4f:5d:4e:96:aa:23:c3:55:c6:
                    3c:9c:7a:f7:3f:2f:8d:cd:45:fb:6d:a2:d9:24:ae:
                    5e:0b:d8:78:e4:24:b5:69:b2:10:d2:22:3c:e6:71:
                    20:94:d2:53:58:11:4a:32:99:ce:b5:64:61:4a:89:
                    e5:c1:a4:c8:59:04:f7:f4:34:09:d6:75:4d:41:60:
                    0c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:58:DC:33:1C:85:93:F4:BB:A9:BD:8D:B1:48:37:11:63:8E:9D:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/712c4f53-eb4e-3bbf-875f-dc639fe1bb7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.75.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:71:64:b7:27:cc:b6:b5:3c:a6:dd:0c:13:25:4d:b1:ef:07:
         99:3e:79:7c:f4:12:c9:77:57:17:58:95:76:c9:75:b8:ab:fe:
         9c:ba:61:40:a8:5f:78:7d:5c:13:fc:c9:6f:96:33:fe:08:61:
         8b:fa:c4:65:e7:c8:2c:c6:53:7c:e9:06:42:c1:4d:3f:12:92:
         c5:a0:8f:9b:e5:55:1c:eb:6d:56:9c:5d:d6:a7:ef:7f:93:1e:
         d9:5d:81:f1:8b:77:c1:e6:1a:fc:d7:36:9b:0c:6c:7e:74:5f:
         44:b8:66:fa:3d:0c:19:84:4f:8f:d4:8b:85:8a:7b:20:f9:3d:
         4c:45:ff:94:ec:16:8e:12:f6:32:34:a0:91:5b:40:5a:27:d9:
         82:b9:9c:24:6a:59:f9:63:fd:3b:d8:4a:39:e8:55:44:65:69:
         90:80:45:2b:f4:38:14:63:a9:b8:4c:1e:43:7e:7d:30:7c:eb:
         b9:aa:17:e4:27:a2:ed:b1:2a:81:09:b4:ca:af:ec:1e:53:c2:
         ab:4e:aa:d5:f3:c4:dd:d2:e0:81:46:88:42:32:58:f1:96:61:
         78:64:2e:eb:06:f7:6e:46:46:2c:d6:7d:07:b6:97:3b:c8:fc:
         be:ae:b5:9e:2d:b7:62:2a:7a:35:e4:d5:38:f1:31:8f:d6:0d:
         a9:93:4b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:23:29 2025 by rpki-client