Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4f5f6c0f-9aa0-38a4-9373-8713ea5076e2.roa
File:                     4f5f6c0f-9aa0-38a4-9373-8713ea5076e2.roa (raw, json)
Hash identifier:          FTrqL6+xqCoZN3qReo9VKb0tmG0xw3ZfkeYgt5XXnXc=
Subject key identifier:   86:0D:B5:91:EC:7A:28:E0:59:F0:3C:4F:41:D2:72:4F:04:F7:11:DA
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA8D38CB31017D6782EA80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4f5f6c0f-9aa0-38a4-9373-8713ea5076e2.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36522
IP address blocks:        67.69.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:8d:38:cb:31:01:7d:67:82:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=ec7f8487-9637-4d1a-9a09-9c6f768d92d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1c:2d:b4:f0:99:f5:07:bf:1c:30:3c:6f:66:
                    7f:17:17:1c:d2:3c:4b:8d:be:e5:37:67:3a:85:e5:
                    de:76:f9:c2:45:e2:f6:28:c5:ab:52:bc:7d:98:22:
                    ba:87:81:1d:e0:b6:be:7c:59:74:30:79:bd:35:e1:
                    aa:58:ca:d3:a4:01:f6:c9:48:33:46:6b:a1:5f:30:
                    ce:e3:c8:2f:9a:c5:b2:76:ba:97:ff:97:40:6b:50:
                    65:87:4a:a2:d1:cb:98:04:a7:8b:4d:14:29:40:a0:
                    4e:00:23:81:8c:1e:7c:b1:88:8d:8f:f0:99:b3:64:
                    64:69:60:26:60:cf:07:a0:81:dd:bf:94:75:1f:07:
                    72:87:b2:a1:2b:26:e7:5d:7d:56:2f:29:12:ef:84:
                    cd:33:3d:e6:1a:94:d7:74:7f:47:7c:7d:7c:87:c8:
                    92:75:64:38:68:24:8f:05:26:4a:a9:a0:32:e0:bf:
                    62:74:aa:80:24:20:e5:0e:8b:40:7f:85:b6:2a:e3:
                    11:c2:21:21:ff:92:ce:42:d6:7f:24:85:5d:d9:66:
                    1f:31:d1:5c:6f:00:41:c0:87:ee:e0:a0:bd:3a:74:
                    49:1d:a5:d4:3a:52:1f:53:d9:fc:5d:d6:02:c6:bd:
                    d6:25:a3:84:fb:64:2b:70:18:1e:d7:f0:9e:a2:ba:
                    34:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0D:B5:91:EC:7A:28:E0:59:F0:3C:4F:41:D2:72:4F:04:F7:11:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4f5f6c0f-9aa0-38a4-9373-8713ea5076e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.69.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:0d:6a:8f:a1:4d:94:ad:46:15:2d:dd:17:7d:fa:b1:71:ec:
         cb:36:75:03:48:cd:46:7c:8e:d1:0c:e1:bb:46:b3:d9:a2:27:
         dd:58:f8:f8:7f:2b:9f:38:ab:5f:7a:36:5a:6e:c2:9f:c0:46:
         ff:28:46:f7:70:15:b2:e0:a8:8d:a9:e0:fc:b8:ae:78:1e:ab:
         59:4e:56:f1:de:30:68:d7:29:49:9c:0b:02:b4:a6:43:dd:15:
         5f:87:35:45:2d:e8:f4:50:25:bb:9f:65:3e:bf:23:7b:31:9a:
         28:79:94:83:eb:5a:95:72:df:b2:0a:1e:ee:e5:82:fb:7a:78:
         85:11:33:cf:12:a2:c4:ba:08:d3:ec:63:2e:59:7e:b0:ea:3e:
         29:3c:c6:c6:b9:d9:65:8b:7e:c9:de:c3:22:b7:84:79:7b:ad:
         1e:aa:71:a6:60:fc:a3:9f:eb:82:4f:e3:c9:27:c2:b0:c2:8f:
         b5:f2:7f:95:62:c5:8b:55:6b:48:d5:a0:56:e6:69:3a:11:2c:
         2a:e5:fc:75:28:f3:bf:b0:b2:d9:f7:74:5b:f2:9c:69:0d:48:
         74:c7:d4:22:5f:ef:6f:4d:42:68:6f:80:10:1b:c0:6b:13:7a:
         f0:ef:5d:0f:1e:89:7b:1e:eb:39:74:66:77:28:6d:75:1e:04:
         c2:d7:e2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:57:51 2025 by rpki-client