Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/afa9547c-5323-3ad1-9267-888c91c6c774.roa
File:                     afa9547c-5323-3ad1-9267-888c91c6c774.roa (raw, json)
Hash identifier:          zHk7rsqNJYT6SHhI5wiQB7nbzLOWVFY9/W3RuHizufs=
Subject key identifier:   2A:CC:1D:79:7F:8E:5C:D2:B1:85:21:FF:43:EC:16:C9:99:33:8A:16
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F521DED068A7AF4596AE580
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/afa9547c-5323-3ad1-9267-888c91c6c774.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        75.112.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:1d:ed:06:8a:7a:f4:59:6a:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=099ec990-1416-4643-b41a-44f395f488a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2d:1e:c7:ae:b4:f8:b9:e3:da:61:92:74:77:
                    d0:68:84:2e:4d:fb:f8:8d:b2:06:d4:a5:81:aa:f9:
                    53:d1:51:2c:a1:46:43:cf:ab:e4:11:b8:d6:76:10:
                    1c:ac:6a:56:21:2d:49:ff:be:4e:36:cb:1b:56:9d:
                    e3:f0:06:b9:11:55:96:34:1f:d4:b5:2d:64:d8:70:
                    bd:4f:ab:d7:79:3b:eb:cb:5e:fd:85:07:d6:68:51:
                    49:19:0d:35:3e:a3:2c:9c:60:1d:bb:d0:14:54:45:
                    44:87:74:9d:1a:95:4b:89:a1:a6:42:09:e7:06:73:
                    f4:ed:3a:87:89:e3:ec:ff:13:7e:6e:b1:e9:58:ae:
                    7d:78:5d:9c:90:27:68:45:49:98:96:fc:42:59:fb:
                    65:b6:72:6c:f6:ef:32:35:99:fa:49:71:11:dd:79:
                    ff:12:1f:d2:dd:87:e6:11:f6:a6:c4:72:32:bc:b4:
                    56:3a:fe:dd:f5:03:63:55:24:27:63:d0:8b:3e:a1:
                    07:ca:39:22:6b:71:66:95:d3:74:53:2d:98:b1:24:
                    1b:1f:e1:22:5b:b1:1e:7e:6c:8c:29:2c:82:d9:4a:
                    3a:5c:17:7d:e3:c9:2d:bc:db:31:82:86:d1:e5:13:
                    b2:0e:0b:00:96:1a:6d:80:57:ec:82:16:e2:6c:4d:
                    ba:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CC:1D:79:7F:8E:5C:D2:B1:85:21:FF:43:EC:16:C9:99:33:8A:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/afa9547c-5323-3ad1-9267-888c91c6c774.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.112.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ca:95:7a:a9:01:88:3d:1e:ca:ef:ab:34:80:aa:90:0c:0e:
         a9:b7:7b:40:ff:4a:82:ec:e0:8b:2e:85:e4:0c:23:81:bb:48:
         09:1a:ba:9a:04:ad:ad:93:6f:6b:52:6a:45:48:92:f6:05:1c:
         02:1e:08:29:f2:8c:cb:84:45:f4:f0:c7:62:a1:fe:f7:7a:19:
         f0:47:b3:54:59:05:4b:1e:07:10:77:4c:ee:37:c0:d5:b3:50:
         a4:2c:0c:bf:b7:88:97:99:5c:c1:a9:97:53:13:b0:96:6c:75:
         10:a5:57:26:69:5d:4f:30:34:3c:86:d9:d5:75:78:41:65:a1:
         e8:61:76:4f:44:af:04:74:6b:3b:82:92:cc:9e:ee:30:eb:7d:
         80:71:52:4f:98:48:8f:48:8b:1d:7e:19:87:4b:0c:ac:45:6c:
         23:1a:29:e5:75:6a:76:27:a5:6a:23:40:0e:bb:93:3a:df:fd:
         d5:47:e4:7d:d6:f7:00:be:9d:ab:50:5e:f4:92:36:47:c5:ac:
         3c:9f:8f:be:30:b2:27:88:1d:12:42:ca:03:f3:c9:b0:db:a9:
         00:93:78:70:28:1f:7f:cd:0e:16:c6:d6:60:9c:d4:55:f4:ce:
         54:1b:b9:7e:ad:8e:ca:71:e5:14:22:e3:19:8c:55:13:30:cc:
         a3:b1:ee:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:23:59 2025 by rpki-client