Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/688e7bce-fce9-398c-aca8-bbbe6ccd9806.roa
File:                     688e7bce-fce9-398c-aca8-bbbe6ccd9806.roa (raw, json)
Hash identifier:          nPrK2u3tZd1fKVo4JybCFloAA7a4pGgl3ejaMMFA3dY=
Subject key identifier:   B3:85:EE:4B:4E:78:97:9C:90:29:9B:85:62:B2:E6:93:BF:BA:6D:6D
Certificate issuer:       /CN=8753160d-30e1-48b1-afdb-394389cbcc81
Certificate serial:       010D0C9F4328584B8A7CCFCAACB37155DB0FEC00
Authority key identifier: F9:F1:BE:13:FB:A9:F8:E4:91:49:CD:66:0D:FD:65:4F:4E:F9:55:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/688e7bce-fce9-398c-aca8-bbbe6ccd9806.roa
Signing time:             Thu 16 Oct 2025 13:00:38 +0000
ROA not before:           Thu 16 Oct 2025 13:00:38 +0000
ROA not after:            Wed 14 Jan 2026 14:00:38 +0000
asID:                     21723
IP address blocks:        97.75.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/8753160d-30e1-48b1-afdb-394389cbcc81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/8753160d-30e1-48b1-afdb-394389cbcc81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8a:7c:cf:ca:ac:b3:71:55:db:0f:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8753160d-30e1-48b1-afdb-394389cbcc81
        Validity
            Not Before: Oct 16 13:00:38 2025 GMT
            Not After : Jan 14 14:00:38 2026 GMT
        Subject: CN=96b01405-d971-4124-a465-593873ed5a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9b:7e:b1:97:56:52:17:d4:93:da:d4:f7:00:
                    34:6c:cc:f3:bc:f1:79:cd:14:0c:23:6b:2e:c4:fc:
                    23:bd:c6:43:ee:96:32:b5:8a:d8:b9:55:26:f1:83:
                    db:18:a1:3d:9d:65:1b:df:56:19:30:4d:18:14:bf:
                    66:6f:db:e2:06:35:5e:94:bf:b8:b0:29:32:e2:de:
                    c7:a0:4a:9d:c7:f0:9f:83:7f:3a:e1:af:bb:89:c9:
                    84:de:64:b7:4e:bf:ff:cc:0b:9d:ff:24:43:c5:ae:
                    7c:0e:a4:dc:09:e6:be:f6:dc:10:a0:05:d6:b0:f1:
                    96:e6:f9:cb:16:66:9d:67:1a:10:41:6d:34:90:fe:
                    6b:fd:a9:54:4d:28:56:ce:d9:eb:35:31:c2:e2:e7:
                    07:27:09:21:b0:02:d0:bf:21:1a:82:c3:18:e2:13:
                    5e:69:34:2b:34:be:eb:4d:ea:ab:a2:5d:78:74:a9:
                    17:91:63:47:e1:48:0a:5c:25:aa:6d:6a:9a:26:4d:
                    5e:a0:19:d3:86:a8:5b:44:cf:98:07:53:42:63:8d:
                    fe:b0:2c:32:a0:eb:47:a3:1a:fc:27:46:d0:41:fe:
                    fe:ef:81:5b:83:9e:64:98:77:99:b3:f8:3d:77:ed:
                    27:89:86:10:96:02:f5:76:9d:10:34:ab:7f:47:0d:
                    2e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:85:EE:4B:4E:78:97:9C:90:29:9B:85:62:B2:E6:93:BF:BA:6D:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/688e7bce-fce9-398c-aca8-bbbe6ccd9806.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/8753160d-30e1-48b1-afdb-394389cbcc81.crl

            X509v3 Authority Key Identifier:
                keyid:F9:F1:BE:13:FB:A9:F8:E4:91:49:CD:66:0D:FD:65:4F:4E:F9:55:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.75.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:da:29:12:fc:be:ca:fc:2b:ac:90:17:ff:9f:24:28:06:85:
         db:eb:ee:99:53:00:06:07:46:ae:3b:0a:18:2e:70:2b:1f:e2:
         eb:ba:00:e8:2a:c2:25:66:63:dc:94:58:81:09:be:d5:fa:41:
         9d:16:93:7f:2e:62:e7:75:97:62:c4:44:75:b2:43:54:70:e6:
         97:89:22:1b:a9:8f:a7:47:37:0a:13:0e:d1:79:6e:41:4d:d3:
         cc:2e:19:43:a0:77:75:39:06:df:5b:f3:b6:7b:0a:56:c6:52:
         f9:61:f8:b8:dd:ac:5d:84:ef:b8:28:1c:61:e0:c9:6e:4a:92:
         36:b8:31:8f:62:b5:bb:cc:eb:f3:dc:fd:24:85:b2:bc:f8:a7:
         01:1e:4e:1e:fd:bf:fa:83:19:a2:a4:ad:6b:a0:7a:12:fb:5b:
         a0:12:87:ff:14:db:88:10:e4:c4:d9:20:b8:5d:bd:87:ca:77:
         ad:dc:d9:5a:46:d6:0e:f1:70:ef:83:68:f8:59:17:7f:57:c3:
         00:9a:08:9e:7d:f5:ca:3b:4b:a3:6f:24:a1:25:95:a6:3b:5a:
         fc:45:1b:45:a0:97:c9:c1:6b:e7:d0:12:07:31:a9:22:6e:c3:
         0c:15:e8:30:82:c1:eb:60:44:0c:6d:34:26:a6:9e:ea:71:4a:
         05:f2:4c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:31:29 2025 by rpki-client