Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01e0986d-9323-3cb8-8235-25e5300654e6.roa
File:                     01e0986d-9323-3cb8-8235-25e5300654e6.roa (raw, json)
Hash identifier:          3aMlM6rtXh3EUhRURdK+RYeM5wELIa9S02PeP62M98o=
Subject key identifier:   FF:72:C7:AE:E6:C9:26:A7:16:82:55:CA:E0:C2:5E:55:2C:AE:8E:22
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A43DB0EF76B7D1F1E2E1A8500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01e0986d-9323-3cb8-8235-25e5300654e6.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     6167
IP address blocks:        75.224.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:0e:f7:6b:7d:1f:1e:2e:1a:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=a116be53-cc44-449b-858e-a5b9cdd7a9d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:de:99:1a:36:b7:23:43:fd:92:1d:5b:5f:0c:
                    eb:d8:37:79:d6:19:44:ef:40:d1:a7:66:e9:ea:95:
                    da:ac:7d:d8:5e:8a:6b:a6:39:05:17:91:a4:59:c3:
                    53:8f:15:69:d6:1f:48:0a:df:2a:26:67:ed:01:88:
                    16:2d:fe:06:f1:01:24:c7:90:41:89:00:15:4d:c2:
                    47:c5:0f:18:08:c7:5c:ca:da:01:55:b3:5c:db:bb:
                    74:30:4a:85:ca:e5:0b:46:b3:d7:c4:ab:9c:01:42:
                    41:a2:6f:f8:f2:e5:6e:16:28:c6:3e:a0:53:aa:2a:
                    34:e0:48:5a:05:1c:65:2f:34:b8:82:d7:3e:1e:1e:
                    99:8d:78:22:50:71:ac:56:61:df:5e:cc:58:27:58:
                    06:b4:16:94:db:7c:ea:f4:0f:8a:02:d3:95:9a:24:
                    2c:09:da:cc:65:38:ac:02:10:ba:21:d1:02:aa:98:
                    6a:df:2a:bf:90:7f:75:fe:f6:a1:0b:cc:6d:64:0b:
                    65:0d:5d:46:83:a0:99:f4:f6:e0:d2:2a:40:dc:a5:
                    e4:06:df:01:92:ac:c6:7b:dd:b2:89:3c:7a:bc:de:
                    82:4f:ad:be:2b:ef:ce:50:1d:2e:d9:4b:b0:dd:c6:
                    0f:47:d6:0f:80:1d:19:f2:ab:7f:7b:10:7b:7f:25:
                    9d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:72:C7:AE:E6:C9:26:A7:16:82:55:CA:E0:C2:5E:55:2C:AE:8E:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01e0986d-9323-3cb8-8235-25e5300654e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.224.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ea:bb:ce:ea:89:3c:59:c3:23:b0:22:f8:15:3d:f6:8e:b8:
         de:08:27:af:4e:34:cd:fb:1c:e2:fc:5d:0d:6e:25:0d:56:fc:
         15:14:4a:f7:9f:ed:47:d3:86:dc:17:82:6e:d1:1c:dc:5e:cf:
         d8:29:d3:a8:68:fa:70:83:16:72:fe:94:00:7e:77:d9:3e:f5:
         dd:8b:5c:c9:8b:f9:87:fd:f4:92:7f:7a:bb:a0:54:f2:13:64:
         e0:62:f2:78:05:9a:2f:4e:64:b7:5a:58:18:87:73:ba:cd:5f:
         18:94:97:03:42:5b:64:db:5a:6b:8f:7a:00:8e:31:2d:b2:13:
         5c:65:5d:24:7c:db:c1:74:d4:2a:6e:c1:e6:4c:42:d7:8c:cf:
         ab:e8:c1:49:f3:ff:fe:95:ab:e4:49:7b:3b:58:4f:23:99:f7:
         2e:b8:8b:85:31:9c:b5:a9:96:bd:be:97:24:c2:b0:1c:a0:e1:
         9d:7f:cc:9b:7b:66:2e:52:60:ed:96:96:d7:0b:68:f5:a9:c6:
         b1:18:3b:77:61:18:6c:c1:10:47:79:5d:cb:5e:bf:f5:c5:cf:
         b0:dd:64:e8:c2:b8:a6:93:dd:c2:19:3b:c2:c0:30:83:71:65:
         b9:ae:6d:60:4f:5c:1c:9f:a0:f4:78:5c:5e:14:6c:e5:97:b3:
         e2:0b:22:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:07:42 2025 by rpki-client