Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0581a288-3b15-307b-af2f-6a012f7fe2d2.roa
File:                     0581a288-3b15-307b-af2f-6a012f7fe2d2.roa (raw, json)
Hash identifier:          om8nh+a8uIWpRut28eGVne7UE3Uk+Ybf8V0kF4eDN3M=
Subject key identifier:   20:E8:94:C6:25:1D:12:16:EF:EF:A6:2C:2F:B2:54:97:8B:C0:0F:90
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD23BE29DAD39D484E53596E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0581a288-3b15-307b-af2f-6a012f7fe2d2.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     701
IP address blocks:        173.75.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:e2:9d:ad:39:d4:84:e5:35:96:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=43dd43fe-e259-44c3-aa0a-7b4cc2c0f073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:10:51:26:ac:b9:d2:39:24:64:a0:ea:38:61:
                    32:4d:9e:60:55:2c:01:f3:c5:77:bf:ad:07:06:ba:
                    99:23:61:8e:13:db:ee:38:d1:ef:fe:cc:38:32:3e:
                    87:68:b3:5d:2b:54:37:d3:fb:d9:ce:49:f7:58:89:
                    c0:f9:22:cc:a5:79:85:d2:d9:6b:1c:d8:3f:70:c1:
                    8d:d0:3a:5d:c4:74:3c:95:bf:f3:57:e7:fc:1e:61:
                    6e:5d:7f:f9:67:7a:08:00:39:db:1c:6b:39:a6:d5:
                    20:14:e0:e4:78:93:66:25:15:6c:c7:62:70:d3:ff:
                    b6:eb:c1:09:d8:de:80:3f:10:5e:3d:c7:34:b0:cb:
                    70:20:f7:fb:bc:07:98:17:db:08:12:f7:b7:c0:d8:
                    b4:31:90:3c:bb:c2:50:4c:c6:56:a2:17:aa:1e:ba:
                    5e:4f:f3:2f:f2:71:b1:1e:c9:d8:46:50:dd:e4:55:
                    35:ef:68:c1:7a:cc:42:b0:7d:f7:a0:51:65:11:fb:
                    70:fa:b7:21:4c:f4:e4:36:44:35:a2:f3:d9:ae:e7:
                    ef:01:fb:5e:ba:3a:69:e9:98:bc:73:6f:94:28:fe:
                    f7:82:9f:56:94:35:f7:5e:ae:7c:f1:15:60:2a:91:
                    ea:4e:bc:56:9c:7a:6d:89:b1:36:2c:d5:0f:89:c6:
                    af:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E8:94:C6:25:1D:12:16:EF:EF:A6:2C:2F:B2:54:97:8B:C0:0F:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0581a288-3b15-307b-af2f-6a012f7fe2d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.75.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:0d:ca:37:94:9f:12:58:fb:be:7c:30:30:2e:3b:f9:c9:59:
         9b:58:4b:0d:26:fc:2d:5e:d1:14:0c:dc:48:fd:a9:32:8a:56:
         bd:dc:ba:ce:28:0f:de:b0:9e:c5:0d:8f:55:6c:e9:70:b6:53:
         3a:16:17:ed:a4:95:b9:73:c5:a5:7b:a0:25:df:23:b5:ea:66:
         b6:9a:d2:b3:2d:fd:00:e4:36:30:b7:be:36:75:9e:03:77:12:
         55:ed:bb:4d:9e:c0:b4:2a:5f:8b:2f:92:bc:8d:0a:62:62:37:
         d2:46:fa:3b:eb:bc:65:e6:93:8e:f1:0d:62:b9:93:9a:18:8f:
         6c:12:81:4b:18:3f:6f:f5:ae:40:19:56:ec:63:7f:1d:a1:2a:
         de:c8:4c:e5:3d:8f:dd:84:e3:27:4f:9f:70:0f:62:f7:80:b4:
         6a:8c:61:e7:62:9a:81:e9:c9:14:87:bb:28:26:2c:a4:62:21:
         83:89:97:70:2e:68:a9:01:7e:90:f6:5b:bb:09:38:1d:e9:2f:
         d1:88:25:50:d2:4a:ca:2d:2d:22:5d:1a:ca:8e:07:14:56:18:
         0a:41:85:0e:26:c5:a8:2a:9a:23:5f:2b:63:64:a5:34:3b:71:
         ed:cf:61:e4:09:50:03:5d:34:5f:51:a9:19:6f:f3:3f:5f:52:
         66:82:e8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:04:08 2025 by rpki-client