Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/30a46793-1fda-31cc-b73a-d4498930b67f.roa
File:                     30a46793-1fda-31cc-b73a-d4498930b67f.roa (raw, json)
Hash identifier:          HhVsvz5l2Kn5qvhkP2Y5sRCJ6iLmTB7IyPwxzBl6ZX4=
Subject key identifier:   10:93:7B:C9:92:77:DA:E6:73:CE:D1:EC:86:5F:56:BC:6C:BD:36:A3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A43DB0FA684A29FBB22F5EF80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/30a46793-1fda-31cc-b73a-d4498930b67f.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     6167
IP address blocks:        75.225.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:0f:a6:84:a2:9f:bb:22:f5:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=0a304baf-312a-4337-a619-b1d9630a4c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:65:00:e7:3c:07:ad:3d:b5:68:82:e5:12:1f:
                    1f:4d:3a:f3:05:eb:97:69:fc:f4:87:7e:2d:69:58:
                    8c:f3:81:93:4c:22:71:a2:29:13:b1:d0:7f:00:09:
                    29:ed:53:40:50:a9:17:3e:04:99:9f:13:1e:fe:3e:
                    1e:8c:84:c7:30:ae:02:52:b4:53:17:dc:37:6f:e6:
                    66:9f:8e:28:49:f3:9e:2c:35:8e:b1:27:8c:ba:88:
                    3f:42:88:18:2d:52:30:29:98:91:0b:88:e0:63:dc:
                    17:ba:9a:d1:34:b9:61:00:eb:6b:7d:a7:f8:ea:45:
                    91:84:1c:84:cf:60:e3:62:8a:02:9a:13:c2:16:18:
                    74:97:92:31:df:f3:59:86:19:65:2f:a9:3a:f8:3c:
                    ee:8c:d8:15:14:30:80:db:19:e9:37:75:12:c3:54:
                    b8:78:3c:ff:0a:7b:43:43:c5:d9:80:b9:a1:3b:47:
                    b2:a9:bc:6c:4e:f1:6f:98:8f:2e:18:69:7d:a4:c9:
                    17:b0:29:81:c0:86:85:7e:47:2f:7d:49:b9:41:60:
                    35:bc:71:40:53:4e:b8:71:81:c0:b6:0e:d2:e1:92:
                    d7:d3:2b:5d:72:a8:6e:c8:8f:71:ad:92:5d:18:3a:
                    0e:32:1c:94:33:96:33:88:06:ff:78:9f:87:c9:cb:
                    ad:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:93:7B:C9:92:77:DA:E6:73:CE:D1:EC:86:5F:56:BC:6C:BD:36:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/30a46793-1fda-31cc-b73a-d4498930b67f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.225.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:61:61:88:d1:a7:ba:80:01:9a:4f:70:73:94:8c:bb:56:6c:
         63:11:cf:45:8d:81:1d:32:23:ff:32:30:9c:54:c1:04:86:fc:
         4c:e8:53:96:75:25:67:d7:76:3f:52:ad:8f:fc:87:e6:47:cb:
         43:69:e8:9d:c8:f9:1a:62:a2:3f:78:0b:b0:ca:9a:63:70:5c:
         af:30:77:81:a9:75:e5:0b:4e:81:d8:9d:9a:80:f3:ca:53:07:
         d0:78:b3:3c:48:c3:35:c0:c8:8a:9d:85:12:be:e4:df:76:81:
         92:66:7a:a4:ea:10:da:f5:71:34:a8:d9:65:e4:8d:7c:1c:5c:
         25:d9:34:b2:66:2a:5f:d8:18:0a:67:02:7c:2b:80:81:58:cb:
         a4:1c:98:42:b8:08:73:57:e6:59:5d:ab:fa:2d:92:a4:4f:ff:
         f4:ea:8b:9f:ef:ae:e4:61:67:f1:85:11:89:aa:7b:7f:00:5b:
         01:ab:0e:a3:71:52:0c:e6:1e:81:f7:6a:23:b7:2d:a9:f1:b4:
         40:14:a7:8a:1b:0c:89:b0:60:f6:be:43:f3:b8:0b:1f:3d:07:
         50:59:ca:44:66:18:c0:d2:58:c3:8e:ff:9e:a8:02:f0:37:1d:
         93:d3:e8:e5:66:0b:e0:ef:cc:fa:ab:f5:a1:95:16:a0:ad:24:
         59:3b:16:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:44:46 2025 by rpki-client