Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/13402c56-2c3f-33e2-8588-2b7482b36522.roa
File:                     13402c56-2c3f-33e2-8588-2b7482b36522.roa (raw, json)
Hash identifier:          TGxq5kWR8S7xseW5+JtvU52ezKWqFRJksF8QCwS4vDo=
Subject key identifier:   82:AD:8F:9F:14:32:0B:88:4A:8E:FF:C1:5F:57:71:A8:E6:D3:31:AF
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584AC9DBA66D65B321510B12BC00
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/13402c56-2c3f-33e2-8588-2b7482b36522.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     834
IP address blocks:        75.127.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:a6:6d:65:b3:21:51:0b:12:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=502f1898-7550-4d5d-9bd2-4ab40c52fa39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:63:5e:29:13:ca:1c:83:2d:38:cc:43:b6:eb:
                    2e:24:dd:8b:84:75:b2:6d:94:6c:39:80:fc:80:97:
                    b6:da:de:e1:d0:eb:7e:32:80:f3:c2:96:6d:16:2e:
                    90:e2:6b:b5:a1:8e:04:ee:a1:d7:6b:9d:22:ff:b5:
                    ee:81:99:4b:a5:dd:be:2a:c2:e8:1f:e7:fb:09:1a:
                    24:17:9b:f5:7f:c3:ac:7d:55:ba:d6:14:2e:fb:5b:
                    3d:2d:30:b2:57:f0:f1:b7:4b:ca:e5:30:85:f7:f0:
                    e8:0d:5f:87:cc:e2:38:f7:f7:92:79:47:64:7d:56:
                    26:41:3f:e1:c9:fa:a5:e2:ed:8f:f0:1b:d1:e8:4c:
                    69:cf:d3:03:7c:2b:55:43:bd:03:aa:14:78:fe:72:
                    f0:e6:48:02:b7:be:10:f1:4e:f1:50:38:c1:5a:5d:
                    e0:53:fb:46:f9:5e:31:a3:97:36:57:cd:ff:38:90:
                    20:42:8c:29:94:11:96:a1:55:e2:68:c7:a5:43:00:
                    c9:b0:9c:ba:5e:c6:7a:3f:e0:c4:4a:b2:89:45:36:
                    ba:fe:5f:38:d7:b4:9b:b1:49:59:70:6e:f5:a0:f8:
                    7f:a7:9e:8d:ed:29:6d:65:bf:34:b8:11:48:74:44:
                    d8:f8:db:59:90:24:f1:80:ca:5e:71:7b:d8:d3:67:
                    f8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AD:8F:9F:14:32:0B:88:4A:8E:FF:C1:5F:57:71:A8:E6:D3:31:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/13402c56-2c3f-33e2-8588-2b7482b36522.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.127.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:6d:a5:01:ef:28:ba:45:45:56:27:b5:57:62:16:93:5a:2e:
         ed:e4:3a:bb:ac:47:09:7a:ca:e9:34:09:95:54:28:1e:f3:fd:
         3f:12:c8:9f:a1:98:33:ff:3b:d4:87:dc:c8:45:1a:7f:be:6a:
         c8:b1:38:8a:89:7d:a0:58:65:89:08:88:d6:14:bd:b0:07:73:
         f4:40:7b:5e:b8:e3:a8:c0:0a:be:a4:69:11:d1:90:ae:67:9f:
         05:d6:83:0d:7e:c7:56:94:32:bb:77:c8:cc:fc:62:b6:6d:70:
         56:78:79:9a:26:af:27:58:3d:27:eb:2c:97:09:a0:22:66:48:
         e0:4e:fd:57:4f:ac:d0:1f:97:48:0e:27:2e:cf:02:6e:88:f5:
         fc:88:1c:cd:65:0c:de:ad:b9:9a:72:10:6b:03:ca:e6:16:4f:
         e1:f3:8a:06:f8:1d:98:72:88:bc:de:e0:ae:1f:e4:78:2d:7d:
         4f:9f:63:19:e3:4e:a3:8f:9e:d8:1f:52:e4:ab:a7:2c:a0:f6:
         36:6e:45:19:5f:93:bc:c2:83:a6:61:0d:89:ab:62:0f:17:53:
         3c:3a:5c:8c:ab:b9:9f:14:d2:49:bd:d6:0f:0f:5e:b6:02:15:
         37:0a:11:1b:70:f4:1d:fc:51:be:4f:92:14:8a:18:96:17:43:
         fe:a9:12:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:04 2025 by rpki-client