Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9a00da2e-36b0-3a1c-9e3b-6b742526b6f2.roa
File:                     9a00da2e-36b0-3a1c-9e3b-6b742526b6f2.roa (raw, json)
Hash identifier:          xqKbtLB5Wb2OAweO5PnmDKvYqBCJYRPwhjRHTVUucBI=
Subject key identifier:   5B:77:77:50:7A:AF:F5:65:58:FF:76:18:93:58:BE:E0:49:AA:5F:A2
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F524B2AFA99DD399AD3D2C8
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9a00da2e-36b0-3a1c-9e3b-6b742526b6f2.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        75.114.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:4b:2a:fa:99:dd:39:9a:d3:d2:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=1e4c71b3-bfa3-4e55-afd1-ab75c1b08cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5e:03:b7:f9:bc:a9:df:06:45:4a:a7:46:72:
                    29:bd:aa:94:ed:d2:99:4a:27:15:5c:2f:16:d8:e8:
                    b8:90:8f:06:b1:e7:ba:02:d9:87:d4:52:ad:37:02:
                    6b:e5:04:22:a3:0b:fb:7f:5f:d0:c0:10:78:8e:e5:
                    7d:41:08:0f:fe:59:d7:3f:09:ee:59:2e:cd:7f:2e:
                    5d:ad:44:7f:e7:31:6e:29:c1:f9:bf:d5:4b:96:ad:
                    63:b2:7d:64:e5:98:d6:55:26:91:d9:85:e8:07:f2:
                    7f:3d:3f:c4:27:53:cd:43:90:dd:97:84:75:fd:15:
                    34:86:9c:de:8a:b9:39:17:48:63:ca:79:27:8e:be:
                    d2:4b:bf:6a:96:b6:28:aa:d8:3d:bb:f8:dc:26:c7:
                    31:84:02:14:03:b1:49:4a:90:71:ca:1a:3c:53:ac:
                    1e:30:ba:2f:ab:a9:47:c4:bc:63:f8:eb:e6:a6:8b:
                    a4:4f:3d:45:3b:16:dd:0f:6e:39:df:c1:ae:a5:e1:
                    62:86:1f:4c:d4:0d:dd:9d:44:ff:e6:3a:b3:bc:10:
                    e3:a4:01:eb:3e:ef:81:09:e7:f8:0b:9e:f7:2d:74:
                    8f:bf:7d:37:c8:91:ed:31:2a:ec:9d:d0:c7:03:20:
                    0d:ec:79:3a:e5:dd:47:f6:2b:ef:43:57:e4:4a:c9:
                    d1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:77:77:50:7A:AF:F5:65:58:FF:76:18:93:58:BE:E0:49:AA:5F:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9a00da2e-36b0-3a1c-9e3b-6b742526b6f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.114.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:b9:7f:30:7a:7a:43:24:e1:14:26:85:6e:35:6f:5b:fd:69:
         bc:cb:e6:c7:63:a2:6a:db:d5:e9:fa:a2:11:8d:6a:96:d5:b8:
         fb:82:47:a1:6f:b6:91:b4:ca:39:9e:ff:14:70:7a:da:b4:41:
         7b:27:2d:0b:d1:d5:21:0a:4d:1c:22:58:cb:35:68:2b:fe:7d:
         b0:86:a5:9d:81:5c:0f:4c:de:f1:18:eb:80:1e:b5:c3:cc:1f:
         87:07:e3:e1:56:00:f9:39:c5:75:11:61:b3:23:d0:bb:d8:12:
         d9:e4:f4:e8:0f:3e:df:22:c7:c3:ac:b0:de:ce:3e:47:5a:37:
         24:66:b2:f9:15:b8:18:1c:f3:8a:bf:dd:77:f5:d6:be:9f:31:
         f2:20:ce:74:ba:59:84:7c:46:ee:04:f7:1a:39:93:f1:37:fb:
         f4:fb:11:6c:d9:f7:b3:6f:d6:47:f6:50:35:8c:dd:46:b8:4c:
         b0:fc:17:04:50:be:e8:3c:46:aa:c9:4b:6f:00:4f:f4:22:ab:
         73:dc:c6:fa:e3:0f:97:6a:82:9e:45:ad:37:62:bf:44:b8:58:
         66:95:1d:5b:9d:02:96:c8:d7:fb:82:66:93:34:9f:df:3a:58:
         2d:a3:c3:cb:15:66:51:22:ad:b1:b0:26:10:28:c7:62:5e:9c:
         ea:05:c5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:17:36 2025 by rpki-client