Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0fb8a51b-157d-3bd0-b7e6-410754b8878a.roa
File:                     0fb8a51b-157d-3bd0-b7e6-410754b8878a.roa (raw, json)
Hash identifier:          dmtbohLW0fEAnkz7H8pyYQKlAU3mo7Yd/n5zhVH3/98=
Subject key identifier:   0C:46:23:81:58:B2:10:13:B2:94:D5:A5:BA:06:23:DB:CC:83:93:CF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A43DB10F0A02DA5D8758F5690
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0fb8a51b-157d-3bd0-b7e6-410754b8878a.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     6167
IP address blocks:        75.229.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:10:f0:a0:2d:a5:d8:75:8f:56:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=a233f431-ad7b-4daf-80ca-127c1ee4dc87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c9:a1:bf:bc:35:15:94:18:bf:fa:db:1f:9d:
                    e6:6e:12:72:e4:c3:3b:48:d2:6d:dc:56:b0:b0:5f:
                    e9:b0:36:5e:d4:b9:82:73:51:0f:db:ad:78:8f:dd:
                    56:42:d3:54:33:8f:43:32:6d:4d:43:d7:7a:26:9e:
                    e5:8c:92:9b:08:db:01:62:28:65:6e:47:17:6b:b4:
                    85:88:58:62:7f:46:1d:5e:a8:31:f8:10:2c:26:a3:
                    f0:a6:55:10:6c:0f:e7:c7:c9:b5:96:7b:bc:eb:dc:
                    a5:48:31:0e:a8:97:07:98:e0:0a:98:16:dd:b7:28:
                    a5:df:7f:dc:bf:89:ba:e9:d4:68:43:f7:79:78:48:
                    33:b6:95:e9:13:2a:2c:95:fd:01:b4:12:ee:00:b1:
                    5f:88:ca:1d:45:36:80:a8:b3:86:b3:de:54:14:f6:
                    68:12:09:40:f0:5b:7f:1d:1a:2e:0f:b4:bc:5a:50:
                    d3:52:5b:58:70:d6:28:65:2e:e2:4f:a4:df:18:53:
                    58:ba:c5:0e:1c:81:06:86:f3:4b:e5:62:7d:33:34:
                    db:20:d9:33:83:58:5f:93:0c:58:82:da:4f:14:71:
                    be:35:5f:6f:ab:23:db:6a:01:a5:01:4a:74:51:d9:
                    8c:0d:41:38:75:44:4f:36:ea:d0:c5:86:da:08:0b:
                    53:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:46:23:81:58:B2:10:13:B2:94:D5:A5:BA:06:23:DB:CC:83:93:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0fb8a51b-157d-3bd0-b7e6-410754b8878a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.229.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:10:6c:02:a2:40:1a:88:b9:3d:ab:85:bd:28:77:cf:22:5f:
         33:b4:fa:75:7d:9f:14:51:07:b6:72:ef:7d:a8:6f:41:1d:f9:
         08:10:3b:06:40:7c:15:12:32:bd:ae:2c:f5:58:4d:11:cd:ab:
         51:04:20:9a:0b:04:6e:25:ad:89:b2:09:4b:b2:d6:26:82:f8:
         cf:cc:79:0b:43:8c:5c:07:07:c1:47:ba:87:17:5e:b0:51:5f:
         82:f7:20:4c:e5:d2:ef:7e:b4:c7:e6:91:a6:a0:b5:42:df:65:
         e7:21:89:40:fd:4c:47:15:29:63:21:1e:c9:48:84:c4:fc:0c:
         ed:2a:9a:0f:0e:f2:2c:0c:6e:85:40:03:01:4a:b2:ac:02:40:
         4d:bc:4d:c7:c0:aa:9d:b9:37:70:07:a3:8b:46:4e:e8:4c:4f:
         a2:9e:94:95:f8:2b:79:6a:55:21:5f:bd:cc:f3:14:40:b1:e7:
         b8:5c:12:51:dd:83:2f:0d:c7:7f:84:7f:c1:bd:9f:ad:07:d8:
         f6:e2:cc:cf:bc:0d:1d:0b:5c:e2:1c:24:7d:e8:91:26:e9:d0:
         41:73:f5:5c:66:fa:96:4e:62:df:9e:21:25:70:ea:81:7b:7e:
         04:c0:d6:84:48:0c:78:a1:16:72:a4:44:41:b3:17:b2:0e:ac:
         37:d1:d6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:06:31 2025 by rpki-client